last executing test programs: 22.870288783s ago: executing program 0 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e0003000000030000000500070008000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 22.647853203s ago: executing program 0 (id=2926): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x2e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socketpair(0x1d, 0x2, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8) 22.453049106s ago: executing program 0 (id=2931): r0 = socket(0x2, 0x80805, 0x0) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000580)={0x40000008}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r3, 0x0, 0x7fffffff}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x5, 0x8, 0x7, 0x48}]}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}, @IFLA_TXQLEN={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x4c}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f0000000300)=0x28) 22.179858488s ago: executing program 0 (id=2934): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000140)=@null) (async) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x18, 0x4000, r1}, 0x18) (async) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'ip6gretap0\x00', 0x200}) sendto$inet(r1, &(0x7f00000003c0)="62f66daf3816df197a4da62b3a6f512689dee7ab5f090e96b4db7497176a4aa2b5cd8503411c58361426b863524e76169e88428e14fa216a8347ca1cb858dcb97e785e8c99d58b7d247538c43e4a0f31cce070ac98bfecc037e081fdad79281c752285ec1ec57bfbab9f0755fb1ec429135ef9a48e6906b0eef31938032c6eb5e9b6e00759f08dcac3f344115c5da4f0583d38dcc9f1b1e81de21b4388d6068742d3d9c7007b67d6f9d07bf7a5", 0xad, 0x0, 0x0, 0x0) 22.119186226s ago: executing program 0 (id=2937): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ef}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r2, r0, 0xfffc, 0x0, 0x0, 0xc2, 0xff, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) 22.002086104s ago: executing program 0 (id=2941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x8911, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4f0000ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c915077dd984784f531853d184c539dcac54ff2e955ba3fd1c00b016be57263b9695d15c56bbfcc195f2becfab2fc273ea8aee645f9062c6ac6c6c02f59935620d42a59a7e285c4e602b45acbf3e1bfd871e98e4f37b281b5e13b55a48e24a9981b78fe161a9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36aac1967ea538fb4d8ca3ddf9884b543d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fdc") r1 = socket(0x1a, 0x3, 0x40000009) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r4]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) sendmsg$key(r7, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000140)=ANY=[@ANYBLOB="023b00"/24], 0x10}}, 0x0) recvmmsg(r7, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getpeername(r8, 0x0, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@buf) 18.664061502s ago: executing program 4 (id=2979): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.571166832s ago: executing program 4 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0xfffffffd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 18.39212205s ago: executing program 4 (id=2987): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002740)=""/4075, 0xfeb}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000001740)=""/4090, 0xffa}, {&(0x7f0000003740)=""/4089, 0xff9}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000280)=""/123, 0x7b}], 0x5}, 0x8000}], 0x3, 0x40002122, 0x0) 18.216319169s ago: executing program 4 (id=2990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0x6, 0x4}], &(0x7f0000000340)='GPL\x00', 0x7, 0x32, &(0x7f0000000480)=""/50, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0xf1eb, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x1, r4], &(0x7f00000006c0)=[{0x0, 0x1, 0xc, 0x5}, {0x2, 0x2, 0x2, 0xb}, {0x5, 0x5, 0x1, 0xa}, {0x1, 0x4}, {0x5, 0x5, 0x6, 0xb}, {0x5, 0x3, 0x2, 0x7}, {0x4, 0x4, 0x9, 0xb}, {0x1, 0x2, 0x6, 0xc}], 0x10, 0x4}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r6, 0x6, 0xb, 0x0, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@fallback=r2, 0x0, 0x1, 0x5, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={r5, r7, 0x25, 0x10, @val=@tcx={@void, @value=r0, @void, @void, r8}}, 0x1c) 18.146807161s ago: executing program 2 (id=2991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}}, 0x84) 17.966468247s ago: executing program 4 (id=2993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800000}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2ecb608bde404aaa}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}}, 0x4c041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0xf31, 0xf7fffffb, 0x3, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0x0, 0xffff}, {0x9, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0)="cff0341e0b41db74a405ffa10e1002d577765f41b781467514022f4a045d4996fbdc5bf11316a3ec191f09f25a200968160fec4961747f663c9c6c2d122e5628b5130d5d5181aff28dcdb9b55e220cf0bf6e3562a609448c18223a524ac48b0a05561fe9d2b5588895313d1685", 0x6d, 0x8004, &(0x7f0000000740)={0x11, 0x1c, r12, 0x1, 0x5, 0x6, @multicast}, 0x14) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r13, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="080029bd7000ffdbdf25200000004c002d800500010001000000080002000100000008000300060000000800020003000000050001000000000008000200010000000500010005000000050004000100000005000100030000001c002d800500010015000000050001008000000005000400000000001c002d80050004000000000005000100800000000800020001000000d2e12f8735979b344a7a8c73ac5fb3b74390e355a325790f2426e9da1c336517285fbb12be286b5f5c812d075084a58717433fb2072a8429cf519a58ca2fa9ae94dfe85f11bb4525eab7c1fbdb7cc2dff797f8bd57058c2de4"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x3c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x36040809}, 0x4000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000229bd7000fddbdf251000100008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="050010000f0000000c000600020000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r15, @ANYBLOB="0c0006000100000001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000801}, 0x24000080) 17.826523013s ago: executing program 2 (id=2996): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000340)='FREEZING\x00', 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r2, 0x0, 0x0, 0xa019, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r3, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@ifindex=r6, r4, 0x35, 0x4, 0x0, @void, @value=r4, @void, @void, r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x32, [@broadcast]}, @generic={0x0, 0x3, "96"}, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0x4, [{@multicast2, 0x9}, {@loopback, 0xfffffffd}, {@empty, 0x1}, {@private=0xa010101, 0x2}, {@multicast2, 0x9}]}]}}}], 0xc8}, 0x0) 17.790462296s ago: executing program 4 (id=2997): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, 0x0) read$nci(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x22, 0x5, 0x9) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_newroute={0x34, 0x18, 0x8, 0x70bd2b, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1200}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0b06000000000000000030000000050036000300000008000200", @ANYRES32=r13, @ANYBLOB="0500350000f3f000050033000700000005003400"], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000228bd7000fcdbdf250e00000008000e00020000000c00060002000000020000000800e9580e01000100000008000e000c00000008", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x200080c5}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 17.73856325s ago: executing program 2 (id=2998): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x7fff, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7001000800000000000000000000000000000374d99f400000000000000000000000000013c0040af44ae88673c"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB=' \x00\t\x00', @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000200)=0x1, 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@phonet={0x23, 0x9, 0x4f, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) syz_emit_ethernet(0xef, &(0x7f00000004c0)={@multicast, @multicast, @void, {@mpls_mc={0x8848, {[{0x3}, {0x4, 0x0, 0x1}, {0xa}, {0x3, 0x0, 0x1}, {0x6}], @generic="3f5a3962a8b2406ecef3d02c2849bedf92065104f7bc5baaf61477ee9770f4d208b94083fa02df5d030e245eb9bd14021a02a37b4b5e89ea3a359c565ee635235b55c1fa802b834eeb341f0e2058b60f9d5fd0eb3b1bd4d80deb222e11f8a74a6a4f422b30bb2be3328af67569ed815201427b4df09c0eaba2e93b93c5877f8859c89f0e10a7ba5681d2545ecfeb5a02ac154cce9c482fb3b7f00dfb314b24bf61f000596fd970f6e0175a151c02dc93ea4019801264d4d3956827548e433cb02f4e67ffcb9b83e6535c7bd991"}}}}, &(0x7f0000000140)={0x1, 0x1, [0x46e, 0x135, 0x623, 0x85c]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) 17.577279061s ago: executing program 2 (id=2999): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@setneightbl={0x14, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40080) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xc2924e2b4b46f3d6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1401"], 0x114}], 0x1}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.340047321s ago: executing program 2 (id=3003): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 17.185116442s ago: executing program 2 (id=3004): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f000017c000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x1000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000001800)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="24000000010001", 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 16.455738573s ago: executing program 1 (id=3010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200009700000000000000000000000098ea89275387af87bccbe26ad24d046475b9567025921b417930098caad8a590c0c12e4453b2f3c1f014db9d02fbf879d3aefa36f4fa9bb7c651752e8b6abe2b697afb792853ebb0d7bac052c2ccb037a5ca6da0c64984401d25320be0fe156e94d3459197e48214c51c08d38d916fd9c860d28509240fa66de9c73317557c68c52186591d7198d21d0b4b0a5382d0239503eb53baf473cb772f30e43ac5762adcaa7e78529d7ddb"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000380)={r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x2}}}}}, 0x0) 16.450506629s ago: executing program 1 (id=3011): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f00000010c0)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0xb6f9b87664032cc0, @remote, 0x4e24, 0x3, 'wlc\x00', 0x38, 0x7, 0x71}, 0x2c) 16.367128852s ago: executing program 1 (id=3012): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, 0x0, 0x0, 0xffde, 0x0, 0x0, 0x4400046}) getsockopt$packet_int(r1, 0x107, 0x11, 0x0, &(0x7f0000000140)) 16.301050341s ago: executing program 1 (id=3014): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x161, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x31c, 0x401}) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r1 = accept4(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000140)=0x80, 0x80000) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0xc, r3, 0x0, r1}, 0x10) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x15, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000440)=@in6={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="4dc16ab51acc31fbaaa898", 0xb}, {&(0x7f0000000500)="f97ec7d9645ac5cbabe2892ee1cd35d0d888e423bdddc3a432e749fd7c3540f302a56722d5ab795bd8be6965eba7baa767d078bfc3956dcd96fa90e97ef36dd09833e6e7acd2c6e5eba952959ce3f2b4bf0be0d1c7e64f4b64621262f1e84c455fb8499ba0aa2c3a7392197217acaa29f1086a993b0f953a163564bc4bf3de2134f9f1", 0x83}, {&(0x7f00000005c0)="f133bf05d8be491069c8a6f9196130a30eef43d4ce786770e32dab6fa20f52431aeef9ef0e7a583fe1f5e34ee36123985f8832934488b7278df64b59e9ee87c03d7ff496e7d03bf0dbac5700f1325abff21c9eb9b753fe11fbace6e6055f85c549b2e3cdb4b49a3f0848f18d8e0647fba43935c4d44d17f78cb775ab1d773e18a2a94e3994bfef9affde4c6eac205d59870d44c44c59ba6a16046d58baf406f796061ca80f3863e5b3dcccee3cd8acd05a11e72cd5a494a79ca24adf7ded211b194f90d7576a4dd5510b7e63f6066ad705064cbf232a938c3f", 0xd9}, {&(0x7f00000006c0)="abdc25dae459b4d216cf7a98d7943c86f5a09940c9157a2ad731df408e6fd9a590009f4a7923d979daffdefcd40e20ca9ac7fcdcfd3c667388252bef7037a2e812846391a99bfb1ab8dd0aff1e8c51acf9ba8d3c7c97e5", 0x57}], 0x4, &(0x7f0000000780)=[{0xb8, 0x107, 0x0, "656030419702ab939544e6912970e3691d9fa55b41aa37908fab74b8aeba462b111cc42f8ed99e0510756a1a236bc239788b7088d2f45209f61821b412be1161eb0c96042f513345d17493e3810a5d1fcbcf9874b778dc5ea16c3fa2e3fc37983542dbffa52aead4b99ebab02d601701b00e9ac7b21700a5ee6264b47f70df532bad6d54a5bbc3a48a4fad98a1e8a33ce84a4a3a7ff0cba8594a89453d5a6130a2b0e9"}, {0x90, 0x102, 0x0, "69b9e97e1740fecf9204ba8cda39a4a8ca4b139ca2d3e490c2d99ae7f640526453960c170f1d696259f34bcc6c4106b1469ac3c2e8e5b90824081da3304283b9d96ab3dc0efe0d7daac657447e459a479965b976f029ffb640319bed4dd95cdafc383ddd7b9694fee2f689b5ca3ed8b7b449d49ddda47e1a8abba0"}, {0x68, 0x88, 0x3, "f093a7f64a8232bbe50c2976aedc28727a7f032a3433ffda670516355671e91da0da8ce778c03b1ccd7dd109ca9b9fc0668044f368b70af86c30d53ebb2ab5d4fc9252a43be6809f84c010b32561b493db4e7b4d"}, {0x98, 0x1, 0x7, "8d607141a1bcb2505c00facb10df0045e53684dff96f8acb87a6b935659bb4e83de674362fa86f0ecdc9707e70816050f09bbf50363378b89758c8767d559aa62584cea988256a753c32d6be40866faf5ca8e775d4b02e45564ad0380c1b1e9fca0ea809e39cb147593b87ee5fdfb34f0d91e014dcf7429eeb81043a3be1da2fcef11a00"}], 0x248}, 0x20000011) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)=@gettaction={0xb4, 0x32, 0x7d69de4e9905c9, 0x70bd27, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x74}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xef3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9ef}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040005}, 0xc884) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x2, &(0x7f0000000bc0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68d3}], &(0x7f0000000c00)='syzkaller\x00', 0x5, 0xc4, &(0x7f0000000c40)=""/196, 0x40f00, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x2, 0x4, 0xf4f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[r6], &(0x7f0000000e80)=[{0x0, 0x1, 0xd, 0x1}, {0x2, 0x5, 0x10, 0xb}], 0x10, 0xffffffff}, 0x94) (async) r8 = accept4$bt_l2cap(r1, &(0x7f0000000f80)={0x1f, 0x0, @none}, &(0x7f0000000fc0)=0xe, 0x800) r9 = accept4(r8, &(0x7f0000001000)=@ieee802154={0x24, @long}, &(0x7f0000001080)=0x80, 0x80800) writev(r9, &(0x7f0000002340)=[{&(0x7f00000010c0)="e17e5d761f8261701fbf99d0062222c60ba914c707064842b2436810c3112ad368db2a04199b614d8a5a6bf88843e4a9232a6bb1b8f158d6bfe23a45bb0d62c1b2172969e85de881d8745d3ea2d65cc1e81baa170b63d7db0d9f9635a8715a8c66674e349a6116d83b8b4857743e2739b9deb3a41da2a678e54892dc3182a18ddf4b2fbca795ba526e7ab008cac94330", 0x90}, {&(0x7f0000001180)="bc86b444358881ffad6581acd315b0aa9b2142576604af3ea1859d89e9105a9560815d5e8513a456adfe29f5476f0f7d5b1153da10e761f77f76328c6ea5abe196654e19e09a94e285ca2fe1f0e15f4632cface5be28079ef6c9d9db8e83a3cb62a3d334e2b13dd49091ae93d2705f14dfca6e0e56234f9c7cb46751bf7d35b566af07d6811f97ec09f921be2f33f0dfa4a4e4e69639d6a964c7fa7ad83181adec34f1df5cb23691f5084e23a8df5510878de6f965a3b92cabcadd456f6d33ce9c46f09ee064f74f0c53b33e00e2c292ab6e33eced8645a7d5461da2597eef73e47239f4838dc02c50f601ba2629e89f417d42479d96c13659c5efaa4dc6", 0xfe}, {&(0x7f0000001280)="ba70c603ddbf7f9a3f6f031c0d58c43f83cdbe33fe96d4e0e48c46814d47c747c116010d415c57684a131b10c6e64b0040", 0x31}, {&(0x7f00000012c0)="7bbcecad36a6eee05cae8d668ee92376386d1a613844582b3589cb7bdf8c8fb4839d340f9fc5d02d4fb38dc49f6b39ef19063441d9cf82cf848b9c99e198d946cb137badd1f48693746763079d23521834d99369ba925d56c061cb8b5a6af366dcb0ea494814575b6c3657d53f49b52f41a942c1", 0x74}, {&(0x7f0000001340)="531b6c794a473b5dfdf6cb740f911d6530105b01227a6431b985ed217d0d666e26edcaaaed1fa860be9ffec8562e767a4aaaf68a9ab2b6759e30ef556ae670f00a34a9f38d80d3867edef8b8b494daaade51949a5733d5190780d106f26728b15d65f008d08ea2f19f783afd21719b31ec37b870cfa25ba9cbd395cc7c513f19ace99c7b61a9d8ee3c9989b4cba7714dd5ef798b68a2e7298cbd0d991d2fd833ce2b8c6b35fc493c91f1e875e42a7b74f0313345522f24c21836834b9a904c99e5def94eaf07f7d13e9f57a8b9de63b8922a19eb1ef73f1eedeb21c07ad7c73cf5a2f1c3745b78333a792c590a9b47000301a2f731d9744b8dfabe36b4792a0539bbb26926822507dd36dfa00b9a9cc3a8f7e7ce1c1d7c1d0f3acb5b06be24efd690243bcc9089ba54082269d6e55f25eb5ca3305af4f62980568b08c277eda5ae3b899b2e7f984caf75d9531c646048228ce296277f5f2f39b56feec103b7838933611b273d2d3bbcc0ac7cd1d0ac981e90338d4ec12d825697c84751d5b09c13aeca64de028f492f107a6b129af398989b5d80ee9a9d5b7cfdc5daaacc619877bd8ebb09abea84c04df4665e0dd926f96d13bd25a5c34c19507083b4542e978248f573c920ee57c1ae0a632f26d6cee62da5410fc50905139bf6c0f2cdfa747f7976192ccf9eb499a9d7cff620c5a798a43057515e7eee6ca7948d914ff372368ccd1dd6be6828ce2b2ecdd67a495754ec48770992bc1421e46a2079da1d6c48339481afb5f7c2e823b6782dfa45b8633df32cd8efe2a1ef2e9c8b246842b5e54d282e8bc4e85c053141d550d6cf4911e4925fda7834c88d58b79a14518ab4648e062ddd63dd5c2604297f80de68e893e53583968c6fe6c0a9e22a89373ed386e93b21acf721ec22545f1e75c74ffb460a38651694782d791e66e552828afdcc418eea00c1211c3975b57a6f85773fe90b57e6efdec4f1059154e6cd86be368bea76e44cc89763c4544e92f450851bcf3ab8c51525c9b92a577b87b46e4083b782a907eae7b4459e9c4fc167641acf63f905dfbc13f92a71a642f4ffcf5494d3240f66549a9a0fe0541c79b80dc4e3a369d21f4dfa80815f5177c85e23132f364e3af77f0063fab3798d24ffdc93af96621fb278efd4e4ad0ae33150f4373b5b5400678750231d1b1b88a7266c6945b787445908ff107657c467f54e7adb0905c44eb9e1008012ff6df8c335b01533ac4b5d234b5980ed97f25f303ea5cd3e78b72001131f47c4efe213b80fe95c2a2f29199516a220a242ad5c2196636cfd36d0a567e4afe028a353718349b3cbad8aafd7b66960f15ad1a963777d270800734b277f231c1a80b2b20d25b77a1eddc7be77c5a57a4bedfa8c9b9f67a4ec99ca9a9e97c8a56ef8caa5c28d21a707d81f140397a2884331436377fa8ec8fd918df1b40e8aa698b978650da101d8f54e02e6e2350b17e7b46050d8d1cde7a5462c98dd9b3f3b51413069b4a6ef35f1f95cdb8f4abd88057796aa3980f1f95013290d7b4c8116a46d8d85d9da52159ccfdf8cac52c6053f8fc4afa919f619de9fd185a51a177128dea186923e7097d22ff64e3c574b9d15a1f7698e729e521c5d6740cc0dd9421c69104e6b8c2b835d317c6be4f8f1f6c036f28b6e3820529f42785758a55afeff26d38383adf766ac7ee2c92f80df19786e805bed86d5d467303b90dcb51a47bd185ffb29e455e60f9be6a8cebd0c9302da2a94dc975cf64da4c602e023bcc7666d4259ab1166b69f33a303ffb52b40d3e817318a1510aca5d319aeff0459c3a47da6f8dee67f0508e79de4d7a3ed4f989d4bcc4cdb27c00f803878ca2efda37aab09aee2cc2153027481e55ef3c109f57c98abf0691530b9a97c05e37a3271cea413e56ba0e40bc8b40c2eec385f7a411614d079d8a9a6aa6ff4eff201ec61141fe4e0286127bbfd8209a3a4f31597f28730194ef06283c6087d3145bc57af98c81b848d8d4e3202b2c087f245fcad26ca73f37fbb8162beb8867dd36b481413db517a3394a48a9756cabcb160a46a7456ea3b79d228d36fb24330831180602b77db791e2336ea07147b98b3270f9a34550abe2b67892325875306aae2dd5357f2bd3e4dec81b9207dcee098f6c5dd69a91a9f7a4174d3b3d604486ae3650c68763b89b4d4c8dc592f83f16569654a1e76270a6f5b0d88067c33c464fbc007d04b4f59f10355469dd73faf3d70a848907438a44e4a700eeccd0f1f7c26982f02c0215b3812101c08d8bd809c850276a211078bdff969e29d55a5c13d77dff734b97b22717bb19ff4ac56d725fe18d416756fbcb2f649cc012a1be63fe42e67d922f0e5bf3e26537d23e40d7c03455d262e7354047f879f452bc03bd3745ca11ab44f4dcdd1d01d329d4532cf9a7188a3d88bfa942aae822969dc70d7c8d2cd4916dc7d79e96afb0366008087ceae950123e169ebbd7552486e5448a58c692b0444a3754b56eae654a1f337ff9bd99d8a497d2b766e3e20fb99d52685f2f5c4043c2d9e4d72a82152969f33c94afcde7ae9d2290f89a8300c94bf5fa67fb023637e7150eec5411d24ec250181708ec3e2fae02cf14ef9a3eb64da20d3fa370fb6d3cee4b6b50010418fd00ed5a8666b1719f1ac7049bfb5f02186bc85f549a7f3490ae5725fff72ca3a3a7d652ac677947f86c8fd993bc1202d24210523a193801f235288d3494c41820f79d900ed24e372cde14ed56edffdfa28c787ae7513013a13def5e98a4f535159ac7432ee9db72f84c92677787a8d268d3733bcfb86a787b9b45cbbe5ac05320c8063ec60c454792f2b6ddc6d31048197463cdf7e465e1ca76ff73aef780508f5468ea23990f577372230ccb9a89fda1fc6a348b0ed79dcc4b1c01af8d677c65586872a5c6a1bef77a671754618d395c6234549aa28555662f04c4674af44882d7386b61ae4786d3c9db877e866a477f3cfe45ec4e5b5a0392d1872071a21b944721799d7a0b8d17249262a88b4e646d83bf23bb4cfe252a3a580392518e57313eb26ea40681d1b537a417fe705eefdff9f79253296c3e3d878cc53dfd99960dd6291ae6c3108b8c3719cf9e1361950a28c9f7130efe405ce06f45ef277b7ba7ac54d8a24182509c5f3d85fcc28a5f9139623532a23573251f644d8176d27e3feb2354c9011fb17446baaa688e6d620194c6592543ae7445eef6a942fea54e88f1449813ca474d171acee7ed934a3c544c8bbea43544445c505f401e9eb46e40dee6014d053c505d758db6f9d213f53362c4e5af7a580f76cf190db714a7ed3154df1f3dfac4b36c04eaec298bc1e98d0d200f0e11e281be287f4a35e3c0898aff36bbefc4f2f33ccaf9b579203b3f6e0c9650c5edbdce66fbfbbce4cda4a867aa185ef192fb9b47bb22f286932ada5d3ba6bd60da3e68f6c413f839d0bf213ff800f08e81491a310c9c6c5f7cb3d7480b05cc8be2204d79d79269d0923c6e95f783406dd4709d5b13f50b314e3993e77ffbb9631186130ef3853d8d19662e07778c1e9cbbfa2defb4f8f8099379a4b0503d5d6e010311e69cc3ef4f2c969e699f24c53b638acb426acc5d8732ce47db016c2be953ede88b0669679ce2d86fd72b8fbaa88fa84c90eeb7d6c7c7612d41c41ab5c9a77db7eb93414c01ca3544cd49a19af1e4b1fb022dacdfe0c75cb1619522d703a3ec9f3a6b8889d3a9ec513df5f743a80d795603e1354ad4cfe17275e523b1cab762bf3e48cca932e0ac9097c68f4c27679ca548de03502e61f7010a9bfeb30186f861ca5c8f8a3d7adbada18597085bb8611222d24b927ea4183e5e3e3dfd4ed9eb4cad0283ccee0188582e69749346876f37720c3a4af51f0699e2451b3e8d5bf9aac7b317876ccf957ac2a9deafcfe4f33b4aa31b73bddc094617ff09df3808ea37b56c7a36f5a339777ae96b24108e9c9f49006c6202a0b1a0b7238647d429a3d7bbb1a0bb74f2be75f43fda0e7d6bb48a47c89c562a174279993950c25cddf2dd5bf52c394d9a35a1087518e3b6d958f1fea63da9da7f3c36d98392c6de906907da08c6efde8615e5a2a63d36914af0f3aa0943762d1dd640adc9a49b78fc51c5b6633143d9992e32416bf660c70717c034cbffc68b56d5d0035cbc2eb68f77136461dbba64c64f3865e9bb2cbdd64a5466a538a9160f5468bad184a51a3e4a2f3aa21c71764f2da32d84fa2dc231dd1817a6c80ced1940f654b4ca4a710455c6236db91f08a9c76e440aa41cd188f73165fab5ae1a8799e2a669574f89fe4df9ff6eab45547cfd393e28ff886081231b3451d8d9a3a98a718270b5f70640dc0666eb7a4d044f1f57984a73e41c54c70efba0bce1f9be8695f5ffe93d20038eb37dcd06197f904559f11557fd7e470be28254fd35dcc73ef5f145d286e4c9eb4f9ec2858cc6711d95c60e58ce2a596bab72a6565e12acdde0e71ed2168a8f337c0a1360d059058dad6c2d844d1b2138e2a46e49f91b4ab67ff65c11b00844bef35376180180b09b9319a4f7ae13687a89310141bc81b187a0dd88b0bed09a6574cfff2f0c530260926ea2153ca293944e007fece13167c1a3985146b4d534f11b50d4500aed99a9d8bce3f0e1a20da9ae9436cde7710faad20a32cdb593c9eab19de584f318f6354b784d61a2f7eb0070cc4af129e97cab5b777c263e624bddc02db81eb6db3bf1a8eb0703fc8e75784e0291366f6c0ae8f1acb3790140160f9ec2132819a19f29593fc49fa922233ed9668940b3e578d65d490af49006587ec14f0c8be2d9064eb9df6c69f3058169344ffb34983d8811c4c95c462cf7de31176d2351db50c122c210c12d4f824f098b4496799ae7ab7f16e6ccefd12b1dfe94e7d0a7979340fbbee51f3fd8996136bd99911ff270bcf77526bc6bd64e7c70448207f1104297972a570acf5209c19e1f8e03654c2a29530e6c034d9e2904694ab131b3c67a6f9a030f8eb20dbbecf525e750aaeb51c369bd357912b76129111e007ff122adc04800cbb55f7b8bde2e5156c69eab027d5ee01d0ce28bd1320a4b22d8bc7769171fd8e06199e8704f53e576e5c50bc01c22566da54184f0d44b9bbbcbb04f0923792d0c40c04a8a3757658977b142a13b81cfb2870429a7601d3e4801de9520e2b21486488355112963b31327d63f9c6387d13a85536033e187c02fba4838d74cdfaa1f3d306281cedd3cc82a054b89e75718c20a0e4d4310f287584aafe93b2cf5603c4eca5e2826f080e9d516745ed246fd04b7a6249284a0c5802f1dd6638e52bd738f8a863faa27e2eae86603cd20888e49292149e13d4d9822eee3ce41a7d6bf3be05058bf51e71db8fb3adf1130ef906f114eca427ae0489bff523babfd6683522d17362fdba2522f423c82e4256115997c742015f142ee5075d2e1ad631fbd922239952f65701abb1fc9fddf3abaa82a27166f2d615ab4c9d6e0b29579e4ef4a6e96e382aa82efd279a3215ea405735fda06541474e8e55b1e7ada38d6770a1d1429fc14b7d0d979392bb801dc4e2980ac86f590fee9817b31dea16b8e0c62d84e81d1e5ac2f9a616619a443b04e7c6d884e8088815daf4fe043a6eab33096ed61b3206081ea5910a8fe9562118a4e6b20dec0b6a6f84f8d75c7ff8aad8c16596eaaaba5fbc8f0c0c4c74b5e75532c09c9bc726470c195064cc3c6d4eff2a94f6678a398eac8823e9c89db79c0cecd8c2bc18b76bdf6cefe5082ce100cffc4afaee9d83b793889e9bbf1d2f893728d3", 0x1000}], 0x5) (async) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000023c0)={'dvmrp0\x00', 0xc3}) (async) sendmsg$NFT_MSG_GETGEN(r9, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002500)={0x0, 0x46, "077304daecd9de46a1819c372b62147eb5621a522d7bcdd4abd2dd2c8b7dfe6e726f122e4e27c72f31de18b6a808db0225aef3e2f8814261086fe85ffea2a5a0b6753a554530"}, &(0x7f0000002580)=0x4e) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000025c0)={r10, 0x400, 0x9, 0x4}, &(0x7f0000002600)=0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000002640)={'vxcan0\x00', 0x0}) (rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002680)=r7, 0x4) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002700), r7) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f00000028c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002740)={0x11c, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4004084) (async) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b80)=@bpf_lsm={0x1d, 0x13, &(0x7f0000002900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xd0f}, @jmp={0x5, 0x1, 0x5, 0x4, 0xa, 0x20, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x7, 0xb, 0x12, 0x6, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000029c0)='syzkaller\x00', 0x7, 0x80, &(0x7f0000002a00)=""/128, 0x40f00, 0x40, '\x00', r11, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002ac0)=[r6, r6], &(0x7f0000002b00)=[{0x2, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x8, 0xb}, {0x5, 0x4, 0x7, 0x4}, {0x2, 0x3, 0x4, 0x6}, {0x1, 0x1, 0x0, 0x7}, {0x5, 0x1, 0xf, 0x1}, {0x3, 0x3, 0xb, 0x2}, {0x1, 0x5, 0xb, 0xb}], 0x10, 0x2}, 0x94) close(r13) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002d40)={@cgroup=r6, 0x8, 0x0, 0x3, &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000002c80)=[0x0, 0x0, 0x0], &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d00)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003040)={r13, 0xe0, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002dc0)=[0x0, 0x0], &(0x7f0000002e00)=[0x0], 0x0, 0xd2, &(0x7f0000002e40)=[{}, {}], 0x10, 0x10, &(0x7f0000002e80), &(0x7f0000002ec0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000002f00)}}, 0x10) 16.217528504s ago: executing program 1 (id=3015): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000040000900fffffffffddbdf250200001a04001f000800018004001f80100004800400"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, r1, 0xe701ac47a3d23ecd, 0x70bd28}, 0x14}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0xd0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'tunl0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'bridge_slave_0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'ip_vti0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001200010a00000000000000000a"], 0x26}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[], 0xe4}}, 0x0) 16.16700419s ago: executing program 1 (id=3016): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@empty, @empty}, &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x10, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xfff2, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d38}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) 15.4224679s ago: executing program 3 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x69baa395db6b07f5, 0x5, 0xfff) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x11c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4c}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FIB_DREG={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8810) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009000100737979308963ff644172424743ac184d187a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001896a6f556aa765d562d57d9dfa13072c1388e799e086b783ecda208c1f1fdf35e265f2639644660e8b392d9bac188be5258baef0825ffe8d686320ace9e6dfdc0bb77871ced632710092c750ed79ebf76d95ba0f902e3eb8aeac1512ad7006e7a254cc25e7db35ef6277ff8c109b22ee14714bf37beb"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100), 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cc4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x8000001, @mcast2, 0x4}}, 0x0, 0x0, 0xf, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x11, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10012, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700000000000000400000000d0900010073797a0900020073797a3200000000140000001100010000000000000000000000000a0000000000"], 0x78}}, 0x0) 15.360987189s ago: executing program 3 (id=3019): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0006", 0x1f}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x380000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) poll(&(0x7f00000001c0)=[{r2, 0x1034}, {r0, 0x200}, {r5, 0x1010}], 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 15.222079666s ago: executing program 3 (id=3020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='GPL\x00'}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x4) r2 = socket(0x18, 0x80000, 0x7) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) unshare(0x20000400) r3 = socket(0xa, 0x3, 0x3a) bind$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}, {&(0x7f0000003000)="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", 0x1000}], 0x8}}], 0x1, 0x8800) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4a, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 15.143980523s ago: executing program 3 (id=3021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000004) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) recvmsg$unix(r6, &(0x7f0000000480)={&(0x7f0000000280), 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000004c0)}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 15.14238251s ago: executing program 3 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) 15.108527352s ago: executing program 3 (id=3023): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x80, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x80000000, {{0xa, 0x4e21, 0x3296000, @loopback, 0x3}}, {{0xa, 0x0, 0xbffffffa, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000020000000073797a30000000000800054000000021300011800b0001007461726f657400002000028008000300c425026008000240000000000a0001004155444954000000140000001000010000000000000000000000000a"], 0xb4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.080201585s ago: executing program 32 (id=3004): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f000017c000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x1000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000001800)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040040) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="24000000010001", 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8010) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.046470597s ago: executing program 33 (id=2997): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, 0x0) read$nci(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x22, 0x5, 0x9) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_newroute={0x34, 0x18, 0x8, 0x70bd2b, 0x25dfdbfc, {0x80, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1200}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0b06000000000000000030000000050036000300000008000200", @ANYRES32=r13, @ANYBLOB="0500350000f3f000050033000700000005003400"], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000228bd7000fcdbdf250e00000008000e00020000000c00060002000000020000000800e9580e01000100000008000e000c00000008", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x200080c5}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.021792622s ago: executing program 34 (id=3016): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f00000000c0)={@empty, @empty}, &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x10, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xfff2, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d38}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) 0s ago: executing program 35 (id=3023): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x80, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x80000000, {{0xa, 0x4e21, 0x3296000, @loopback, 0x3}}, {{0xa, 0x0, 0xbffffffa, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000020000000073797a30000000000800054000000021300011800b0001007461726f657400002000028008000300c425026008000240000000000a0001004155444954000000140000001000010000000000000000000000000a"], 0xb4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) kernel console output (not intermixed with test programs): urge local tt entries to fit new maximum fragment MTU (-320) [ 190.730191][T10590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.922396][T10595] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 190.940293][T10595] bond5: (slave vcan1): Error -95 calling set_mac_address [ 190.962686][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 190.991074][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 191.074379][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 191.089172][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.112217][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.133311][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 191.144018][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.157451][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.268735][T10619] netlink: 'syz.2.1262': attribute type 21 has an invalid length. [ 191.285952][T10619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1262'. [ 191.337450][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 191.359423][T10619] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1262'. [ 191.665663][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 191.937765][T10644] bond0: (slave bridge_slave_1): Releasing backup interface [ 191.967108][T10644] bridge_slave_1: left allmulticast mode [ 192.011415][T10644] bond0: (slave bond_slave_0): Releasing backup interface [ 192.025315][T10644] bond_slave_0: left allmulticast mode [ 192.072313][T10644] bond0: (slave bond_slave_1): Releasing backup interface [ 192.106006][T10644] bond_slave_1: left allmulticast mode [ 192.161047][T10644] team0: Port device team_slave_0 removed [ 192.214876][T10644] team0: Port device team_slave_1 removed [ 192.277082][ T5958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.378862][T10658] veth7: entered allmulticast mode [ 192.870599][T10690] : renamed from vlan0 [ 193.297741][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.699737][ T5930] IPVS: starting estimator thread 0... [ 193.795187][T10735] IPVS: using max 25 ests per chain, 60000 per kthread [ 194.250882][T10755] syz.0.1300: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.297729][T10755] CPU: 0 UID: 0 PID: 10755 Comm: syz.0.1300 Not tainted syzkaller #0 PREEMPT(full) [ 194.297784][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.297802][T10755] Call Trace: [ 194.297815][T10755] [ 194.297827][T10755] dump_stack_lvl+0x189/0x250 [ 194.297891][T10755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.297915][T10755] ? __pfx__printk+0x10/0x10 [ 194.297942][T10755] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 194.297964][T10755] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 194.297987][T10755] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 194.298013][T10755] warn_alloc+0x214/0x310 [ 194.298041][T10755] ? stack_depot_save_flags+0x40/0x860 [ 194.298073][T10755] ? __pfx_warn_alloc+0x10/0x10 [ 194.298103][T10755] ? kasan_save_track+0x4f/0x80 [ 194.298125][T10755] ? xskq_create+0x56/0x170 [ 194.298141][T10755] ? xsk_init_queue+0xb0/0x110 [ 194.298163][T10755] ? xsk_setsockopt+0x4dc/0x8d0 [ 194.298186][T10755] ? do_sock_setsockopt+0x179/0x1b0 [ 194.298206][T10755] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 194.298227][T10755] ? do_syscall_64+0xfa/0x3b0 [ 194.298248][T10755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.298274][T10755] __vmalloc_node_range_noprof+0x125/0x12f0 [ 194.298329][T10755] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.298360][T10755] ? __kasan_kmalloc+0x93/0xb0 [ 194.298389][T10755] vmalloc_user_noprof+0xad/0xf0 [ 194.298417][T10755] ? xskq_create+0xbf/0x170 [ 194.298437][T10755] xskq_create+0xbf/0x170 [ 194.298458][T10755] xsk_init_queue+0xb0/0x110 [ 194.298480][T10755] xsk_setsockopt+0x4dc/0x8d0 [ 194.298511][T10755] ? __pfx_xsk_setsockopt+0x10/0x10 [ 194.298540][T10755] ? __pfx_aa_sk_perm+0x10/0x10 [ 194.298572][T10755] ? aa_sock_opt_perm+0xff/0x1b0 [ 194.298595][T10755] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 194.298617][T10755] ? __pfx_xsk_setsockopt+0x10/0x10 [ 194.298646][T10755] do_sock_setsockopt+0x179/0x1b0 [ 194.298673][T10755] __x64_sys_setsockopt+0x13f/0x1b0 [ 194.298700][T10755] do_syscall_64+0xfa/0x3b0 [ 194.298718][T10755] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.298738][T10755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.298756][T10755] ? clear_bhb_loop+0x60/0xb0 [ 194.298781][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.298799][T10755] RIP: 0033:0x7f48fa38eec9 [ 194.298815][T10755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.298829][T10755] RSP: 002b:00007f48fb2ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.298849][T10755] RAX: ffffffffffffffda RBX: 00007f48fa5e6090 RCX: 00007f48fa38eec9 [ 194.298863][T10755] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 194.298874][T10755] RBP: 00007f48fa411f91 R08: 0000000000000004 R09: 0000000000000000 [ 194.298886][T10755] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.298896][T10755] R13: 00007f48fa5e6128 R14: 00007f48fa5e6090 R15: 00007ffe96b28108 [ 194.298928][T10755] [ 194.299045][T10755] Mem-Info: [ 194.622224][T10755] active_anon:5675 inactive_anon:0 isolated_anon:0 [ 194.622224][T10755] active_file:3013 inactive_file:39915 isolated_file:0 [ 194.622224][T10755] unevictable:768 dirty:145 writeback:0 [ 194.622224][T10755] slab_reclaimable:11501 slab_unreclaimable:108198 [ 194.622224][T10755] mapped:39456 shmem:1373 pagetables:1409 [ 194.622224][T10755] sec_pagetables:0 bounce:0 [ 194.622224][T10755] kernel_misc_reclaimable:0 [ 194.622224][T10755] free:1210114 free_pcp:15807 free_cma:0 [ 194.678275][T10755] Node 0 active_anon:22700kB inactive_anon:0kB active_file:12052kB inactive_file:159456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158524kB dirty:576kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13096kB pagetables:5480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.710845][T10755] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 194.741590][T10755] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.775725][T10755] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 194.781578][T10755] Node 0 DMA32 free:917248kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22656kB inactive_anon:0kB active_file:12052kB inactive_file:157864kB unevictable:1536kB writepending:576kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:43548kB local_pcp:25012kB free_cma:0kB [ 194.839669][T10755] lowmem_reserve[]: 0 0 1 1 1 [ 194.852208][T10755] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 194.890935][T10755] lowmem_reserve[]: 0 0 0 0 0 [ 194.902809][T10755] Node 1 Normal free:3888388kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19044kB local_pcp:7972kB free_cma:0kB [ 194.938029][T10755] lowmem_reserve[]: 0 0 0 0 0 [ 194.942800][T10755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 194.967171][T10755] Node 0 DMA32: 0*4kB 2*8kB (UE) 2*16kB (ME) 1*32kB (M) 43*64kB (UME) 27*128kB (M) 18*256kB (UME) 7*512kB (UM) 2*1024kB (UM) 3*2048kB (UME) 211*4096kB (M) = 886928kB [ 195.012884][T10755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 195.025195][T10755] Node 1 Normal: 165*4kB (UM) 32*8kB (UME) 35*16kB (UME) 106*32kB (UME) 30*64kB (UME) 9*128kB (UME) 4*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 0*2048kB 946*4096kB (M) = 3888388kB [ 195.056051][T10755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.079175][T10755] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.097985][T10755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.110097][T10755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.122580][T10755] 44297 total pagecache pages [ 195.129607][T10755] 0 pages in swap cache [ 195.133933][T10755] Free swap = 124996kB [ 195.142399][T10755] Total swap = 124996kB [ 195.148220][T10755] 2097051 pages RAM [ 195.152210][T10755] 0 pages HighMem/MovableOnly [ 195.160224][T10755] 425673 pages reserved [ 195.164495][T10755] 0 pages cma reserved [ 195.696567][T10769] __nla_validate_parse: 8 callbacks suppressed [ 195.696586][T10769] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1302'. [ 196.487999][T10747] tipc: Enabled bearer , priority 0 [ 196.505613][T10749] syzkaller0: entered promiscuous mode [ 196.511311][T10749] syzkaller0: entered allmulticast mode [ 196.537264][T10762] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1299'. [ 196.578451][T10764] tipc: Resetting bearer [ 196.603924][T10742] tipc: Resetting bearer [ 196.631793][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 196.650820][T10742] tipc: Disabling bearer [ 196.729902][T10774] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.802159][T10781] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1304'. [ 196.939636][T10778] bond3: (slave veth0_to_bond): Releasing backup interface [ 197.000851][T10778] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 197.164837][T10789] netlink: 'syz.3.1307': attribute type 11 has an invalid length. [ 197.186323][T10789] netlink: 'syz.3.1307': attribute type 11 has an invalid length. [ 197.217975][T10789] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1307'. [ 197.388272][T10807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1308'. [ 197.420518][T10804] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 197.430533][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 197.433763][T10807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1308'. [ 197.571645][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 197.627881][T10805] batman_adv: batadv0: Interface deactivated: macsec1 [ 197.658764][T10805] batman_adv: batadv0: Removing interface: macsec1 [ 197.915744][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 198.190280][T10837] net_ratelimit: 15 callbacks suppressed [ 198.190299][T10837] openvswitch: netlink: Message has 4 unknown bytes. [ 198.201220][T10834] tipc: Enabled bearer , priority 0 [ 198.224692][T10837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.246615][T10834] syzkaller0: entered promiscuous mode [ 198.267076][T10834] syzkaller0: entered allmulticast mode [ 198.344426][T10834] tipc: Resetting bearer [ 198.369665][T10833] tipc: Resetting bearer [ 198.511744][T10833] tipc: Disabling bearer [ 199.003073][T10871] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 199.302961][T10880] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 199.318267][T10885] netlink: 'syz.1.1328': attribute type 4 has an invalid length. [ 200.256913][ T55] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 90 seconds [ 200.267936][ T55] block nbd0: Possible stuck request ffff8880253101c0: control (read@1024,1024B). Runtime 90 seconds [ 200.279828][ T55] block nbd0: Possible stuck request ffff888025310380: control (read@2048,1024B). Runtime 90 seconds [ 200.291180][ T55] block nbd0: Possible stuck request ffff888025310540: control (read@3072,1024B). Runtime 90 seconds [ 200.547656][T10940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.719231][T10951] __nla_validate_parse: 8 callbacks suppressed [ 200.719249][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 200.863315][T10958] netlink: zone id is out of range [ 200.887548][T10958] netlink: zone id is out of range [ 200.907786][T10958] netlink: del zone limit has 4 unknown bytes [ 201.098532][T10964] bond6: entered promiscuous mode [ 201.144165][T10964] bond6: entered allmulticast mode [ 201.177989][T10964] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.235987][T10971] 8021q: VLANs not supported on ip_vti0 [ 201.299110][T10977] netlink: 'syz.2.1355': attribute type 21 has an invalid length. [ 201.325215][T10977] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1355'. [ 201.355917][T10978] netlink: 'syz.2.1355': attribute type 21 has an invalid length. [ 201.369940][T10978] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1355'. [ 201.415076][T10977] netlink: 'syz.2.1355': attribute type 4 has an invalid length. [ 201.465106][T10977] netlink: 'syz.2.1355': attribute type 5 has an invalid length. [ 201.493572][T10977] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1355'. [ 201.550525][T10978] netlink: 'syz.2.1355': attribute type 4 has an invalid length. [ 201.562544][T10978] netlink: 'syz.2.1355': attribute type 5 has an invalid length. [ 201.666547][T10978] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1355'. [ 201.691400][T10995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1360'. [ 202.173811][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1365'. [ 202.275844][T11027] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1368'. [ 202.315173][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 202.324160][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 202.695718][T11045] netlink: 'syz.4.1372': attribute type 83 has an invalid length. [ 202.750691][T11039] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 202.881636][T11045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.028466][T11067] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 203.229175][T11074] netlink: 'syz.0.1380': attribute type 11 has an invalid length. [ 203.442182][T11089] sctp: [Deprecated]: syz.0.1384 (pid 11089) Use of int in maxseg socket option. [ 203.442182][T11089] Use struct sctp_assoc_value instead [ 203.562990][T11088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.598593][T11102] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 203.606117][T11088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.635138][T11088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 203.721741][T11095] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 203.929914][T11088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.975398][T11118] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 203.983451][T11088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.999673][T11118] netlink: 'syz.3.1392': attribute type 2 has an invalid length. [ 204.008862][T11088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 204.216828][T11088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.268461][T11088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.313394][T11088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 204.522364][T11088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.565156][T11088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.581777][T11088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 204.605060][T11143] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 204.612668][T11143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.832188][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.840703][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 204.853746][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 204.977989][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.005990][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 205.044665][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.063256][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.094457][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 205.112869][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.134492][T11174] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 205.154168][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.163271][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 205.173851][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.416512][T11194] tipc: Can't bind to reserved service type 0 [ 205.442667][ T5234] udevd[5234]: worker [5915] terminated by signal 33 (Unknown signal 33) [ 205.460579][T11196] netlink: 'syz.4.1419': attribute type 9 has an invalid length. [ 205.464787][ T5234] udevd[5234]: worker [5915] failed while handling '/devices/virtual/block/loop4' [ 205.845729][T11222] __nla_validate_parse: 16 callbacks suppressed [ 205.845750][T11222] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1427'. [ 205.921758][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 205.944967][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 205.983908][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 206.010786][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 206.032711][T11230] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 206.062668][T11234] netem: incorrect gi model size [ 206.070538][T11234] netem: change failed [ 206.989320][ T36] tipc: Subscription rejected, illegal request [ 207.568790][T11269] netlink: 'syz.3.1442': attribute type 10 has an invalid length. [ 207.586230][T11269] bond0: (slave wlan1): Opening slave failed [ 207.792384][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 208.664375][T11292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.638252][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803031d000: rx timeout, send abort [ 209.646016][T11353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1467'. [ 209.647939][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880300ac800: rx timeout, send abort [ 209.664432][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803031d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.679913][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880300ac800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 210.174421][T11384] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1474'. [ 210.205427][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 210.221019][T11384] erspan0: entered promiscuous mode [ 210.222555][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 210.687278][T11418] netlink: 'syz.1.1485': attribute type 21 has an invalid length. [ 210.731830][T11415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.758291][T11418] netlink: 'syz.1.1485': attribute type 6 has an invalid length. [ 210.802844][T11421] netlink: 'syz.1.1485': attribute type 21 has an invalid length. [ 210.832153][T11421] netlink: 'syz.1.1485': attribute type 6 has an invalid length. [ 210.894198][T11421] __nla_validate_parse: 7 callbacks suppressed [ 210.894214][T11421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1485'. [ 211.047891][T11436] Driver unsupported XDP return value 0 on prog (id 261) dev N/A, expect packet loss! [ 211.073850][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1492'. [ 211.087790][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1491'. [ 211.101395][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1491'. [ 211.430030][T11459] netlink: 'syz.0.1494': attribute type 4 has an invalid length. [ 211.459362][T11460] tipc: Enabling of bearer rejected, already enabled [ 211.610403][T11466] netlink: 'syz.0.1495': attribute type 4 has an invalid length. [ 211.619016][T11467] netlink: 'syz.2.1497': attribute type 10 has an invalid length. [ 211.651484][T11466] netlink: 'syz.0.1495': attribute type 3 has an invalid length. [ 211.832369][T11477] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1499'. [ 211.936349][T11467] syz_tun: entered promiscuous mode [ 211.942433][T11467] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 211.955606][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 212.095487][ C1] TC_ACT_REPEAT abuse ? [ 212.254343][T11500] syz_tun: entered allmulticast mode [ 212.326794][T11504] netlink: 'syz.3.1505': attribute type 29 has an invalid length. [ 212.372724][T11504] netlink: 'syz.3.1505': attribute type 29 has an invalid length. [ 212.756149][T11530] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1511'. [ 212.843023][T11534] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 213.124231][T11499] syz_tun: left allmulticast mode [ 213.177935][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 213.204154][T11556] team_slave_0: mtu greater than device maximum [ 213.211313][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 213.464347][T11573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.497070][T11584] TC_ACT_REPEAT abuse ? [ 213.512424][T11584] TC_ACT_REPEAT abuse ? [ 213.530096][T11584] TC_ACT_REPEAT abuse ? [ 213.618720][T11589] TC_ACT_REPEAT abuse ? [ 213.627834][T11589] TC_ACT_REPEAT abuse ? [ 213.652941][T11589] TC_ACT_REPEAT abuse ? [ 213.759903][T11591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.774140][T11591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.886527][T11594] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 213.958399][T11591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.975224][T11591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.120545][T11591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.136842][T11591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.279979][T11591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.291435][T11591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.437424][ T56] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.447518][ T56] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.497096][ T56] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.516504][ T56] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.543527][ T56] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.555939][ T56] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.589974][ T3539] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.602121][ T3539] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.621494][T11619] tipc: Enabled bearer , priority 0 [ 214.637164][T11621] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1539'. [ 214.658476][T11625] sctp: [Deprecated]: syz.2.1540 (pid 11625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.658476][T11625] Use struct sctp_sack_info instead [ 214.658874][T11619] syzkaller0: entered promiscuous mode [ 214.681680][T11619] syzkaller0: entered allmulticast mode [ 214.751758][T11619] tipc: Resetting bearer [ 214.784324][T11617] tipc: Resetting bearer [ 214.808259][T11633] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 214.819737][T11617] tipc: Disabling bearer [ 215.869415][T11680] validate_nla: 3 callbacks suppressed [ 215.869436][T11680] netlink: 'syz.1.1558': attribute type 4 has an invalid length. [ 215.910502][T11680] netlink: 'syz.1.1558': attribute type 4 has an invalid length. [ 216.014873][ C0] net_ratelimit: 4 callbacks suppressed [ 216.014892][ C0] TC_ACT_REPEAT abuse ? [ 216.085294][T11690] tipc: Enabling of bearer rejected, failed to enable media [ 216.255204][ T5930] TC_ACT_REPEAT abuse ? [ 216.615921][T11719] __nla_validate_parse: 3 callbacks suppressed [ 216.615941][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1569'. [ 216.680526][T11721] Bluetooth: MGMT ver 1.23 [ 216.815151][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 216.828045][ T5184] Bluetooth: hci0: command tx timeout [ 217.048900][T11735] netlink: 'syz.3.1574': attribute type 7 has an invalid length. [ 217.130699][ T5917] IPVS: starting estimator thread 0... [ 217.145783][T11737] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 217.173481][T11737] TC_ACT_REPEAT abuse ? [ 217.178564][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 217.245118][T11741] IPVS: using max 32 ests per chain, 76800 per kthread [ 217.482152][T11760] openvswitch: netlink: Multiple metadata blocks provided [ 217.932547][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1589'. [ 217.943801][T11783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1589'. [ 218.008188][T11788] vlan2: entered allmulticast mode [ 218.013717][T11788] bond0: entered allmulticast mode [ 218.050020][T11788] netlink: 'syz.0.1588': attribute type 18 has an invalid length. [ 218.214780][T11795] block nbd0: NBD_DISCONNECT [ 218.223847][T11795] block nbd0: Send disconnect failed -32 [ 218.248506][T11795] block nbd0: shutting down sockets [ 218.272137][T11800] netlink: 'syz.0.1592': attribute type 3 has an invalid length. [ 218.283812][T11800] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 218.315174][ C1] blk_print_req_error: 138 callbacks suppressed [ 218.315193][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.330567][ C1] buffer_io_error: 138 callbacks suppressed [ 218.330587][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 218.344313][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.353393][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 218.361254][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.370350][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 218.378176][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.387263][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 218.415541][ T5916] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.443559][ T5916] Buffer I/O error on dev nbd0, logical block 0, async page read [ 218.481899][ T5916] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.485082][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 218.559198][ T5916] Buffer I/O error on dev nbd0, logical block 1, async page read [ 218.584929][T11810] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1595'. [ 218.618924][ T5916] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.664214][T11810] netlink: 'syz.2.1595': attribute type 5 has an invalid length. [ 218.700908][ T5916] Buffer I/O error on dev nbd0, logical block 2, async page read [ 218.758305][ T5916] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.830164][ T5916] Buffer I/O error on dev nbd0, logical block 3, async page read [ 218.869912][ T5916] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.905202][ T5916] Buffer I/O error on dev nbd0, logical block 0, async page read [ 218.920429][ T5916] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.930516][ T5916] Buffer I/O error on dev nbd0, logical block 1, async page read [ 218.950744][ T5916] ldm_validate_partition_table(): Disk read failed. [ 218.970894][ T5916] Dev nbd0: unable to read RDB block 0 [ 218.978979][T11832] syzkaller0: entered promiscuous mode [ 218.984474][T11832] syzkaller0: entered allmulticast mode [ 219.001586][ T5916] nbd0: unable to read partition table [ 219.044244][ T5916] ldm_validate_partition_table(): Disk read failed. [ 219.053181][ T5916] Dev nbd0: unable to read RDB block 0 [ 219.061971][ T5916] nbd0: unable to read partition table [ 219.068476][T11838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1598'. [ 220.100565][ C0] TC_ACT_REPEAT abuse ? [ 220.104979][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.114638][ C0] TC_ACT_REPEAT abuse ? [ 220.157691][T11863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1605'. [ 220.168135][T11863] unsupported nlmsg_type 40 [ 220.717176][T11878] netlink: 'syz.4.1609': attribute type 23 has an invalid length. [ 220.973815][T11898] netlink: 'syz.4.1616': attribute type 1 has an invalid length. [ 221.076038][T11899] veth3: entered promiscuous mode [ 221.212966][T11898] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.218696][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1621'. [ 221.262477][ T30] audit: type=1107 audit(1758900771.753:4): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='e_asxCs* J}5Z' [ 221.313351][T11903] bond8: (slave gretap2): making interface the new active one [ 221.329946][T11903] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 221.521281][T11928] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1625'. [ 221.543661][T11929] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 221.554132][T11929] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 221.564809][T11929] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 221.674328][T11942] __nla_validate_parse: 1 callbacks suppressed [ 221.674347][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 221.774467][T11942] netlink: 'syz.1.1629': attribute type 4 has an invalid length. [ 221.970300][T11961] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1637'. [ 222.093273][T11967] macsec0: entered promiscuous mode [ 222.099947][T11967] macsec0: entered allmulticast mode [ 222.114024][T11969] veth1_macvtap: entered allmulticast mode [ 222.121387][T11969] macsec0: left promiscuous mode [ 222.129371][T11969] macsec0: left allmulticast mode [ 222.139120][T11969] veth1_macvtap: left allmulticast mode [ 222.194265][T11971] netlink: 'syz.3.1639': attribute type 9 has an invalid length. [ 222.289969][T11978] netlink: 'syz.3.1642': attribute type 1 has an invalid length. [ 222.314379][T11976] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 222.325317][T11976] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1641'. [ 222.359845][T11976] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 222.473134][T11986] netlink: 'syz.4.1643': attribute type 17 has an invalid length. [ 222.483044][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 222.531347][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1643'. [ 222.573731][T11992] veth0: entered promiscuous mode [ 222.604430][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1646'. [ 222.663455][T11990] veth0: left promiscuous mode [ 222.740156][T11988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.830674][T11996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.059312][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 223.209313][T12016] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1653'. [ 223.540573][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 223.739102][T12036] lo: Caught tx_queue_len zero misconfig [ 223.926533][T12045] Unsupported ieee802154 address type: 0 [ 223.939863][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 223.963093][T12041] openvswitch: netlink: Flow key attr not present in new flow. [ 224.172839][T12055] lo speed is unknown, defaulting to 1000 [ 224.204386][T12055] lo speed is unknown, defaulting to 1000 [ 224.222061][T12055] lo speed is unknown, defaulting to 1000 [ 224.462427][T12055] infiniband syz0: set down [ 224.467664][T12055] infiniband syz0: added lo [ 224.516614][T12067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.534278][T12055] RDS/IB: syz0: added [ 224.538914][T12055] smc: adding ib device syz0 with port count 1 [ 224.546032][T12055] smc: ib device syz0 port 1 has pnetid [ 224.551990][ T5930] lo speed is unknown, defaulting to 1000 [ 224.561659][T12055] lo speed is unknown, defaulting to 1000 [ 224.612414][ T5866] lo speed is unknown, defaulting to 1000 [ 224.757648][T12074] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 224.854042][T12083] openvswitch: netlink: Missing key (keys=40, expected=100) [ 224.886312][T12085] netlink: 'syz.4.1671': attribute type 23 has an invalid length. [ 224.921635][T12083] vlan3: entered allmulticast mode [ 224.950893][T12083] ip6gretap0: entered allmulticast mode [ 225.365754][T12055] lo speed is unknown, defaulting to 1000 [ 225.766431][T12125] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 225.855607][ T10] TC_ACT_REPEAT abuse ? [ 226.965464][T12125] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 226.986757][T12055] lo speed is unknown, defaulting to 1000 [ 227.074098][T10140] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.101622][T10140] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.141646][T10140] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.169015][T10140] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.363277][T12158] __nla_validate_parse: 4 callbacks suppressed [ 227.363297][T12158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1690'. [ 227.403212][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 227.415450][T12158] validate_nla: 1 callbacks suppressed [ 227.415468][T12158] netlink: 'syz.2.1690': attribute type 21 has an invalid length. [ 227.439626][T12158] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1690'. [ 227.464933][T12158] netlink: 'syz.2.1690': attribute type 5 has an invalid length. [ 227.484265][T12158] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1690'. [ 227.528805][T12165] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1693'. [ 227.700208][T12178] netlink: 'syz.0.1697': attribute type 11 has an invalid length. [ 227.721231][T12178] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1697'. [ 227.736060][T12055] lo speed is unknown, defaulting to 1000 [ 227.876753][T12186] lo: Caught tx_queue_len zero misconfig [ 227.986008][T12194] netlink: 'syz.2.1704': attribute type 1 has an invalid length. [ 228.065501][T12194] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1704'. [ 228.113090][T12199] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 228.140556][T12199] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1706'. [ 228.222682][T12055] lo speed is unknown, defaulting to 1000 [ 228.279298][T12205] netlink: 'syz.0.1707': attribute type 13 has an invalid length. [ 228.304417][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 228.307103][T12205] netlink: 'syz.0.1707': attribute type 58 has an invalid length. [ 228.340357][T12205] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1707'. [ 229.541149][T12275] ip6tnl0: Caught tx_queue_len zero misconfig [ 230.012127][T12296] netlink: 'syz.1.1732': attribute type 5 has an invalid length. [ 230.401518][T12325] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 230.422408][T12324] xt_l2tp: v2 tid > 0xffff: 1114244 [ 230.442747][T12325] netlink: 'syz.4.1738': attribute type 58 has an invalid length. [ 230.479784][T12330] netlink: 'syz.3.1742': attribute type 1 has an invalid length. [ 230.563992][T12330] bond6: (slave bridge1): making interface the new active one [ 230.576744][T12330] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 230.791941][T12346] Unsupported xt match [ 230.791961][T12346] unable to load match [ 230.911461][T12346] hsr_slave_0 (unregistering): left promiscuous mode [ 231.298349][T12376] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 231.631194][T12392] pim6reg: entered allmulticast mode [ 231.864631][T12403] sch_fq: defrate 7 ignored. [ 232.206783][T12407] lo speed is unknown, defaulting to 1000 [ 232.425544][T12436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.426322][ T5184] Bluetooth: hci0: command tx timeout [ 232.449018][T12436] netlink: 'syz.2.1772': attribute type 11 has an invalid length. [ 232.456987][T12436] __nla_validate_parse: 10 callbacks suppressed [ 232.457002][T12436] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1772'. [ 232.457127][T12434] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 232.463956][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 232.497679][T12437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.596860][T12425] rdma_rxe: rxe_newlink: failed to add bond0 [ 232.934038][T12463] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 233.071894][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1781'. [ 233.338662][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1784'. [ 233.990435][T12512] netlink: 'syz.0.1793': attribute type 29 has an invalid length. [ 234.000126][T12511] netlink: 'syz.3.1792': attribute type 7 has an invalid length. [ 234.018091][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1793'. [ 234.058943][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 234.303635][T12524] netlink: 'syz.3.1797': attribute type 5 has an invalid length. [ 234.417011][T12529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.547435][T12532] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1802'. [ 234.602439][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1804'. [ 234.891707][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 235.060489][T12565] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1811'. [ 235.161948][T12572] sit1: entered promiscuous mode [ 235.179503][T12572] sit1: entered allmulticast mode [ 235.240995][T12572] tipc: Enabled bearer , priority 0 [ 235.413937][T12572] syzkaller0: entered promiscuous mode [ 235.430006][T12572] syzkaller0: entered allmulticast mode [ 235.450817][T12572] tipc: Resetting bearer [ 235.527968][T12570] tipc: Resetting bearer [ 235.610083][T12610] openvswitch: netlink: IPv4 tun info is not correct [ 236.111933][T12647] netlink: 'syz.3.1830': attribute type 8 has an invalid length. [ 237.202077][T12570] tipc: Disabling bearer [ 237.337877][T12659] tipc: Enabled bearer , priority 0 [ 237.353262][T12664] netlink: 'syz.2.1834': attribute type 4 has an invalid length. [ 237.402194][T12664] netlink: 'syz.2.1834': attribute type 4 has an invalid length. [ 237.439238][T12659] tipc: Disabling bearer [ 237.561987][T12680] __nla_validate_parse: 5 callbacks suppressed [ 237.562006][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1839'. [ 237.593144][T12676] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 237.902450][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'. [ 237.927767][T12699] netlink: 'syz.2.1846': attribute type 10 has an invalid length. [ 237.984449][T12699] geneve1: entered promiscuous mode [ 238.006301][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 238.019191][T12699] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 238.147085][T12715] openvswitch: netlink: IPv6 tunnel dst address is zero [ 238.166752][T12714] tipc: Enabled bearer , priority 0 [ 238.176136][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1850'. [ 238.187923][T12714] syzkaller0: entered promiscuous mode [ 238.193426][T12714] syzkaller0: entered allmulticast mode [ 238.252297][T12714] tipc: Resetting bearer [ 238.277676][T12712] tipc: Resetting bearer [ 238.316993][T12712] tipc: Disabling bearer [ 238.349104][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1854'. [ 238.591708][T12739] pim6reg: entered allmulticast mode [ 238.610372][T12742] tipc: Enabling of bearer rejected, already enabled [ 238.647812][T12742] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 238.727272][T12749] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1862'. [ 238.777391][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 238.787856][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 238.846030][T12753] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 239.010496][T12769] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1868'. [ 239.142809][T12772] syz.4.1869 (12772) used obsolete PPPIOCDETACH ioctl [ 239.293479][T12781] dvmrp0: entered allmulticast mode [ 239.384327][T12781] dvmrp0: left allmulticast mode [ 239.413285][T12781] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 239.775648][T12795] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1874'. [ 240.074867][T12800] netlink: 'syz.3.1876': attribute type 6 has an invalid length. [ 240.083319][T12800] netlink: 'syz.3.1876': attribute type 5 has an invalid length. [ 240.308474][T12806] syzkaller0: entered promiscuous mode [ 240.314044][T12806] syzkaller0: entered allmulticast mode [ 240.323363][T12813] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 240.584932][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.745901][T12836] bond3: option mode: unable to set because the bond device is up [ 241.772609][T12839] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 241.781792][ T3539] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:1458:d3ff:fe33:3ca7 error=-28 [ 241.782880][T12839] bond3: (slave macvlan4): making interface the new active one [ 241.803820][T12839] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 241.805966][ T3539] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:1458:d3ff:fe33:3ca7 error=-28 [ 241.868318][T12844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.984478][T12849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.985777][T12853] netlink: 'syz.4.1887': attribute type 1 has an invalid length. [ 241.997864][T12849] nbd: must specify a device to reconfigure [ 242.058382][T12853] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.157300][T12857] netlink: 'syz.2.1891': attribute type 6 has an invalid length. [ 242.233868][T12864] netlink: 'syz.0.1894': attribute type 39 has an invalid length. [ 242.284138][T12847] bond9 (unregistering): Released all slaves [ 242.300452][T12870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.380347][T12867] team0: Caught tx_queue_len zero misconfig [ 242.389804][T12868] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 242.430285][T12874] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 242.461118][T12874] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.514234][T12878] netlink: 'syz.1.1898': attribute type 3 has an invalid length. [ 242.717630][T12890] __nla_validate_parse: 11 callbacks suppressed [ 242.717651][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 242.791732][T12897] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 242.818968][T12897] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1904'. [ 242.840440][T12896] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1903'. [ 243.129129][T12915] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.192122][T12921] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 243.274076][T12921] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.286287][T12927] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1911'. [ 243.330031][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1911'. [ 243.741999][T12965] sctp: [Deprecated]: syz.2.1921 (pid 12965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.741999][T12965] Use struct sctp_sack_info instead [ 243.846553][T12971] tipc: Enabled bearer , priority 0 [ 243.854491][T12971] syzkaller0: entered promiscuous mode [ 243.860938][T12971] syzkaller0: entered allmulticast mode [ 243.879741][T12972] syzkaller1: entered promiscuous mode [ 243.886660][T12972] syzkaller1: entered allmulticast mode [ 243.895653][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 243.908046][T12973] netlink: 'syz.3.1926': attribute type 83 has an invalid length. [ 243.927026][T12971] tipc: Resetting bearer [ 243.977643][T12970] tipc: Resetting bearer [ 244.051252][T12970] tipc: Disabling bearer [ 244.320833][T12993] : entered promiscuous mode [ 244.435278][T13011] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1938'. [ 244.558645][T13021] netlink: 'syz.2.1939': attribute type 4 has an invalid length. [ 244.919564][T13034] bond7: entered promiscuous mode [ 244.938369][T13034] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.950592][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 244.973649][T13046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 244.981591][T13046] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 244.993747][T13046] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 245.032262][T13046] bond7: (slave wireguard0): making interface the new active one [ 245.058358][T13046] wireguard0: entered promiscuous mode [ 245.067057][T13046] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 245.078753][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 245.219982][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'. [ 245.347513][T13065] batadv0: entered promiscuous mode [ 245.380840][T13065] hsr1: entered allmulticast mode [ 245.387176][T13065] batadv0: entered allmulticast mode [ 245.393205][T13065] bond0: entered allmulticast mode [ 245.401256][T13065] bond_slave_0: entered allmulticast mode [ 245.407477][T13065] syz_tun: entered allmulticast mode [ 245.412778][T13065] geneve1: entered allmulticast mode [ 245.421261][T13065] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 245.471167][T13071] validate_nla: 1 callbacks suppressed [ 245.471184][T13071] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 245.648745][T13085] netlink: 'syz.1.1958': attribute type 3 has an invalid length. [ 245.696320][T13085] tipc: Enabled bearer , priority 0 [ 245.720266][T13086] syzkaller0: entered promiscuous mode [ 245.727468][T13086] syzkaller0: entered allmulticast mode [ 245.900640][T13086] tipc: Resetting bearer [ 245.959138][T13086] tipc: Disabling bearer [ 246.027698][T13119] IPVS: Error connecting to the multicast addr [ 246.150258][T13130] vlan2: entered allmulticast mode [ 246.155936][T13130] hsr0: entered allmulticast mode [ 246.160975][T13130] hsr_slave_1: entered allmulticast mode [ 246.220564][T13125] netlink: 'syz.1.1969': attribute type 10 has an invalid length. [ 246.334358][T13130] hsr_slave_1 (unregistering): left promiscuous mode [ 246.458285][T13125] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 246.647585][T13153] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 246.713746][T13158] vlan2: entered allmulticast mode [ 246.722173][T13158] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 246.828010][T13152] netlink: 'syz.3.1977': attribute type 21 has an invalid length. [ 246.839263][T13152] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.861349][T13152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.868658][T13152] IPv6: NLM_F_CREATE should be set when creating new route [ 246.872238][T13163] netlink: 'syz.0.1980': attribute type 3 has an invalid length. [ 246.876025][T13152] IPv6: NLM_F_CREATE should be set when creating new route [ 246.876054][T13152] IPv6: NLM_F_CREATE should be set when creating new route [ 246.923821][T13163] pim6reg1: entered promiscuous mode [ 246.933202][T13163] pim6reg1: entered allmulticast mode [ 247.788657][T13236] netlink: 'syz.4.2001': attribute type 11 has an invalid length. [ 247.789504][T13237] netlink: 'syz.4.2001': attribute type 11 has an invalid length. [ 248.046056][T13254] netlink: 'syz.4.2006': attribute type 1 has an invalid length. [ 248.123794][T13260] netlink: 'syz.0.2008': attribute type 21 has an invalid length. [ 248.140069][T13257] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 248.156362][T13257] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 248.190616][T13254] vlan2: entered allmulticast mode [ 248.212513][T13254] bridge0: entered allmulticast mode [ 248.245555][T13254] bridge0: entered promiscuous mode [ 248.253879][T13254] bridge0: left promiscuous mode [ 248.261605][T13254] bond9: (slave vlan2): Enslaving as an active interface with a down link [ 248.531821][T13284] lo: entered allmulticast mode [ 248.605273][T13284] tunl0: entered allmulticast mode [ 248.647635][T13284] gre0: entered allmulticast mode [ 248.833348][T13284] erspan0: entered allmulticast mode [ 248.852034][T13284] : entered allmulticast mode [ 248.862963][T13284] ip6_vti0: entered allmulticast mode [ 248.879269][T13284] sit0: entered allmulticast mode [ 248.899805][T13284] ip6tnl0: entered allmulticast mode [ 248.913591][T13284] ip6gre0: entered allmulticast mode [ 248.936023][T13284] vcan0: entered allmulticast mode [ 249.020793][T13284] team0: entered allmulticast mode [ 249.040252][T13284] nlmon0: entered allmulticast mode [ 249.049243][T13284] caif0: entered allmulticast mode [ 249.062675][T13284] batadv0: entered allmulticast mode [ 249.085678][T13284] veth0: entered allmulticast mode [ 249.098539][T13284] veth1: entered allmulticast mode [ 249.111659][T13284] wg1: entered allmulticast mode [ 249.125882][T13284] wg2: entered allmulticast mode [ 249.137735][T13284] veth0_to_bridge: entered allmulticast mode [ 249.171408][T13284] bridge_slave_0: entered allmulticast mode [ 249.194681][T13284] veth1_to_bridge: entered allmulticast mode [ 249.209158][T13284] bridge_slave_1: entered allmulticast mode [ 249.220331][T13284] veth0_to_bond: entered allmulticast mode [ 249.233428][T13284] bond_slave_0: entered allmulticast mode [ 249.251518][T13284] veth1_to_bond: entered allmulticast mode [ 249.266369][T13284] bond_slave_1: entered allmulticast mode [ 249.272822][T13284] veth0_to_team: entered allmulticast mode [ 249.299386][T13284] team_slave_0: entered allmulticast mode [ 249.306904][T13284] veth1_to_team: entered allmulticast mode [ 249.320269][T13284] team_slave_1: entered allmulticast mode [ 249.328547][T13284] veth0_to_batadv: entered allmulticast mode [ 249.346008][T13284] batadv_slave_0: entered allmulticast mode [ 249.380193][T13284] xfrm0: entered allmulticast mode [ 249.387662][T13284] veth0_to_hsr: entered allmulticast mode [ 249.398333][T13284] hsr_slave_0: entered allmulticast mode [ 249.410130][T13284] veth1_to_hsr: entered allmulticast mode [ 249.422563][T13284] hsr_slave_1: entered allmulticast mode [ 249.432791][T13284] hsr0: entered allmulticast mode [ 249.443805][T13284] veth1_virt_wifi: entered allmulticast mode [ 249.457800][T13284] veth0_virt_wifi: entered allmulticast mode [ 249.475057][T13284] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 249.483450][T13284] veth1_vlan: entered allmulticast mode [ 249.498402][T13284] veth0_vlan: entered allmulticast mode [ 249.518090][T13284] vlan0: entered allmulticast mode [ 249.524304][T13284] vlan1: entered allmulticast mode [ 249.531285][T13284] macvlan0: entered allmulticast mode [ 249.544232][T13284] macvlan1: entered allmulticast mode [ 249.562677][T13284] ipvlan0: entered allmulticast mode [ 249.568268][T13284] ipvlan1: entered allmulticast mode [ 249.575753][T13284] veth1_macvtap: entered allmulticast mode [ 249.592708][T13284] veth0_macvtap: entered allmulticast mode [ 249.608505][T13284] macvtap0: entered allmulticast mode [ 249.619184][T13284] macsec0: entered allmulticast mode [ 249.636799][T13284] geneve0: entered allmulticast mode [ 249.648281][T13284] geneve1: entered allmulticast mode [ 249.660036][T13284] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 249.678719][T13284] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 249.720809][T13284] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 249.737535][T13284] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 249.756531][T13284] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 249.764846][T13284] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 249.772342][T13284] erspan1: entered allmulticast mode [ 249.779009][T13284] bond1: entered allmulticast mode [ 249.788644][T13284] gretap1: entered allmulticast mode [ 249.794956][T13284] gre1: entered allmulticast mode [ 249.814861][T13284] syztnl2: entered allmulticast mode [ 249.820455][T13284] macsec1: entered allmulticast mode [ 249.826344][T13284] veth2: entered allmulticast mode [ 249.831808][T13284] veth3: entered allmulticast mode [ 249.838731][T13284] vxlan0: entered allmulticast mode [ 249.850972][T13284] veth4: entered allmulticast mode [ 249.859892][T13284] veth5: entered allmulticast mode [ 249.865826][T13284] bond2: entered allmulticast mode [ 249.871206][T13284] ip6tnl1: entered allmulticast mode [ 249.877691][T13284] bond3: entered allmulticast mode [ 249.882892][T13284] macvlan4: entered allmulticast mode [ 249.897996][T13284] macvlan2: entered allmulticast mode [ 249.904354][T13284] gtp0: entered allmulticast mode [ 249.915068][T13284] bond4: entered allmulticast mode [ 249.931078][T13284] bond5: entered allmulticast mode [ 249.939773][T13284] syztnl1: entered allmulticast mode [ 249.951515][T13284] gtp1: entered allmulticast mode [ 249.966536][T13284] xfrm1: entered allmulticast mode [ 249.971883][T13284] hsr0.5: entered allmulticast mode [ 249.979088][T13284] ipip0: entered allmulticast mode [ 249.987884][T13284] sit1: left promiscuous mode [ 249.996709][T13284] macvlan3: entered allmulticast mode [ 250.005708][T13284] ip6tnl2: entered allmulticast mode [ 250.011312][T13284] macvlan5: entered allmulticast mode [ 250.017774][T13284] bridge0: entered allmulticast mode [ 250.030807][T13292] pim6reg1: entered promiscuous mode [ 250.038042][T13292] pim6reg1: entered allmulticast mode [ 250.046836][T13291] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 250.047721][T13272] lo speed is unknown, defaulting to 1000 [ 250.062843][T13300] tipc: Enabling of bearer rejected, already enabled [ 250.090897][ T56] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.127648][ T56] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.155375][ T56] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.164283][ T56] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.307105][ T56] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.343280][ T56] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.377832][ T56] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.398878][T13337] __nla_validate_parse: 33 callbacks suppressed [ 250.398899][T13337] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2022'. [ 250.400339][ T56] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.470793][T13330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2022'. [ 250.515466][T13333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2022'. [ 250.556497][T13348] validate_nla: 3 callbacks suppressed [ 250.556517][T13348] netlink: 'syz.2.2026': attribute type 29 has an invalid length. [ 250.574366][T13349] netlink: 'syz.2.2026': attribute type 29 has an invalid length. [ 250.744072][T13356] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2029'. [ 250.762344][T13351] can: request_module (can-proto-4) failed. [ 250.961323][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 251.056671][T13375] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2032'. [ 251.100718][T13375] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 251.243248][T13377] pimreg: entered allmulticast mode [ 251.342373][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.400590][T13391] tipc: Enabled bearer , priority 0 [ 251.445843][T13391] syzkaller0: entered promiscuous mode [ 251.470194][T13391] syzkaller0: entered allmulticast mode [ 251.548566][T13391] tipc: Resetting bearer [ 251.588022][T13390] tipc: Resetting bearer [ 251.591405][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2042'. [ 251.609225][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 251.652745][T13390] tipc: Disabling bearer [ 251.788142][T13408] netlink: 'syz.0.2045': attribute type 12 has an invalid length. [ 251.890744][T13418] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.141506][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 252.462038][T13453] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2058'. [ 252.586100][T13463] netlink: 'syz.2.2061': attribute type 29 has an invalid length. [ 252.631506][T13463] netlink: 'syz.2.2061': attribute type 29 has an invalid length. [ 252.740604][T13464] bond0 (unregistering): Released all slaves [ 253.043257][T13480] lo speed is unknown, defaulting to 1000 [ 254.398296][T13536] sctp: [Deprecated]: syz.3.2076 (pid 13536) Use of int in max_burst socket option deprecated. [ 254.398296][T13536] Use struct sctp_assoc_value instead [ 254.442514][T13542] sctp: [Deprecated]: syz.3.2076 (pid 13542) Use of int in max_burst socket option deprecated. [ 254.442514][T13542] Use struct sctp_assoc_value instead [ 254.468616][T13542] sctp: [Deprecated]: syz.3.2076 (pid 13542) Use of int in maxseg socket option. [ 254.468616][T13542] Use struct sctp_assoc_value instead [ 254.488191][T13543] sctp: [Deprecated]: syz.3.2076 (pid 13543) Use of int in maxseg socket option. [ 254.488191][T13543] Use struct sctp_assoc_value instead [ 254.600234][T13548] tipc: Enabled bearer , priority 0 [ 254.691109][T13551] syzkaller0: entered promiscuous mode [ 254.696911][T13551] syzkaller0: entered allmulticast mode [ 254.703708][T13551] tipc: Resetting bearer [ 254.726062][T13544] tipc: Resetting bearer [ 256.119660][T13544] tipc: Disabling bearer [ 256.323438][T13584] netlink: 'syz.0.2090': attribute type 1 has an invalid length. [ 256.336705][T13585] __nla_validate_parse: 4 callbacks suppressed [ 256.336722][T13585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2091'. [ 256.380782][T13584] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.429378][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 256.458823][T13595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.478758][T13595] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 256.494133][T13595] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 256.551881][T13587] veth0: entered promiscuous mode [ 256.572190][T13600] veth1_macvtap: left promiscuous mode [ 256.753093][T13615] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 256.809883][T13615] team0: Device ipvlan1 failed to register rx_handler [ 256.861893][T13586] veth0: left promiscuous mode [ 257.114090][T13628] syzkaller0: entered promiscuous mode [ 257.120304][T13628] syzkaller0: entered allmulticast mode [ 257.129288][T13632] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2101'. [ 257.541152][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 257.631851][T13663] netlink: 'syz.0.2112': attribute type 4 has an invalid length. [ 258.695115][T13667] tipc: Enabled bearer , priority 0 [ 258.717758][T13667] syzkaller0: entered promiscuous mode [ 258.723708][T13667] syzkaller0: entered allmulticast mode [ 258.745628][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2115'. [ 258.761947][T13671] netlink: 'syz.2.2115': attribute type 7 has an invalid length. [ 258.789548][T13671] netlink: 'syz.2.2115': attribute type 8 has an invalid length. [ 258.803890][T13667] tipc: Resetting bearer [ 258.808382][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'. [ 258.820877][T13678] netlink: 'syz.1.2117': attribute type 3 has an invalid length. [ 258.830452][T13678] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2117'. [ 258.845630][T13666] tipc: Resetting bearer [ 258.894448][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2117'. [ 258.908152][T13666] tipc: Disabling bearer [ 258.926626][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 258.968191][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2117'. [ 259.216056][T13709] IPVS: sed: FWM 3 0x00000003 - no destination available [ 259.422329][T13714] netlink: 'syz.1.2127': attribute type 14 has an invalid length. [ 259.612116][T13728] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 260.116497][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073eaa800: rx timeout, send abort [ 260.616558][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073eab000: rx timeout, send abort [ 260.625182][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073eaa800: abort rx timeout. Force session deactivation [ 261.124874][ C1] vcan0: j1939_tp_rxtimer: 0xffff888073eab000: abort rx timeout. Force session deactivation [ 261.192796][T13803] tipc: Enabled bearer , priority 13 [ 261.209505][T13803] netlink: 'syz.3.2150': attribute type 39 has an invalid length. [ 261.223750][T13803] tipc: Enabling of bearer rejected, already enabled [ 261.384098][T13820] openvswitch: netlink: Key type 29 is not supported [ 261.387748][T13817] bond8: entered allmulticast mode [ 261.397981][T13817] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.405558][T13817] bridge0: port 1(bond8) entered blocking state [ 261.412120][T13817] bridge0: port 1(bond8) entered disabled state [ 261.426580][T13817] bond8: entered promiscuous mode [ 261.435340][T13817] bridge0: port 1(bond8) entered blocking state [ 261.441881][T13817] bridge0: port 1(bond8) entered forwarding state [ 261.457249][T13823] netlink: 'syz.0.2155': attribute type 10 has an invalid length. [ 261.465780][T13823] __nla_validate_parse: 5 callbacks suppressed [ 261.465796][T13823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2155'. [ 261.481081][T13823] batadv0: entered promiscuous mode [ 261.487621][T13823] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 261.577271][T13831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2156'. [ 261.591755][T13831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2156'. [ 261.668640][T13834] netlink: 'syz.0.2159': attribute type 10 has an invalid length. [ 261.695234][T13834] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 261.710622][T13834] bond0: (slave wlan1): Opening slave failed [ 261.759929][T11828] bridge0: port 1(bond8) entered disabled state [ 261.769900][T13842] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 261.783231][T13842] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2160'. [ 261.822668][T13842] syzkaller1: left promiscuous mode [ 261.828797][T13842] syzkaller1: left allmulticast mode [ 261.873495][T13847] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2163'. [ 262.085770][T13861] netlink: 'syz.4.2167': attribute type 10 has an invalid length. [ 262.306167][T13317] tipc: Node number set to 947309550 [ 262.669952][T13870] bond0: Caught tx_queue_len zero misconfig [ 263.002684][T13892] xfrm2: entered allmulticast mode [ 263.033046][T13892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2179'. [ 263.059254][T13896] pimreg3: entered allmulticast mode [ 263.168430][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 263.195162][T13901] netlink: 'syz.3.2182': attribute type 2 has an invalid length. [ 263.211930][T13901] netlink: 'syz.3.2182': attribute type 2 has an invalid length. [ 263.263290][T13901] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 263.727192][T13933] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 263.855298][T13938] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 263.863517][T13938] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 264.010709][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'. [ 264.361466][T13968] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 264.387410][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 264.415433][T13968] team0: Device hsr_slave_0 failed to register rx_handler [ 264.482295][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 265.250336][T14012] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 265.491871][T14027] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 265.513472][T14027] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 265.732070][T14040] ip6gre3: entered allmulticast mode [ 265.750370][T14042] team0: Device gtp2 is up. Set it down before adding it as a team port [ 265.864053][T14046] sctp: [Deprecated]: syz.3.2232 (pid 14046) Use of int in maxseg socket option. [ 265.864053][T14046] Use struct sctp_assoc_value instead [ 266.204122][T14066] bridge0: port 1(batadv1) entered blocking state [ 266.217762][T14066] bridge0: port 1(batadv1) entered disabled state [ 266.225252][T14066] batadv1: entered allmulticast mode [ 266.233217][T14066] batadv1: entered promiscuous mode [ 266.695121][T11828] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 266.704990][T11828] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 267.559725][T14105] __nla_validate_parse: 6 callbacks suppressed [ 267.559744][T14105] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2253'. [ 267.874422][T14128] validate_nla: 2 callbacks suppressed [ 267.874441][T14128] netlink: 'syz.4.2261': attribute type 33 has an invalid length. [ 267.889024][T14128] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2261'. [ 267.982767][T14136] netlink: 'syz.2.2260': attribute type 4 has an invalid length. [ 268.161537][T14144] team_slave_0: left allmulticast mode [ 268.391156][T14156] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 268.412974][T14156] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 268.436545][T14156] netlink: 'syz.4.2265': attribute type 1 has an invalid length. [ 268.460663][T14156] netlink: 'syz.4.2265': attribute type 2 has an invalid length. [ 268.485919][T14156] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2265'. [ 268.497903][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2268'. [ 268.537961][T14167] netlink: 'syz.2.2269': attribute type 18 has an invalid length. [ 268.633621][T14172] netlink: 'syz.2.2269': attribute type 18 has an invalid length. [ 268.824126][T14186] wg1 speed is unknown, defaulting to 1000 [ 268.847602][T14186] wg1 speed is unknown, defaulting to 1000 [ 268.864482][T14186] wg1 speed is unknown, defaulting to 1000 [ 268.894163][T14191] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 268.904056][T14186] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 268.934483][T14197] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2275'. [ 268.963206][T14197] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2275'. [ 268.985871][T14186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 269.000468][T14197] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2275'. [ 269.012875][T14200] netlink: 'syz.1.2274': attribute type 83 has an invalid length. [ 269.023423][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2274'. [ 269.045499][T14191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2274'. [ 269.051500][T14186] wg1 speed is unknown, defaulting to 1000 [ 269.079227][T14186] wg1 speed is unknown, defaulting to 1000 [ 269.100710][T14186] wg1 speed is unknown, defaulting to 1000 [ 269.109020][T14186] wg1 speed is unknown, defaulting to 1000 [ 269.116801][T14186] wg1 speed is unknown, defaulting to 1000 [ 269.287380][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'. [ 269.488021][T14229] IPVS: ip_vs_edit_dest(): server weight less than zero [ 269.734938][T14237] tipc: Enabling of bearer rejected, failed to enable media [ 270.341211][T14288] siw: device registration error -23 [ 272.529735][T14411] lo speed is unknown, defaulting to 1000 [ 272.574082][T14426] __nla_validate_parse: 12 callbacks suppressed [ 272.574102][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 272.728282][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 272.938396][T14411] wg1 speed is unknown, defaulting to 1000 [ 273.411982][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2345'. [ 273.868569][T14474] validate_nla: 3 callbacks suppressed [ 273.868588][T14474] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 273.903686][T14474] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2350'. [ 274.113137][T14494] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2356'. [ 274.294094][T14503] netlink: 'syz.1.2357': attribute type 1 has an invalid length. [ 274.358038][T14503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.462292][T14507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.471998][T14507] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 274.489354][T14511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2360'. [ 274.490402][T14507] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 274.637586][T14503] veth9: entered promiscuous mode [ 274.658107][T14503] bond0: (slave veth9): Enslaving as an active interface with a down link [ 274.808398][T14522] macvtap2: entered promiscuous mode [ 274.813888][T14522] macvtap2: entered allmulticast mode [ 274.918890][T14525] macvtap2: entered promiscuous mode [ 274.924384][T14525] macvtap2: entered allmulticast mode [ 275.085662][T14535] tap0: tun_chr_ioctl cmd 2148553947 [ 275.275250][T14551] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2370'. [ 275.586252][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'. [ 275.636598][T14563] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2374'. [ 275.755943][T14571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2377'. [ 276.067191][T14578] sctp: [Deprecated]: syz.2.2379 (pid 14578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.067191][T14578] Use struct sctp_sack_info instead [ 276.118853][T14584] sctp: [Deprecated]: syz.2.2379 (pid 14584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.118853][T14584] Use struct sctp_sack_info instead [ 276.147104][T14588] openvswitch: netlink: IPv6 tunnel dst address is zero [ 276.150909][T14590] veth0_to_team: entered promiscuous mode [ 276.206632][T14594] sctp: [Deprecated]: syz.2.2379 (pid 14594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.206632][T14594] Use struct sctp_sack_info instead [ 277.137773][T14613] lo speed is unknown, defaulting to 1000 [ 277.352796][T14613] wg1 speed is unknown, defaulting to 1000 [ 277.448647][T14632] netlink: 'syz.4.2392': attribute type 1 has an invalid length. [ 277.494380][T14632] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 277.746268][T14635] veth1_macvtap: left promiscuous mode [ 277.758526][T14635] __nla_validate_parse: 4 callbacks suppressed [ 277.758544][T14635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2393'. [ 278.097834][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 278.108819][T14650] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 278.116753][T14650] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2398'. [ 278.129899][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2397'. [ 278.139471][T14650] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 278.139490][T14650] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2398'. [ 278.218569][T14654] tipc: Enabled bearer , priority 0 [ 278.362336][T14654] syzkaller0: entered promiscuous mode [ 278.435512][T14654] syzkaller0: entered allmulticast mode [ 278.466525][T14654] tipc: Resetting bearer [ 278.472444][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2399'. [ 278.490822][T14655] tc_dump_action: action bad kind [ 278.550903][T14653] tipc: Resetting bearer [ 278.637933][T14663] netlink: 'syz.1.2402': attribute type 1 has an invalid length. [ 278.654810][T14663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.513544][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2404'. [ 279.748178][T14489] Set syz1 is full, maxelem 65536 reached [ 279.930035][T14683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2408'. [ 280.110149][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 280.168361][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2411'. [ 280.665613][T14653] tipc: Disabling bearer [ 280.883911][T14703] sctp: [Deprecated]: syz.1.2415 (pid 14703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.883911][T14703] Use struct sctp_sack_info instead [ 280.961885][T14703] netlink: 'syz.1.2415': attribute type 2 has an invalid length. [ 281.350123][T14732] bridge0: Caught tx_queue_len zero misconfig [ 281.439883][T14730] tipc: Enabled bearer , priority 0 [ 281.603000][T14755] sctp: [Deprecated]: syz.2.2431 (pid 14755) Use of int in max_burst socket option deprecated. [ 281.603000][T14755] Use struct sctp_assoc_value instead [ 281.656273][T14759] netlink: 'syz.3.2432': attribute type 7 has an invalid length. [ 281.712079][T14729] tipc: Resetting bearer [ 281.926728][T14774] netlink: 'syz.4.2436': attribute type 27 has an invalid length. [ 283.066558][T14729] tipc: Disabling bearer [ 283.081729][T14784] 8021q: VLANs not supported on ip6tnl0 [ 283.095385][T14788] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 283.239618][T14796] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 283.258800][T14796] __nla_validate_parse: 14 callbacks suppressed [ 283.258820][T14796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2442'. [ 283.940089][T14842] netlink: 'syz.1.2452': attribute type 42 has an invalid length. [ 284.199787][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 284.384046][T14860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2457'. [ 284.457067][T14860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2457'. [ 284.598098][T14865] bond4: (slave veth0_to_bond): Releasing backup interface [ 284.644994][T14865] bond0: (slave geneve1): Releasing backup interface [ 284.660991][T14865] bond5: (slave gretap1): Releasing active interface [ 284.685998][T13316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.695646][T14865] bond8: (slave gretap2): Releasing active interface [ 284.715958][T14865] bond9: (slave vlan2): Releasing active interface [ 284.756871][T14857] lo speed is unknown, defaulting to 1000 [ 284.976555][T14880] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 284.994153][T14857] wg1 speed is unknown, defaulting to 1000 [ 285.000949][T14880] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2463'. [ 285.036742][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 285.053591][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2464'. [ 285.235406][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 285.380855][ T6023] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.546580][T14899] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 285.644609][T14903] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 285.730068][T14905] netlink: 'syz.3.2469': attribute type 58 has an invalid length. [ 285.739032][T14905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2469'. [ 286.062579][T14912] syz.0.2470 (14912) used greatest stack depth: 17608 bytes left [ 286.158889][T14921] dvmrp0: entered allmulticast mode [ 286.233601][T14921] dvmrp0: left allmulticast mode [ 286.241828][T14921] pimreg: left allmulticast mode [ 286.356996][T14938] team_slave_0: entered promiscuous mode [ 286.363020][T14938] team_slave_1: entered promiscuous mode [ 286.376158][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 286.396186][T14938] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 286.439443][T14938] team0: Device macvtap2 is already an upper device of the team interface [ 286.479489][T14938] team_slave_0: left promiscuous mode [ 286.485005][T14938] team_slave_1: left promiscuous mode [ 286.671161][T14953] ip6tnl0: Caught tx_queue_len zero misconfig [ 286.816229][T14966] batman_adv: batadv0: Interface deactivated: dummy0 [ 286.869070][T14966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.882329][T14966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.945394][T14966] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 286.952549][T14966] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 286.982821][T14966] vlan0: left allmulticast mode [ 286.988262][T14966] veth0_vlan: left allmulticast mode [ 286.993726][T14966] vlan0: left promiscuous mode [ 287.003872][T14966] macvtap1: left promiscuous mode [ 287.009448][T14966] macvtap1: left allmulticast mode [ 287.053885][T14966] bond7: left promiscuous mode [ 287.059386][T14966] wireguard0: left promiscuous mode [ 287.070791][T14966] hsr1: left allmulticast mode [ 287.076141][T14966] batadv0: left allmulticast mode [ 287.081311][T14966] bond0: left allmulticast mode [ 287.086644][T14966] bond_slave_0: left allmulticast mode [ 287.092259][T14966] syz_tun: left allmulticast mode [ 287.097649][T14966] geneve1: left allmulticast mode [ 287.109462][T14966] ip6gre3: left allmulticast mode [ 287.171858][T11828] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.188633][T11828] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.216285][T11828] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.242636][T11828] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.261691][T11828] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.279381][T11828] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.309723][T14983] syz.4.2493: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 287.320763][T11828] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.337291][T11828] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.355674][T14983] CPU: 1 UID: 0 PID: 14983 Comm: syz.4.2493 Not tainted syzkaller #0 PREEMPT(full) [ 287.355699][T14983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.355723][T14983] Call Trace: [ 287.355732][T14983] [ 287.355740][T14983] dump_stack_lvl+0x189/0x250 [ 287.355771][T14983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.355793][T14983] ? __pfx__printk+0x10/0x10 [ 287.355818][T14983] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 287.355838][T14983] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 287.355863][T14983] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 287.355890][T14983] warn_alloc+0x214/0x310 [ 287.355928][T14983] ? __pfx_warn_alloc+0x10/0x10 [ 287.355976][T14983] ? __get_vm_area_node+0x28f/0x300 [ 287.356005][T14983] ? xskq_create+0xbf/0x170 [ 287.356029][T14983] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 287.356087][T14983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 287.356115][T14983] ? xskq_create+0x56/0x170 [ 287.356136][T14983] ? __kasan_kmalloc+0x93/0xb0 [ 287.356165][T14983] vmalloc_user_noprof+0xad/0xf0 [ 287.356192][T14983] ? xskq_create+0xbf/0x170 [ 287.356210][T14983] xskq_create+0xbf/0x170 [ 287.356232][T14983] xsk_init_queue+0xb0/0x110 [ 287.356254][T14983] xsk_setsockopt+0x57b/0x8d0 [ 287.356285][T14983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 287.356313][T14983] ? __pfx_aa_sk_perm+0x10/0x10 [ 287.356347][T14983] ? __fget_files+0x2a/0x420 [ 287.356362][T14983] ? aa_sock_opt_perm+0xff/0x1b0 [ 287.356386][T14983] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 287.356407][T14983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 287.356437][T14983] do_sock_setsockopt+0x179/0x1b0 [ 287.356466][T14983] __x64_sys_setsockopt+0x13f/0x1b0 [ 287.356497][T14983] do_syscall_64+0xfa/0x3b0 [ 287.356519][T14983] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.356539][T14983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.356559][T14983] ? clear_bhb_loop+0x60/0xb0 [ 287.356579][T14983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.356596][T14983] RIP: 0033:0x7effea58eec9 [ 287.356613][T14983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.356630][T14983] RSP: 002b:00007effeb38d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.356651][T14983] RAX: ffffffffffffffda RBX: 00007effea7e5fa0 RCX: 00007effea58eec9 [ 287.356665][T14983] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 287.356678][T14983] RBP: 00007effea611f91 R08: 0000000000000004 R09: 0000000000000000 [ 287.356691][T14983] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 287.356704][T14983] R13: 00007effea7e6038 R14: 00007effea7e5fa0 R15: 00007fffef25c528 [ 287.356738][T14983] [ 287.357231][T14983] Mem-Info: [ 287.671439][T14983] active_anon:3920 inactive_anon:0 isolated_anon:0 [ 287.671439][T14983] active_file:3140 inactive_file:39956 isolated_file:0 [ 287.671439][T14983] unevictable:768 dirty:59 writeback:0 [ 287.671439][T14983] slab_reclaimable:12240 slab_unreclaimable:109431 [ 287.671439][T14983] mapped:29083 shmem:1361 pagetables:1316 [ 287.671439][T14983] sec_pagetables:0 bounce:0 [ 287.671439][T14983] kernel_misc_reclaimable:0 [ 287.671439][T14983] free:1314123 free_pcp:13867 free_cma:0 [ 287.774679][T14983] Node 0 active_anon:15780kB inactive_anon:0kB active_file:12560kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116032kB dirty:236kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13172kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 287.825349][T14983] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 287.877008][T14983] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.948552][T14983] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 287.954360][T14983] Node 0 DMA32 free:1353632kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15336kB inactive_anon:0kB active_file:12560kB inactive_file:158028kB unevictable:1536kB writepending:236kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:38516kB local_pcp:17336kB free_cma:0kB [ 288.000809][T14983] lowmem_reserve[]: 0 0 1 1 1 [ 288.005864][T14983] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 288.047321][T14983] lowmem_reserve[]: 0 0 0 0 0 [ 288.052099][T15022] netlink: 'syz.0.2499': attribute type 4 has an invalid length. [ 288.052170][T14983] Node 1 Normal free:3888596kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18872kB local_pcp:8000kB free_cma:0kB [ 288.128723][T15015] netlink: 'syz.0.2499': attribute type 1 has an invalid length. [ 288.147386][T14983] lowmem_reserve[]: 0 0 0 0 0 [ 288.153531][T14983] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 288.182898][T14983] Node 0 DMA32: 1576*4kB (UME) 716*8kB (UME) 416*16kB (UME) 1425*32kB (UM) 792*64kB (UM) 515*128kB (UME) 385*256kB (UME) 288*512kB (UME) 145*1024kB (UM) 8*2048kB (UME) 186*4096kB (UM) = 1353632kB [ 288.229547][T14983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 288.259079][T14983] Node 1 Normal: 101*4kB (UM) 32*8kB (UME) 35*16kB (UME) 115*32kB (UME) 34*64kB (UME) 9*128kB (UME) 4*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 0*2048kB 946*4096kB (M) = 3888676kB [ 288.278262][T14983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.288798][T14983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.298462][T14983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.309214][T14983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.359896][T14983] 45429 total pagecache pages [ 288.367270][T14983] 0 pages in swap cache [ 288.371547][T14983] Free swap = 124996kB [ 288.379857][T14983] Total swap = 124996kB [ 288.384093][T14983] 2097051 pages RAM [ 288.388084][T14983] 0 pages HighMem/MovableOnly [ 288.393033][T14983] 425673 pages reserved [ 288.397977][T14983] 0 pages cma reserved [ 288.599221][T15048] __nla_validate_parse: 5 callbacks suppressed [ 288.599240][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2510'. [ 288.760406][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2512'. [ 288.808052][T15059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.439440][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 289.560844][T15101] netlink: 'syz.4.2523': attribute type 1 has an invalid length. [ 289.845048][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 289.902040][T15115] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 289.948710][T15115] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.107757][T15132] nbd: must specify a size in bytes for the device [ 290.337507][T15144] : entered promiscuous mode [ 290.453164][T15156] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2539'. [ 290.481683][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'. [ 290.691737][T15173] pim6reg1: entered promiscuous mode [ 290.699496][T15173] pim6reg1: entered allmulticast mode [ 290.800432][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2545'. [ 290.812194][T15179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.440081][T15226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2556'. [ 291.910821][T15249] netlink: 'syz.3.2562': attribute type 12 has an invalid length. [ 292.397306][T15229] lo speed is unknown, defaulting to 1000 [ 292.582711][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 292.838577][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2573'. [ 293.021973][T15229] wg1 speed is unknown, defaulting to 1000 [ 293.533899][T15332] Unsupported ieee802154 address type: 0 [ 293.592627][T15326] veth7: entered promiscuous mode [ 293.806103][T15329] bond10: entered allmulticast mode [ 294.040951][T15352] __nla_validate_parse: 8 callbacks suppressed [ 294.040971][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'. [ 294.065874][T15355] netlink: 'syz.1.2592': attribute type 4 has an invalid length. [ 294.103443][T15358] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 294.485171][T15378] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 295.289845][T15359] lo speed is unknown, defaulting to 1000 [ 295.723564][T15434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2613'. [ 295.749312][T15438] netlink: 'syz.1.2614': attribute type 7 has an invalid length. [ 295.856613][T15359] wg1 speed is unknown, defaulting to 1000 [ 296.051871][T15457] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 296.071260][T15457] netlink: 'syz.0.2621': attribute type 4 has an invalid length. [ 296.088013][T15457] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2621'. [ 296.281522][T15470] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 296.446240][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 296.671025][T15490] netlink: 'syz.4.2629': attribute type 3 has an invalid length. [ 296.679833][T15490] netlink: 'syz.4.2629': attribute type 3 has an invalid length. [ 296.720532][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'. [ 296.762739][T15493] xt_l2tp: invalid flags combination: 8 [ 297.028603][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'. [ 297.396112][T15527] sctp: [Deprecated]: syz.1.2638 (pid 15527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.396112][T15527] Use struct sctp_sack_info instead [ 297.468851][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2640'. [ 297.486675][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2640'. [ 297.700155][T15545] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2643'. [ 297.753606][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 297.908915][T15558] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 298.198524][ T3539] tipc: Subscription rejected, illegal request [ 298.260215][T15577] netlink: 'syz.1.2652': attribute type 58 has an invalid length. [ 298.262561][T15578] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 298.279469][T15578] geneve0: left allmulticast mode [ 298.288587][T15578] geneve0: entered allmulticast mode [ 298.295155][T15578] team0: Port device geneve0 added [ 298.301185][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.312327][T15579] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 298.333190][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.356868][ T3539] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.377931][ T3539] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.442049][T15581] netlink: del zone limit has 4 unknown bytes [ 298.751461][T15609] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 298.980983][T15615] pim6reg1: entered promiscuous mode [ 299.000055][T15615] pim6reg1: entered allmulticast mode [ 299.087210][T15625] __nla_validate_parse: 12 callbacks suppressed [ 299.087231][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'. [ 299.414834][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 299.874981][T15654] tipc: Enabling of bearer rejected, failed to enable media [ 299.934991][ T5184] Bluetooth: hci0: command tx timeout [ 300.274838][T15678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.284651][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 300.331997][T15677] veth5: entered promiscuous mode [ 300.341771][T15677] veth5: entered allmulticast mode [ 300.452225][T15682] tipc: Enabling of bearer rejected, already enabled [ 300.488504][T15682] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 300.496597][T15682] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 300.515306][T15684] validate_nla: 1 callbacks suppressed [ 300.515326][T15684] netlink: 'syz.3.2690': attribute type 1 has an invalid length. [ 300.659351][T15688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2691'. [ 300.715925][T15695] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 300.762917][T15695] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 300.780185][T15697] netlink: 'syz.2.2694': attribute type 1 has an invalid length. [ 300.927556][T15700] netlink: 'syz.0.2695': attribute type 13 has an invalid length. [ 300.936175][T15700] macvtap0: refused to change device tx_queue_len [ 301.010338][T15706] netlink: 'syz.3.2696': attribute type 21 has an invalid length. [ 301.030371][T15706] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 301.160033][T15711] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2698'. [ 301.331939][T15721] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2700'. [ 301.741171][T15737] can: request_module (can-proto-0) failed. [ 301.865007][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'. [ 302.091666][T15759] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 302.110172][T15759] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 302.201080][T15761] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2712'. [ 302.370903][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 302.393295][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2707'. [ 303.045290][T15804] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 303.193425][T15814] netlink: 'syz.3.2726': attribute type 4 has an invalid length. [ 303.219615][T15820] netlink: 'syz.3.2726': attribute type 4 has an invalid length. [ 303.496076][T15836] netlink: 'syz.1.2732': attribute type 6 has an invalid length. [ 303.503842][T15836] netlink: 'syz.1.2732': attribute type 5 has an invalid length. [ 303.900467][T15869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.167562][T15884] __nla_validate_parse: 12 callbacks suppressed [ 304.167581][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2745'. [ 304.484278][T15900] netlink: 'syz.0.2750': attribute type 4 has an invalid length. [ 304.586101][T15913] unsupported nla_type 52263 [ 304.782714][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 304.795093][T15927] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 304.803285][T15927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.938164][T15942] netlink: 'syz.4.2763': attribute type 1 has an invalid length. [ 305.036102][T15948] atomic_op ffff88802b72f998 conn xmit_atomic 0000000000000000 [ 305.160508][T15956] atomic_op ffff88802e14d198 conn xmit_atomic 0000000000000000 [ 305.177945][T15947] bond12: (slave geneve2): making interface the new active one [ 305.189614][T15947] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 305.209598][T15953] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 305.234371][ T49] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 305.305362][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 305.314633][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 305.323453][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 305.372051][T15962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2769'. [ 305.889517][T15997] veth7: entered allmulticast mode [ 305.913294][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 305.944243][T16000] netlink: 'syz.3.2782': attribute type 5 has an invalid length. [ 305.976773][ T49] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 306.017511][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.036979][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.055417][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.166863][T16024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2785'. [ 306.984365][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 307.048455][T16056] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2796'. [ 307.163629][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.185933][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.206226][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.220136][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.233985][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.270235][ T5184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.283347][ T5184] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.291090][ T5184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.299799][ T5184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.307651][ T5184] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.415586][ T3539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.427501][ T3539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.529797][ T3539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.557973][ T3539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.583088][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 307.651684][ T3539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.677411][ T3539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.811654][ T3539] netdevsim netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.836456][ T3539] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.887531][T16087] sit0: Caught tx_queue_len zero misconfig [ 307.904660][T16064] lo speed is unknown, defaulting to 1000 [ 308.087285][ T3539] bond8: left promiscuous mode [ 308.093897][ T3539] bridge0: port 1(bond8) entered disabled state [ 308.234218][T16098] netlink: 'syz.0.2811': attribute type 1 has an invalid length. [ 308.268084][T16097] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2811'. [ 308.749906][ T3539] bond2 (unregistering): (slave gretap0): Releasing active interface [ 308.861901][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 308.927804][ T3539] bond6 (unregistering): (slave bridge1): Releasing active interface [ 309.084823][ T3539] bond0 (unregistering): Released all slaves [ 309.098175][ T3539] bond1 (unregistering): Released all slaves [ 309.192365][ T3539] bond2 (unregistering): Released all slaves [ 309.206065][ T3539] bond3 (unregistering): Released all slaves [ 309.297504][ T3539] bond4 (unregistering): Released all slaves [ 309.311445][ T3539] bond5 (unregistering): Released all slaves [ 309.325845][ T3539] bond6 (unregistering): Released all slaves [ 309.377230][ T5871] Bluetooth: hci4: command tx timeout [ 309.423051][ T3539] bond7 (unregistering): Released all slaves [ 309.512686][ T3539] bond8 (unregistering): Released all slaves [ 309.527699][ T3539] bond9 (unregistering): Released all slaves [ 309.542570][ T3539] bond10 (unregistering): Released all slaves [ 309.567793][T16095] netlink: 'syz.1.2810': attribute type 2 has an invalid length. [ 309.583901][T16064] wg1 speed is unknown, defaulting to 1000 [ 309.597587][T16060] lo speed is unknown, defaulting to 1000 [ 309.634855][T16114] __nla_validate_parse: 1 callbacks suppressed [ 309.634875][T16114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2817'. [ 309.669915][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2816'. [ 309.772942][ T3539] : left promiscuous mode [ 309.952299][T16127] netlink: 384 bytes leftover after parsing attributes in process `syz.4.2820'. [ 310.089211][ T3539] tipc: Disabling bearer [ 310.105564][T16060] wg1 speed is unknown, defaulting to 1000 [ 310.113017][ T3539] tipc: Left network mode [ 310.155227][ T3539] IPVS: stopping backup sync thread 9342 ... [ 310.293512][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'. [ 310.352521][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 310.421055][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 310.767077][T16151] bond7: entered allmulticast mode [ 310.773544][T16151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 310.781016][T16151] bridge0: port 1(bond7) entered blocking state [ 310.788329][T16151] bridge0: port 1(bond7) entered disabled state [ 310.798969][T16151] bond7: entered promiscuous mode [ 310.846576][T16152] syzkaller1: entered promiscuous mode [ 310.852172][T16152] syzkaller1: entered allmulticast mode [ 311.101459][T16171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2832'. [ 311.455024][ T5871] Bluetooth: hci4: command 0x041b tx timeout [ 311.470834][T16060] chnl_net:caif_netlink_parms(): no params data found [ 311.643136][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2842'. [ 311.743449][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 311.785540][T16201] team0: Caught tx_queue_len zero misconfig [ 311.792146][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 311.892070][T16207] team0: Device gtp0 is of different type [ 311.963791][ T3539] veth0_macvtap: left promiscuous mode [ 311.977863][ T3539] veth1_vlan: left promiscuous mode [ 312.081857][ T3539] pimreg3 (unregistering): left allmulticast mode [ 312.751704][T16214] macvlan0: left allmulticast mode [ 312.757984][T16214] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 312.770238][T16214] netlink: 'syz.0.2846': attribute type 2 has an invalid length. [ 312.780211][T16222] pim6reg: left allmulticast mode [ 312.854965][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.862141][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.899505][T16060] bridge_slave_0: entered allmulticast mode [ 312.916439][T16060] bridge_slave_0: entered promiscuous mode [ 312.948870][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.963909][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.977926][T16060] bridge_slave_1: entered allmulticast mode [ 312.986672][T16060] bridge_slave_1: entered promiscuous mode [ 313.023253][T16240] netlink: 'syz.1.2854': attribute type 10 has an invalid length. [ 313.124244][T16238] netlink: 'syz.2.2853': attribute type 6 has an invalid length. [ 313.191332][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.221741][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.285458][T16256] netlink: 'syz.1.2856': attribute type 1 has an invalid length. [ 313.293549][T16256] netlink: 'syz.1.2856': attribute type 1 has an invalid length. [ 313.306956][T16256] netlink: 'syz.1.2856': attribute type 2 has an invalid length. [ 313.378489][T16060] team0: Port device team_slave_0 added [ 313.389809][ T3539] IPVS: stop unused estimator thread 0... [ 313.410217][T16060] team0: Port device team_slave_1 added [ 313.537469][ T5184] Bluetooth: hci4: command 0x041b tx timeout [ 313.628745][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.657431][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.716695][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.744628][T16265] delete_channel: no stack [ 313.773238][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.792891][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.834470][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.133646][T16060] hsr_slave_0: entered promiscuous mode [ 314.153777][T16060] hsr_slave_1: entered promiscuous mode [ 314.166279][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 314.172042][T16060] Cannot create hsr debugfs directory [ 314.394040][T16311] 0{X: renamed from gretap0 (while UP) [ 314.425174][T16311] 0{X: entered allmulticast mode [ 314.441482][T16311] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 314.478298][T16316] 1{X: renamed from 30{X (while UP) [ 314.497717][T16316] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 314.739955][T16334] netlink: 'syz.4.2881': attribute type 30 has an invalid length. [ 314.822430][T16334] __nla_validate_parse: 13 callbacks suppressed [ 314.822449][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 314.843513][T16334] netlink: 'syz.4.2881': attribute type 30 has an invalid length. [ 314.913772][T16341] lo speed is unknown, defaulting to 1000 [ 314.927203][T16341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2882'. [ 315.032652][T16345] syzkaller1: entered promiscuous mode [ 315.039387][T16345] syzkaller1: entered allmulticast mode [ 315.209925][T16060] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.239922][T16060] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.258679][T16060] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.310229][T16060] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.614866][ T5184] Bluetooth: hci4: command 0x041b tx timeout [ 315.671811][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.701050][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.728965][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.736160][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.754450][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.761683][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.780067][T16384] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 315.899619][T16388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2893'. [ 315.913722][T16388] veth1_virt_wifi: entered promiscuous mode [ 316.093407][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.180912][T16060] veth0_vlan: entered promiscuous mode [ 316.195638][T16060] veth1_vlan: entered promiscuous mode [ 316.241574][T16060] veth0_macvtap: entered promiscuous mode [ 316.263246][T16060] veth1_macvtap: entered promiscuous mode [ 316.292976][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.323442][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.378632][T11828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.393603][T11828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.432322][T11828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.495545][T11828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.690232][T11828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.720710][T11828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.722373][T16424] netlink: 'syz.4.2902': attribute type 21 has an invalid length. [ 316.756643][T16424] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2902'. [ 316.808953][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.841167][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.086610][ T30] audit: type=1107 audit(1758900867.573:5): pid=16439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='w·;퍣:' [ 317.271701][T16452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.279032][T16452] IPv6: NLM_F_CREATE should be set when creating new route [ 317.286298][T16452] IPv6: NLM_F_CREATE should be set when creating new route [ 317.693111][T16464] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 317.694875][ T5184] Bluetooth: hci4: command 0x041b tx timeout [ 318.088469][T16498] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2927'. [ 318.112436][T16500] vxcan1: tx address claim with dest, not broadcast [ 318.170944][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2928'. [ 318.189501][T16504] tipc: Enabling of bearer rejected, failed to enable media [ 318.313591][T16509] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 318.345606][T16509] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 318.363142][T16509] gretap0: entered promiscuous mode [ 318.386832][T16509] gretap0: entered allmulticast mode [ 318.390955][T16519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 318.715914][T16540] netlink: 'syz.4.2939': attribute type 83 has an invalid length. [ 319.070029][T16566] netlink: 'syz.2.2950': attribute type 58 has an invalid length. [ 319.085437][T16566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2950'. [ 319.241179][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 319.250268][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 319.296794][T16586] team0: Device ip6gre4 is of different type [ 319.323410][T16588] netlink: 'syz.4.2951': attribute type 1 has an invalid length. [ 319.432843][T16582] 8021q: adding VLAN 0 to HW filter on device bond14 [ 319.451847][T16582] bond13: (slave bond14): making interface the new active one [ 319.460236][T16582] bond13: (slave bond14): Enslaving as an active interface with an up link [ 319.472824][T16588] bond13: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 319.486072][T16588] bond13: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 319.517912][T16593] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 319.761653][T16605] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.218350][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.228208][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.236615][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.248446][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.256738][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.532967][T16626] netlink: 'syz.1.2965': attribute type 1 has an invalid length. [ 320.648980][T16626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.729399][T16626] bond7: (slave geneve5): making interface the new active one [ 320.756650][T16626] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 320.770660][T16613] lo speed is unknown, defaulting to 1000 [ 320.825438][T16636] netlink: 'syz.3.2969': attribute type 1 has an invalid length. [ 320.835339][T16636] __nla_validate_parse: 4 callbacks suppressed [ 320.835356][T16636] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2969'. [ 320.894297][T16640] sctp: [Deprecated]: syz.4.2971 (pid 16640) Use of int in maxseg socket option. [ 320.894297][T16640] Use struct sctp_assoc_value instead [ 321.121332][T16613] wg1 speed is unknown, defaulting to 1000 [ 321.172507][T16644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2973'. [ 321.188684][T16658] openvswitch: netlink: Unknown key attributes 2 [ 321.349438][T16613] chnl_net:caif_netlink_parms(): no params data found [ 321.428869][T16613] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.436423][T16613] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.443626][T16613] bridge_slave_0: entered allmulticast mode [ 321.452597][T16613] bridge_slave_0: entered promiscuous mode [ 321.461000][T16613] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.469131][T16613] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.476617][T16613] bridge_slave_1: entered allmulticast mode [ 321.483734][T16613] bridge_slave_1: entered promiscuous mode [ 321.516832][T16613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.528641][T16613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.564325][T16613] team0: Port device team_slave_0 added [ 321.572280][T16613] team0: Port device team_slave_1 added [ 321.603510][T16613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.610649][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.643540][T16613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.659109][T16613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.666452][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.693026][T16613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.742828][T16613] hsr_slave_0: entered promiscuous mode [ 321.749246][T16613] hsr_slave_1: entered promiscuous mode [ 321.755740][T16613] debugfs: 'hsr0' already exists in 'hsr' [ 321.761473][T16613] Cannot create hsr debugfs directory [ 322.225280][T16687] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 322.340500][ T5184] Bluetooth: hci5: command tx timeout [ 322.494087][T16701] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 322.557797][T16613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.578454][T16613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.604228][T16613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.620572][T16613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.665174][T16712] syzkaller1: entered promiscuous mode [ 322.671459][T16712] syzkaller1: entered allmulticast mode [ 322.681766][T16717] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2992'. [ 322.786815][T16724] netlink: 'syz.4.2993': attribute type 83 has an invalid length. [ 322.902490][T16613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.964398][T16729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2995'. [ 323.012598][T16613] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.014310][T16738] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2998'. [ 323.060093][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.067302][T11828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.108088][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.115267][T11828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.484144][T16765] syzkaller1: entered promiscuous mode [ 323.489740][T16765] syzkaller1: entered allmulticast mode [ 323.506580][T16765] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 323.670676][T16613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.722494][T16613] veth0_vlan: entered promiscuous mode [ 323.735715][T16613] veth1_vlan: entered promiscuous mode [ 323.766564][T16613] veth0_macvtap: entered promiscuous mode [ 323.775819][T16613] veth1_macvtap: entered promiscuous mode [ 323.798326][T16613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.815364][T16613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.830066][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.872580][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.916013][T11828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.925280][T11828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.027291][T16776] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 324.035751][T16776] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3006'. [ 324.237450][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 324.254054][T16800] macvlan0: entered promiscuous mode [ 324.265972][T16800] batadv_slave_0: entered promiscuous mode [ 324.274238][T16800] debugfs: 'hsr1' already exists in 'hsr' [ 324.280448][T16800] Cannot create hsr debugfs directory [ 324.281482][T16807] netlink: 'syz.1.3011': attribute type 33 has an invalid length. [ 324.294205][T16807] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3011'. [ 324.306156][T16807] IPVS: set_ctl: invalid protocol: 11456 172.20.20.187:20004 [ 324.402866][T16812] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 324.415172][T16812] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 324.424196][T16772] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.430734][ T5184] Bluetooth: hci5: command tx timeout [ 324.439654][T16772] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 324.490334][T16772] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 324.503566][T16772] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 325.290217][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'. [ 325.313460][T16826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3018'. [ 325.363600][T16828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.372983][T16828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.383577][T16828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.391498][T16828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.854709][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.134983][ T31] INFO: task kworker/0:14:13320 blocked for more than 143 seconds. [ 467.142939][ T31] Not tainted syzkaller #0 [ 467.148077][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.156895][ T31] task:kworker/0:14 state:D stack:25096 pid:13320 tgid:13320 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 467.169275][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 467.176298][ T31] Call Trace: [ 467.179567][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 467.182486][ T31] __schedule+0x1798/0x4cc0 [ 467.187218][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.192609][ T31] ? __pfx___schedule+0x10/0x10 [ 467.198246][ T31] ? schedule+0x91/0x360 [ 467.202517][ T31] schedule+0x165/0x360 [ 467.206734][ T31] schedule_preempt_disabled+0x13/0x30 [ 467.254764][ T31] __mutex_lock+0x7e6/0x1350 [ 467.259416][ T31] ? __mutex_lock+0x5bb/0x1350 [ 467.264197][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 467.279413][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 467.284943][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 467.290686][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 467.296651][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 467.302734][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 467.308497][ T31] process_scheduled_works+0xae1/0x17b0 [ 467.314080][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.320440][ T31] worker_thread+0x8a0/0xda0 [ 467.325112][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.331454][ T31] ? __kthread_parkme+0x7b/0x200 [ 467.336475][ T31] kthread+0x70e/0x8a0 [ 467.340565][ T31] ? __pfx_worker_thread+0x10/0x10 [ 467.345858][ T31] ? __pfx_kthread+0x10/0x10 [ 467.350442][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.355711][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.360912][ T31] ? __pfx_kthread+0x10/0x10 [ 467.365530][ T31] ret_from_fork+0x439/0x7d0 [ 467.370103][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 467.375712][ T31] ? __switch_to_asm+0x39/0x70 [ 467.380495][ T31] ? __switch_to_asm+0x33/0x70 [ 467.385284][ T31] ? __pfx_kthread+0x10/0x10 [ 467.389860][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.394699][ T31] [ 467.397780][ T31] [ 467.397780][ T31] Showing all locks held in the system: [ 467.405816][ T31] 1 lock held by khungtaskd/31: [ 467.410651][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 467.420555][ T31] 2 locks held by getty/5627: [ 467.425294][ T31] #0: ffff88814db860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 467.435396][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 467.445588][ T31] 3 locks held by kworker/0:14/13320: [ 467.450966][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 467.462521][ T31] #1: ffffc900042c7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 467.477446][ T31] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 467.488896][ T31] 2 locks held by syz-executor/16613: [ 467.494269][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.502776][ T31] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 467.512962][ T31] 2 locks held by syz.4.2997/16731: [ 467.518300][ T31] #0: ffff888079a6b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 467.528145][ T31] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 467.538682][ T31] 2 locks held by syz.2.3004/16772: [ 467.543877][ T31] #0: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 467.553976][ T31] #1: ffff888079a6b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 467.563676][ T31] 1 lock held by syz.1.3016/16821: [ 467.568934][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.577423][ T31] 1 lock held by syz.3.3023/16836: [ 467.582520][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.591058][ T31] 1 lock held by syz-executor/16840: [ 467.596661][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.605198][ T31] 1 lock held by syz-executor/16841: [ 467.610481][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.618974][ T31] 1 lock held by syz-executor/16843: [ 467.624239][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.632961][ T31] 1 lock held by syz-executor/16845: [ 467.638274][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.646767][ T31] 1 lock held by syz-executor/16847: [ 467.652052][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.660640][ T31] 1 lock held by syz-executor/16850: [ 467.665930][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.674353][ T31] 1 lock held by syz-executor/16851: [ 467.679655][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.688228][ T31] 1 lock held by syz-executor/16853: [ 467.693487][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.701965][ T31] 1 lock held by syz-executor/16855: [ 467.707265][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.716039][ T31] 1 lock held by syz-executor/16857: [ 467.721320][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.729788][ T31] 1 lock held by syz-executor/16860: [ 467.735312][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.743790][ T31] 1 lock held by syz-executor/16861: [ 467.749353][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.757882][ T31] 1 lock held by syz-executor/16863: [ 467.763147][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.771607][ T31] 1 lock held by syz-executor/16865: [ 467.777584][ T31] #0: ffffffff8e9c2708 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 467.786163][ T31] [ 467.788482][ T31] ============================================= [ 467.788482][ T31] [ 467.798865][ T31] NMI backtrace for cpu 0 [ 467.798889][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 467.798910][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.798922][ T31] Call Trace: [ 467.798930][ T31] [ 467.798939][ T31] dump_stack_lvl+0x189/0x250 [ 467.798969][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.798993][ T31] ? __pfx__printk+0x10/0x10 [ 467.799033][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 467.799065][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 467.799097][ T31] ? __pfx__printk+0x10/0x10 [ 467.799129][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 467.799162][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 467.799193][ T31] watchdog+0xf93/0xfe0 [ 467.799225][ T31] ? watchdog+0x1de/0xfe0 [ 467.799258][ T31] kthread+0x70e/0x8a0 [ 467.799286][ T31] ? __pfx_watchdog+0x10/0x10 [ 467.799312][ T31] ? __pfx_kthread+0x10/0x10 [ 467.799337][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.799356][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.799375][ T31] ? __pfx_kthread+0x10/0x10 [ 467.799400][ T31] ret_from_fork+0x439/0x7d0 [ 467.799423][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 467.799449][ T31] ? __switch_to_asm+0x39/0x70 [ 467.799473][ T31] ? __switch_to_asm+0x33/0x70 [ 467.799496][ T31] ? __pfx_kthread+0x10/0x10 [ 467.799522][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.799570][ T31] [ 467.799576][ T31] Sending NMI from CPU 0 to CPUs 1: [ 467.946012][ C1] NMI backtrace for cpu 1 [ 467.946028][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 467.946047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.946063][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 467.946085][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 b9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 467.946100][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 467.946116][ C1] RAX: 808fea7dedaf2e00 RBX: ffffffff81968528 RCX: 808fea7dedaf2e00 [ 467.946129][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba4bd RDI: ffffffff8be33f80 [ 467.946141][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 467.946154][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a830 [ 467.946166][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d6b40 [ 467.946178][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 467.946191][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.946203][ C1] CR2: 0000559e79e23fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 467.946218][ C1] Call Trace: [ 467.946224][ C1] [ 467.946230][ C1] default_idle+0x13/0x20 [ 467.946250][ C1] default_idle_call+0x74/0xb0 [ 467.946271][ C1] do_idle+0x1e8/0x510 [ 467.946290][ C1] ? __pfx_do_idle+0x10/0x10 [ 467.946314][ C1] cpu_startup_entry+0x44/0x60 [ 467.946330][ C1] start_secondary+0x101/0x110 [ 467.946353][ C1] common_startup_64+0x13e/0x147 [ 467.946382][ C1] [ 467.947123][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 468.112648][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 468.121745][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.131790][ T31] Call Trace: [ 468.135058][ T31] [ 468.137974][ T31] dump_stack_lvl+0x99/0x250 [ 468.142556][ T31] ? __asan_memcpy+0x40/0x70 [ 468.147135][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.152322][ T31] ? __pfx__printk+0x10/0x10 [ 468.156919][ T31] vpanic+0x281/0x750 [ 468.160892][ T31] ? __pfx_vpanic+0x10/0x10 [ 468.165394][ T31] ? preempt_schedule+0xae/0xc0 [ 468.170248][ T31] ? preempt_schedule_common+0x83/0xd0 [ 468.175709][ T31] panic+0xb9/0xc0 [ 468.179432][ T31] ? __pfx_panic+0x10/0x10 [ 468.183841][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 468.189216][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 468.195365][ T31] watchdog+0xfd2/0xfe0 [ 468.199517][ T31] ? watchdog+0x1de/0xfe0 [ 468.203843][ T31] kthread+0x70e/0x8a0 [ 468.207905][ T31] ? __pfx_watchdog+0x10/0x10 [ 468.212575][ T31] ? __pfx_kthread+0x10/0x10 [ 468.217166][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.222367][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.227563][ T31] ? __pfx_kthread+0x10/0x10 [ 468.232160][ T31] ret_from_fork+0x439/0x7d0 [ 468.236754][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 468.241860][ T31] ? __switch_to_asm+0x39/0x70 [ 468.246618][ T31] ? __switch_to_asm+0x33/0x70 [ 468.251371][ T31] ? __pfx_kthread+0x10/0x10 [ 468.255954][ T31] ret_from_fork_asm+0x1a/0x30 [ 468.260736][ T31] [ 468.264017][ T31] Kernel Offset: disabled [ 468.268330][ T31] Rebooting in 86400 seconds..