last executing test programs: 1.975084646s ago: executing program 0 (id=1837): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010102}}}], 0x20}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010102}}}], 0x20}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x10) sendmsg(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="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", 0xfb}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)="ed6ef1af43bbb4cfb3f37d16c6671b8d94dc4d86499d7b47b8ea07d5d9a62627742611750e351f02b7522d7159f4b3105951b4fcfea90546b1f25799e984743725d2b5279796d5a178886ff8e5fdcc0f662bd854ceb264ea", 0x58}], 0x3}, 0x404c050) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r4, 0x0, 0x0) (async) bind$tipc(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) (async) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x8}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000040)=0x5, 0x4) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000140)=0x3, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000140)=0x3, 0x4) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 1.881634786s ago: executing program 0 (id=1838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r1], 0x50}}, 0xc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) r6 = socket(0x1e, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) recvmmsg(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}}], 0x1, 0x40000161, 0x0) write(r5, &(0x7f0000003400)="d3", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.631173016s ago: executing program 2 (id=1844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)=""/119, 0x77, 0x10000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 1.590531902s ago: executing program 0 (id=1845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc, 0x75}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc040}, 0x400c800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r9, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 1.491027099s ago: executing program 3 (id=1848): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x2, 0x30}, &(0x7f0000000240)=0xc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) (async) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, 0x8) 1.447703767s ago: executing program 2 (id=1849): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000200000f0300000002000000140000000300000000000000000000000000000044942decb400000000000200000000000000000100000f010000000000000000000000000000008400002e"], 0x0, 0x69, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002a"], 0xf8}}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c001) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), r3) (async, rerun: 64) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) (async) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @loopback}}]}}]}, 0x48}}, 0x4000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x3, 0x7f, 0x10, @local, @empty, 0x10, 0x40, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001640)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xa0, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x4c, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000012c0)='memory.events\x00', 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r11, 0x89e0, &(0x7f0000001300)={0x1}) (async, rerun: 64) r12 = socket(0x10, 0x2, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)={0x14, r13, 0xe7d02281b1d40445}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r13, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xaa}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xffffffff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x4c}}, 0x8050) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) 1.403239101s ago: executing program 0 (id=1850): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000044) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) sendmmsg$inet(r4, &(0x7f0000000080), 0x0, 0x11) 1.402822453s ago: executing program 4 (id=1851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000010000010000000900010073797a30000000000900030073797a300000004d667780348c6c968c175deffff78a19af848cb3004c000000060a010400000000000000000100000008000b400000000024000480200001800e000100627974656f726465720000000c00028008000140000000000900010073797a300000000014000000110001"], 0xc0}}, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@report={0x4c, 0x20, 0x2, 0x70bd26, 0x9, {0x32, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in6=@local, 0x4e22, 0x0, 0x4e21, 0x7ff, 0x2, 0x0, 0xa0, 0x88}}}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x48040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r9], 0x7c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fefffffffedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4c00308014000400403a050c5baee2004ef2b6d713aa00000c0004"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.282595463s ago: executing program 3 (id=1852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1, 0x0, 0x593) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.258152474s ago: executing program 0 (id=1853): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r6, 0x0) write$tun(r5, &(0x7f00000003c0)=ANY=[], 0xfce) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x6, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x3, 0x3, 0x8d, 0x1]}) (async, rerun: 32) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="440000001001010400"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) 1.163118878s ago: executing program 2 (id=1854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x80108907, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x44, r7, 0x607, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}}, 0x4008000) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x800, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f0000000280)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f00000003c0)='%pK \x00'}, 0xfffffe9e) 1.162599108s ago: executing program 4 (id=1855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x1}, {0x9, 0x1b}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r7], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r8, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r10, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r9, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r11, &(0x7f0000000340), 0x0}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000019000100000000000000000200ac1e0001000000000000c48000000000000000"], 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r15 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r15, @ANYRES16], 0x4c}}, 0x40000) sendmmsg(r14, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r13}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.127610354s ago: executing program 1 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100005800c000380080001"], 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x20000000) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0xffe0}, {}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x0, 0x100, 0x8, @local, @loopback, 0x7800, 0x7800, 0x7f, 0x3}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1b0, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x4000041) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x40000c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 808.420685ms ago: executing program 3 (id=1857): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) 672.298949ms ago: executing program 1 (id=1858): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe39, &(0x7f0000000000)='c\x91\x9c\x1a\xd1)W'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0xffffffffffffffa2, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @local}, {0x0, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x58}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r8, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r7}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r9, 0x1, 0x4c, 0x0, &(0x7f0000000300)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8084) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, 0x0, &(0x7f0000000480)) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r10, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044051}, 0x20044011) 670.823307ms ago: executing program 4 (id=1859): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0b8789cd920e9d255229b77b4ea22feb573959197038a3e79bb088a02186b4b644f942f14ef09f53da27fcd5434db0400c1d2", 0xbd}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "be31eaf4d231d4e0", "c7d3fb81ad5ef26c9d550514d034e30ab228e9be3c852fe10a27a35e39ede638", "fe6055a2", "938b939c9d80ee1d"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000003, 0x30, r4, 0x901ac000) ppoll(&(0x7f0000000780)=[{0xffffffffffffffff, 0x10e0}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) sendmmsg$inet(r3, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x20000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) socket$inet(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) 670.45803ms ago: executing program 3 (id=1860): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149}, 0x94) 625.430968ms ago: executing program 0 (id=1861): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'dh\x00', 0x3, 0x4, 0x64}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r3 = socket(0x8, 0x1, 0x8000000) setsockopt(r3, 0x9, 0x970, &(0x7f0000000300)="277ee0995f47da49bada0a141614c638aa2f07050bf264054d716cbedeffad4d6cb6cd7662d6dc315ee6bef28d3fded7e658eac6f49e87050b3b5620f6f783bead0ca6237d892049b046b15c1ee3c896dc4ce2024a015ebd2d8517c178a63f64d4eaf914bb2a5ad13e544b993d65dc89fe0bc6b8386b03513691368c83048e43376448013496ea", 0x87) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x618e, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="00bf4300000000001c0012000000"], 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'dh\x00', 0x3, 0x4, 0x64}, 0x2c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) socket(0x200000000000011, 0x2, 0x1) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) socket(0x8, 0x1, 0x8000000) (async) setsockopt(r3, 0x9, 0x970, &(0x7f0000000300)="277ee0995f47da49bada0a141614c638aa2f07050bf264054d716cbedeffad4d6cb6cd7662d6dc315ee6bef28d3fded7e658eac6f49e87050b3b5620f6f783bead0ca6237d892049b046b15c1ee3c896dc4ce2024a015ebd2d8517c178a63f64d4eaf914bb2a5ad13e544b993d65dc89fe0bc6b8386b03513691368c83048e43376448013496ea", 0x87) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x618e, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="00bf4300000000001c0012000000"], 0x3c}}, 0x0) (async) 616.753056ms ago: executing program 3 (id=1862): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x2}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r6, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x400}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 499.305326ms ago: executing program 1 (id=1863): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) 498.385912ms ago: executing program 4 (id=1864): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x6, @empty, 0x3}}, 0x0, 0x0, 0x10, 0x0, "1ff1affa1f931c4419cb44b289dd2dd107053d84699538260bbea5ff13c9759914ba781fb38e43f42e4d4f19be0d403735408d195458e8d4361185719dad1f2248ecbc17734d20aa3fe645e656e2e3cf"}, 0xd8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x5, 0x2, 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0e00000000000000000000000000000007000000968589415cc4c2199697274bf30b6d49a800000000000000e2f231b80023b915d407d3d967995f15a0f43216c8042bbb14e93956e0ab4625c86100e0c09209fc897f00000000000000aed6d7f1056d6cfc0ea035ae2743f048705606218b52650cafb3b83ba4152bca1fee56104fe859979fa9c9d31aecd4b99d6bee00edffffff00000000", @ANYRES32], 0x18}}, 0x0) 497.294114ms ago: executing program 3 (id=1865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000c5000000030000004c0001800d0001007564703a73797a310000000038000400200001000a00000000100000ff05000000000000000000000000000100000000140002"], 0x60}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c010) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24000091}, 0x48000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x800, 0x20}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x3, {0x0, 0x0, 0x0, r2, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) 460.752422ms ago: executing program 1 (id=1866): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80000) connect$llc(r1, &(0x7f00000002c0)={0x1a, 0x335, 0x6, 0x81, 0xd, 0x5, @multicast}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) close(0x3) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6a53198af9b87849"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000080)={0x1, 0x3, 0x1000, 0x32, &(0x7f0000000000)="b93ed5f404a7a594cb7851e3bef22c3b639e89e9c5a4b54ed08fb9184edc7f90641ed965ca643705993367e9f3b0d5164aff", 0x4, 0x0, &(0x7f0000000040)="3f74f24b"}) 352.457025ms ago: executing program 4 (id=1867): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e1c86f2f4c1cb611f6c23cef912b3bb6ff4ef72e0eb809f5d933a32561d967ea991c597fb623805c2588f40ecc27ccc0bedf69c40b3cd8f33598cc99b8ba9030c5f3c144101bba7693efe64f8bd19ae8b65bb31ede7d7c69223910389b17ca19215d0af67b3f5d61d31bb1ce4be27e", 0x6f}], 0x1, &(0x7f0000000140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x8000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x400, @mcast2, 0x8000}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000300)={r4, 0x9}, 0x8) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x727baddbaef4ed45, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$phonet(0x23, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x9}, 0x10) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r7, &(0x7f0000000580)={0xa, 0x0, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f00000005c0)={0xa, 0x4e23, 0x100, @private2, 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000600)="a2ff70a1c08555ffcff6cf79297ae0d00af0f0c8fd7cedef6b89c9f1232f4a8b926f60e164a24cd3d3a02635014183c3edbab48b465fea3da846a7fdff499a40de5a3187f138a1be56ce9fa87dc9daa9d4a1ca6ee3f122070bc5a64dc5fa83000d54c31a3ba514ed32a9a9129328aa359915baa9e597216ef56171d6734418f1d59cd94adee6de6b9a13fe4ee2863357e73314316fc32601b14bf473446849a845f62c2088d15aefefb85bf61e1314f04816fbfd9fb2e0463fbb70e1ca9c5199d8e8a3a4ec4811590599cd", 0xcb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="19a9b45eee4e83dde349509b9c2f3c7240732393ba2944a552a5cd8788a5f508da63b817bb19e2741680a4df6e9346", 0x2f}, {&(0x7f0000000780)="42640e6cb9a21812df1f824e17857ed224bdca3a6dda6c8b340eb634d08550e5f8f340370b03248706d74b9a0b4e257e3671ebbf833f08ab7d60b7d9d9b394e6f2658f867a8f124470b90315dbcb4546dd605cf23ad9e003b29ba7def6020c3c296a2f7da4c84fd2c414af4238eef66c31112159900cbfbd2fea05bcfe5af03a4a40c675564e50db048bbaadd3b8fbda5a7edd9d7345958d23c656af640794633ba13af197a6bb649f7037b5a3a0eca249189b3782c678c0d4faee33", 0xbc}], 0x2, &(0x7f0000000880)=[@rthdrdstopts={{0x258, 0x29, 0x37, {0x32, 0x47, '\x00', [@generic={0x0, 0xe2, "94179253d2129858de702f8e3f2c8c225162f2aa57f4e6a09fe2b7f8c6b253ecec19495ee33756ce29cda37ccd3e72653ca83e4cd048be7fcf657e2f18567dcf004730751bb384b9996d7534ef538b9a007bfd58ae356b46c3f56f5bca926ee513e2f1dedd26cacf393cbd285c4082da8750e1863175e2599bc1ae09d80b95137cd49bea67a3f2422a9b1615ef85a6154c6d05cc325f2be90a520a7d936bb1cfe6cb09b817599b076dba72020ea042b298d05a0e7ee4f5f9b641c0ffb3adf276b3e5379a357e6fbcfd4c50259fcc9907053fed12fc3d346b12ed1357fe702b512f76"}, @enc_lim={0x4, 0x1, 0xfc}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x81, 0xb1, "c40f3caf9a9d3df1bcdff678313eadac572d53b6c19714c03783d1b5d058a63295132620426ff849190ca21bb8d2260e291febb690be8689613a48f12c178879f0b12f1a81b22e6573a433798774b91d87d65d5a4a0e53bab3aa305b46fdb9482a0d460af8facfe02587058598066a6f21de0945b001358bb5ea08f8414a58566f1c668d776b5189183816fff9d45d955a3d7b35973d9c2b931f92c2966dcd065595871934c73b3720cbc3fcf94e649e2b"}, @jumbo={0xc2, 0x4, 0xfffffff9}, @generic={0x59, 0x62, "be21b68d86a60b99d79d29bcf8ffce41bc0928b4a8654c4b1c4d6fef780d4c16a0aeffdc662d5d6b9fe285db4d0f0510b7960e65a83300d4ec3969b795d9a0e908f6ed3b2ee2392f9f9e2aa2f4b901a013c86a4771f6ed96397456ceb1f241e5501a"}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2e, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff7}, @jumbo={0xc2, 0x4, 0x7f}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x1, 0x20, 0x0, [@private1, @private1, @dev={0xfe, 0x80, '\x00', 0xf}, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}], 0x310}}], 0x2, 0x4000) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000f40)={0x5, &(0x7f0000000c40)=[{}, {@none}, {}, {}, {@fixed}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x1c0, 0xb, 0x6, 0xb00, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0\x00'}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '}\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7fff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_COMMENT={0xc, 0x1a, '^[#/+@{\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x40}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40804}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001200)={'syzkaller0\x00'}) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r6, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x32}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x40) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r11, 0x84, 0x23, &(0x7f0000001340)={r4, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001380)={r4, @in={{0x2, 0x4e21, @local}}, [0x1, 0x9, 0x1, 0x0, 0x7, 0x401, 0x6, 0x5, 0x48, 0x8000000000000000, 0x8000, 0x100000000, 0x5, 0x4, 0x9]}, &(0x7f0000001480)=0x100) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f00000014c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000001500)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) 259.01622ms ago: executing program 1 (id=1868): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000880)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x1}}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3f7, 0x20, 0x4070bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x23}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x1) openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) 258.738922ms ago: executing program 2 (id=1869): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'syz_tun\x00', 0x5}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400, 0x1fc, 0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x4, 0x4) 187.127074ms ago: executing program 1 (id=1870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}}, 0x20000080) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x1f0, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb79a}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7853}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7df9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r4, @ANYRES8=r1], 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 164.906831ms ago: executing program 2 (id=1871): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc4}) 15.296741ms ago: executing program 4 (id=1872): unshare(0x20400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) 0s ago: executing program 2 (id=1873): r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6, &(0x7f0000000200)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0x5, 0xb}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): as an invalid length. [ 91.486939][ T6525] tipc: Enabling of bearer rejected, failed to enable media [ 91.576494][ T6527] netlink: 'syz.1.172': attribute type 83 has an invalid length. [ 91.591520][ T6530] openvswitch: netlink: Key 6 has unexpected len 60 expected 2 [ 91.691433][ T6536] tap0: tun_chr_ioctl cmd 1074025676 [ 91.708106][ T6536] tap0: owner set to 0 [ 91.720487][ T6538] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 91.745905][ T6538] __nla_validate_parse: 24 callbacks suppressed [ 91.745919][ T6538] netlink: 766 bytes leftover after parsing attributes in process `syz.0.175'. [ 91.766836][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 91.830243][ T6540] syzkaller1: entered promiscuous mode [ 91.853363][ T6540] syzkaller1: entered allmulticast mode [ 91.914347][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.179'. [ 91.934998][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 92.046776][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 92.116718][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 92.170241][ T6563] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 92.219258][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 92.333092][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 92.608242][ T6581] netlink: 'syz.3.186': attribute type 2 has an invalid length. [ 92.625731][ T6583] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 92.680092][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.188'. [ 92.687397][ T6583] netlink: 'syz.4.188': attribute type 2 has an invalid length. [ 92.721875][ T6585] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 92.784006][ T6589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.189'. [ 92.864641][ T6585] bond1: entered promiscuous mode [ 92.894053][ T6585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.081450][ T6610] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 93.089339][ T6611] netlink: 'syz.0.196': attribute type 39 has an invalid length. [ 93.424422][ T6627] sctp: [Deprecated]: syz.3.200 (pid 6627) Use of int in maxseg socket option. [ 93.424422][ T6627] Use struct sctp_assoc_value instead [ 93.585289][ T6633] tipc: Started in network mode [ 93.590194][ T6633] tipc: Node identity ee333dd90b2, cluster identity 4711 [ 93.619218][ T6633] tipc: Enabled bearer , priority 0 [ 93.644030][ T6633] syzkaller0: entered promiscuous mode [ 93.649519][ T6633] syzkaller0: entered allmulticast mode [ 93.732054][ T6632] tipc: Resetting bearer [ 93.849847][ T6632] tipc: Disabling bearer [ 94.239910][ T6671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 94.680186][ T6707] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20001 [ 94.779443][ T6712] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 94.915009][ T6713] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 94.988207][ T6712] veth3: entered promiscuous mode [ 95.002332][ T6712] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 95.092104][ T6729] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 95.615707][ T6749] bond2: entered promiscuous mode [ 95.620772][ T6749] bond2: entered allmulticast mode [ 95.644899][ T6753] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 95.654887][ T6749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.775140][ T6753] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 95.797560][ T6765] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.946763][ T5960] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.073323][ T6779] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 96.127709][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.141245][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.184043][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.579680][ T6803] tipc: Enabling of bearer rejected, failed to enable media [ 96.667474][ T6810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.785223][ T6816] __nla_validate_parse: 6 callbacks suppressed [ 96.785241][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 96.893773][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 96.906131][ T6810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.963740][ T6825] netlink: 88 bytes leftover after parsing attributes in process `syz.0.256'. [ 96.972933][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 96.981930][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 97.052352][ T6810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.179971][ T6810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.201341][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 97.209819][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 97.229528][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 97.386384][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.433903][ T6840] lo: entered promiscuous mode [ 97.441886][ T6840] lo: entered allmulticast mode [ 97.488973][ T5968] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.506828][ T5968] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.520182][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 97.567434][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 97.678251][ T5968] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.759197][ T6834] infiniband syz2: set down [ 97.768200][ T5937] vxcan1 speed is unknown, defaulting to 1000 [ 97.823051][ T6834] infiniband syz2: added vxcan1 [ 97.849608][ T6859] C: renamed from team_slave_0 (while UP) [ 97.928259][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 97.938759][ T6859] validate_nla: 3 callbacks suppressed [ 97.938773][ T6859] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 97.977521][ T6870] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 97.978818][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 98.015267][ T6859] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 98.024294][ T6870] netlink: 144 bytes leftover after parsing attributes in process `syz.3.267'. [ 98.044026][ T6870] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 98.057029][ T6834] RDS/IB: syz2: added [ 98.061546][ T6834] smc: adding ib device syz2 with port count 1 [ 98.067806][ T6870] netlink: 'syz.3.267': attribute type 2 has an invalid length. [ 98.076841][ T6834] smc: ib device syz2 port 1 has pnetid [ 98.095272][ T5937] vxcan1 speed is unknown, defaulting to 1000 [ 98.103802][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 98.218073][ T6877] gtp0: entered promiscuous mode [ 98.262916][ T6877] gtp0: entered allmulticast mode [ 98.340780][ T6880] bridge_slave_0: left allmulticast mode [ 98.358006][ T6880] bridge_slave_0: left promiscuous mode [ 98.368340][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.458592][ T6880] bridge_slave_1: left allmulticast mode [ 98.468621][ T6880] bridge_slave_1: left promiscuous mode [ 98.498106][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.562745][ T6880] bond0: (slave bond_slave_0): Releasing backup interface [ 98.619301][ T6880] bond0: (slave bond_slave_1): Releasing backup interface [ 98.689058][ T6880] team0: Port device team_slave_0 removed [ 98.723578][ T6880] team0: Port device team_slave_1 removed [ 98.740245][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.769147][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.805924][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.816807][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.847722][ T6880] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 98.935446][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 100.287360][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 101.110389][ T6973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.139873][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 101.500889][ T6980] syzkaller0: entered promiscuous mode [ 101.508895][ T6980] syzkaller0: entered allmulticast mode [ 101.645516][ T6834] vxcan1 speed is unknown, defaulting to 1000 [ 101.726440][ T6993] tipc: Enabled bearer , priority 0 [ 101.750517][ T6993] syzkaller0: entered promiscuous mode [ 101.770500][ T6993] syzkaller0: entered allmulticast mode [ 102.846210][ T5937] tipc: Node number set to 3843243481 [ 102.978531][ T7014] tipc: Resetting bearer [ 103.002354][ T6992] tipc: Resetting bearer [ 103.089075][ T6992] tipc: Disabling bearer [ 103.092086][ T7023] syz.3.306: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.110649][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 103.110675][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.110694][ T7023] Call Trace: [ 103.110701][ T7023] [ 103.110708][ T7023] dump_stack_lvl+0x189/0x250 [ 103.110740][ T7023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.110759][ T7023] ? __pfx__printk+0x10/0x10 [ 103.110779][ T7023] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.110797][ T7023] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.110819][ T7023] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 103.110841][ T7023] warn_alloc+0x214/0x310 [ 103.110866][ T7023] ? stack_depot_save_flags+0x40/0x860 [ 103.110892][ T7023] ? __pfx_warn_alloc+0x10/0x10 [ 103.110917][ T7023] ? kasan_save_track+0x4f/0x80 [ 103.110939][ T7023] ? xskq_create+0x56/0x170 [ 103.110953][ T7023] ? xsk_init_queue+0xb0/0x110 [ 103.110967][ T7023] ? xsk_setsockopt+0x4dc/0x8d0 [ 103.110989][ T7023] ? do_sock_setsockopt+0x17c/0x1b0 [ 103.111007][ T7023] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 103.111024][ T7023] ? do_syscall_64+0xfa/0x3b0 [ 103.111041][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.111067][ T7023] __vmalloc_node_range_noprof+0x125/0x12f0 [ 103.111120][ T7023] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.111150][ T7023] ? __kasan_kmalloc+0x93/0xb0 [ 103.111173][ T7023] vmalloc_user_noprof+0xad/0xf0 [ 103.111197][ T7023] ? xskq_create+0xbf/0x170 [ 103.111215][ T7023] xskq_create+0xbf/0x170 [ 103.111235][ T7023] xsk_init_queue+0xb0/0x110 [ 103.111255][ T7023] xsk_setsockopt+0x4dc/0x8d0 [ 103.111282][ T7023] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.111306][ T7023] ? __pfx_aa_sk_perm+0x10/0x10 [ 103.111333][ T7023] ? aa_sock_opt_perm+0xff/0x1b0 [ 103.111353][ T7023] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 103.111371][ T7023] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.111396][ T7023] do_sock_setsockopt+0x17c/0x1b0 [ 103.111420][ T7023] __x64_sys_setsockopt+0x13f/0x1b0 [ 103.111446][ T7023] do_syscall_64+0xfa/0x3b0 [ 103.111463][ T7023] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.111481][ T7023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.111496][ T7023] ? clear_bhb_loop+0x60/0xb0 [ 103.111517][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.111534][ T7023] RIP: 0033:0x7fef7478eec9 [ 103.111556][ T7023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.111577][ T7023] RSP: 002b:00007fef7556a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.111595][ T7023] RAX: ffffffffffffffda RBX: 00007fef749e5fa0 RCX: 00007fef7478eec9 [ 103.111608][ T7023] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 103.111618][ T7023] RBP: 00007fef74811f91 R08: 0000000000000004 R09: 0000000000000000 [ 103.111629][ T7023] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.111640][ T7023] R13: 00007fef749e6038 R14: 00007fef749e5fa0 R15: 00007ffd87c34a98 [ 103.111670][ T7023] [ 103.111681][ T7023] Mem-Info: [ 103.221269][ T7029] __nla_validate_parse: 9 callbacks suppressed [ 103.221285][ T7029] netlink: 248 bytes leftover after parsing attributes in process `syz.3.306'. [ 103.223161][ T7023] active_anon:5992 inactive_anon:0 isolated_anon:0 [ 103.223161][ T7023] active_file:2792 inactive_file:39881 isolated_file:0 [ 103.223161][ T7023] unevictable:768 dirty:145 writeback:0 [ 103.223161][ T7023] slab_reclaimable:10806 slab_unreclaimable:98208 [ 103.223161][ T7023] mapped:34379 shmem:1356 pagetables:1143 [ 103.223161][ T7023] sec_pagetables:0 bounce:0 [ 103.223161][ T7023] kernel_misc_reclaimable:0 [ 103.223161][ T7023] free:1326918 free_pcp:16798 free_cma:0 [ 103.233206][ T7029] netlink: 52 bytes leftover after parsing attributes in process `syz.3.306'. [ 103.235166][ T7023] Node 0 active_anon:23968kB inactive_anon:0kB active_file:11168kB inactive_file:159324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137516kB dirty:580kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12436kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 103.282032][ T7029] netlink: 156 bytes leftover after parsing attributes in process `syz.3.306'. [ 103.286455][ T7023] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 103.343280][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.309'. [ 103.357813][ T7023] Node 0 [ 103.468010][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 103.474161][ T7023] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 103.603272][ T7023] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 103.609052][ T7023] Node 0 DMA32 free:1398356kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24016kB inactive_anon:0kB active_file:11168kB inactive_file:157752kB unevictable:1536kB writepending:580kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:49084kB local_pcp:28568kB free_cma:0kB [ 103.651198][ T7023] lowmem_reserve[]: 0 0 1 1 1 [ 103.668325][ T7023] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 103.697823][ T7023] lowmem_reserve[]: 0 0 0 0 0 [ 103.704998][ T7023] Node 1 Normal free:3893644kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17956kB local_pcp:7524kB free_cma:0kB [ 103.816495][ T7023] lowmem_reserve[]: 0 0 0 0 0 [ 103.853013][ T7023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 103.911700][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.313'. [ 103.952376][ T7023] Node 0 DMA32: 68*4kB (ME) 22*8kB (UM) 99*16kB (UM) 295*32kB (UME) 136*64kB (UM) 13*128kB (UME) 3*256kB (UM) 2*512kB (UE) 3*1024kB (UME) 4*2048kB (ME) 333*4096kB (M) = 1398864kB [ 104.004728][ T7023] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 104.100787][ T7023] Node 1 Normal: 175*4kB (UE) 62*8kB (UME) 34*16kB (UME) 68*32kB (UME) 17*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3893644kB [ 104.226792][ T7023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.274730][ T7027] syz.3.306 (7027) used greatest stack depth: 17608 bytes left [ 104.292477][ T7023] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.322429][ T7063] netlink: 'syz.0.318': attribute type 13 has an invalid length. [ 104.360804][ T7023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.382622][ T7023] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.404943][ T7023] 44058 total pagecache pages [ 104.409720][ T7023] 0 pages in swap cache [ 104.418223][ T7023] Free swap = 124996kB [ 104.460818][ T7023] Total swap = 124996kB [ 104.472753][ T7023] 2097051 pages RAM [ 104.479199][ T7023] 0 pages HighMem/MovableOnly [ 104.485133][ T7023] 425672 pages reserved [ 104.498080][ T7023] 0 pages cma reserved [ 104.551313][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.568794][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.582335][ T7063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.711185][ T7081] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 104.847237][ T7088] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.859996][ T7088] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 104.874422][ T7088] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 104.940514][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'. [ 105.064973][ T7081] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.083043][ T7081] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 105.233619][ T7103] netlink: 56 bytes leftover after parsing attributes in process `syz.0.328'. [ 105.250653][ T7105] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 105.345001][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 105.419012][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 106.447650][ T7178] syzkaller0: entered promiscuous mode [ 106.456078][ T7178] syzkaller0: entered allmulticast mode [ 106.666445][ T7187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.970176][ T7202] bridge_slave_1: left allmulticast mode [ 106.976394][ T7202] bridge_slave_1: left promiscuous mode [ 106.989845][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.016603][ T7202] bridge_slave_0: left allmulticast mode [ 107.027455][ T7202] bridge_slave_0: left promiscuous mode [ 107.033561][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.042276][ T7208] netlink: set zone limit has 8 unknown bytes [ 107.194938][ T7216] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 108.332707][ T7231] __nla_validate_parse: 14 callbacks suppressed [ 108.332723][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 108.497724][ T7236] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 108.541863][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 108.716117][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.376'. [ 108.980775][ T7279] netlink: 'syz.4.382': attribute type 2 has an invalid length. [ 109.045381][ T7279] netlink: 244 bytes leftover after parsing attributes in process `syz.4.382'. [ 109.231314][ T7295] dvmrp0: entered allmulticast mode [ 109.439228][ T7312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.501310][ T7317] 8021q: VLANs not supported on wg0 [ 109.561479][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 109.629249][ T7308] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 109.689736][ T7308] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.710109][ T7308] gretap1: entered promiscuous mode [ 109.720045][ T7308] gretap1: entered allmulticast mode [ 109.871641][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.899661][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.969908][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.033088][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.082060][ T7340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.137056][ T7345] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.399'. [ 110.338242][ T7345] pim6reg: entered allmulticast mode [ 110.348245][ T7363] tipc: Started in network mode [ 110.364828][ T7363] tipc: Node identity 1a8f4efa10be, cluster identity 4711 [ 110.372119][ T7363] tipc: Enabled bearer , priority 0 [ 110.417474][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 110.433804][ T7345] syzkaller0: entered promiscuous mode [ 110.439571][ T7345] syzkaller0: entered allmulticast mode [ 110.466061][ T7345] sctp: [Deprecated]: syz.1.399 (pid 7345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.466061][ T7345] Use struct sctp_sack_info instead [ 110.591780][ T7344] tipc: Resetting bearer [ 110.646601][ T7344] tipc: Disabling bearer [ 110.698286][ T7376] syzkaller0: entered promiscuous mode [ 110.714945][ T7376] syzkaller0: entered allmulticast mode [ 110.913639][ T7382] unknown channel width for channel at 909000KHz? [ 111.132660][ T7402] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.411'. [ 111.758569][ T7444] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 111.772325][ T7444] netlink: 'syz.3.423': attribute type 7 has an invalid length. [ 111.788735][ T7444] netlink: 168 bytes leftover after parsing attributes in process `syz.3.423'. [ 111.952195][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'. [ 111.955168][ T5953] IPVS: starting estimator thread 0... [ 112.073965][ T7455] IPVS: using max 30 ests per chain, 72000 per kthread [ 112.233547][ T7469] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 112.262229][ T7469] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 112.308049][ T7474] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 112.327473][ T7475] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (68) [ 112.339874][ T7474] netlink: 'syz.2.432': attribute type 2 has an invalid length. [ 112.401784][ T7474] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 112.460384][ T7485] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 112.462260][ T7474] netlink: 'syz.2.432': attribute type 2 has an invalid length. [ 112.491427][ T7485] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 112.498310][ T7488] sctp: [Deprecated]: syz.0.436 (pid 7488) Use of int in max_burst socket option. [ 112.498310][ T7488] Use struct sctp_assoc_value instead [ 112.541671][ T7485] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 112.654016][ T7497] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.661226][ T7497] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 112.905617][ T7508] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 112.923444][ T7501] : entered promiscuous mode [ 113.137266][ T7517] pim6reg1: entered promiscuous mode [ 113.142596][ T7517] pim6reg1: entered allmulticast mode [ 113.273360][ T7530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.293989][ T7532] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 113.420974][ T7542] netlink: 'syz.3.443': attribute type 11 has an invalid length. [ 113.441071][ T7542] __nla_validate_parse: 19 callbacks suppressed [ 113.441086][ T7542] netlink: 224 bytes leftover after parsing attributes in process `syz.3.443'. [ 113.526939][ T7548] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 113.579956][ T7548] syzkaller0: entered promiscuous mode [ 113.601299][ T7548] syzkaller0: entered allmulticast mode [ 113.631623][ T7548] tipc: Started in network mode [ 113.655949][ T7548] tipc: Node identity 226de1d56e21, cluster identity 4711 [ 113.669688][ T7548] tipc: Enabled bearer , priority 0 [ 113.721499][ T7548] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.742481][ T7548] tipc: Resetting bearer [ 113.767920][ T7545] tipc: Resetting bearer [ 113.786861][ T7545] tipc: Disabling bearer [ 113.945551][ T7570] tipc: Enabled bearer , priority 0 [ 113.965374][ T7570] syzkaller0: entered promiscuous mode [ 113.997364][ T7570] syzkaller0: entered allmulticast mode [ 114.045021][ T7570] tipc: Resetting bearer [ 114.066216][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 114.216786][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 114.278881][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 114.317148][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.469'. [ 114.700291][ T7564] tipc: Resetting bearer [ 114.720582][ T7612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.476'. [ 114.753013][ T7564] tipc: Disabling bearer [ 115.058631][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 115.071018][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 115.352877][ T7642] syzkaller0: entered promiscuous mode [ 115.358518][ T7642] syzkaller0: entered allmulticast mode [ 115.465940][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.488'. [ 115.707301][ T7663] netlink: 112 bytes leftover after parsing attributes in process `syz.2.488'. [ 116.478991][ T7656] vlan0: entered promiscuous mode [ 116.493547][ T7656] vlan0: entered allmulticast mode [ 116.498683][ T7656] veth0_vlan: entered allmulticast mode [ 116.626427][ T7666] 8021q: VLANs not supported on lo [ 116.687012][ T7676] gre3: entered allmulticast mode [ 116.837696][ T7692] sctp: [Deprecated]: syz.4.498 (pid 7692) Use of int in max_burst socket option deprecated. [ 116.837696][ T7692] Use struct sctp_assoc_value instead [ 116.858030][ T7679] bridge_slave_1: left allmulticast mode [ 116.874122][ T7679] bridge_slave_1: left promiscuous mode [ 116.880035][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.919602][ T7679] bridge_slave_0: left allmulticast mode [ 116.925528][ T7679] bridge_slave_0: left promiscuous mode [ 116.931389][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.072590][ T7703] veth0_macvtap: left promiscuous mode [ 117.306738][ T7718] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 117.527334][ T7731] validate_nla: 5 callbacks suppressed [ 117.527351][ T7731] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 117.621625][ T7725] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 117.829928][ T7750] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 117.879638][ T7750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.073887][ T7760] bridge0: entered promiscuous mode [ 118.080350][ T7763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.091910][ T7760] bridge0: entered allmulticast mode [ 118.311735][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.345490][ T7781] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 118.401980][ T7775] vlan2: entered allmulticast mode [ 118.408526][ T7775] gretap0: entered allmulticast mode [ 119.091593][ T7820] __nla_validate_parse: 12 callbacks suppressed [ 119.091608][ T7820] netlink: 277 bytes leftover after parsing attributes in process `syz.0.537'. [ 119.114449][ T7818] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 119.445291][ T7825] syzkaller0: entered promiscuous mode [ 119.450906][ T7825] syzkaller0: entered allmulticast mode [ 119.476644][ T7831] tipc: Enabled bearer , priority 0 [ 119.577948][ T7837] netlink: 200 bytes leftover after parsing attributes in process `syz.2.541'. [ 119.599353][ T7837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.493092][ T5937] tipc: Node number set to 1280106965 [ 120.590461][ T7831] syzkaller0: entered promiscuous mode [ 120.596275][ T7831] syzkaller0: entered allmulticast mode [ 120.663329][ T7830] tipc: Resetting bearer [ 120.745038][ T7830] tipc: Disabling bearer [ 120.939212][ T7867] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 121.107358][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 121.243254][ T7880] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.551'. [ 121.439152][ T7892] netlink: 44 bytes leftover after parsing attributes in process `syz.1.553'. [ 121.724043][ T7910] netlink: 56 bytes leftover after parsing attributes in process `syz.4.556'. [ 122.057960][ T7919] syz.2.560: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.082952][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.2.560 Not tainted syzkaller #0 PREEMPT(full) [ 122.082979][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.082989][ T7919] Call Trace: [ 122.082997][ T7919] [ 122.083004][ T7919] dump_stack_lvl+0x189/0x250 [ 122.083033][ T7919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.083052][ T7919] ? __pfx__printk+0x10/0x10 [ 122.083074][ T7919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.083093][ T7919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.083114][ T7919] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 122.083136][ T7919] warn_alloc+0x214/0x310 [ 122.083165][ T7919] ? __pfx_warn_alloc+0x10/0x10 [ 122.083197][ T7919] ? __get_vm_area_node+0x28f/0x300 [ 122.083219][ T7919] ? hash_net_create+0x358/0xfe0 [ 122.083242][ T7919] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 122.083262][ T7919] ? do_syscall_64+0xfa/0x3b0 [ 122.083310][ T7919] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.083338][ T7919] ? rcu_is_watching+0x15/0xb0 [ 122.083357][ T7919] ? hash_net_create+0x358/0xfe0 [ 122.083372][ T7919] ? hash_net_create+0x358/0xfe0 [ 122.083386][ T7919] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 122.083408][ T7919] ? hash_net_create+0x358/0xfe0 [ 122.083425][ T7919] ? hash_net_create+0x2fe/0xfe0 [ 122.083446][ T7919] hash_net_create+0x358/0xfe0 [ 122.083471][ T7919] ? __nla_parse+0x40/0x60 [ 122.083497][ T7919] ? __pfx_hash_net_create+0x10/0x10 [ 122.083516][ T7919] ip_set_create+0xa97/0x1940 [ 122.083539][ T7919] ? ip_set_create+0x4a2/0x1940 [ 122.083573][ T7919] ? __pfx_ip_set_create+0x10/0x10 [ 122.083632][ T7919] nfnetlink_rcv_msg+0xb4a/0x1130 [ 122.083657][ T7919] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 122.083698][ T7919] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.083719][ T7919] ? kasan_save_free_info+0x46/0x50 [ 122.083787][ T7919] netlink_rcv_skb+0x205/0x470 [ 122.083806][ T7919] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.083830][ T7919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.083860][ T7919] ? bpf_lsm_capable+0x9/0x20 [ 122.083879][ T7919] ? security_capable+0x7e/0x2e0 [ 122.083910][ T7919] nfnetlink_rcv+0x26a/0x2520 [ 122.083936][ T7919] ? __dev_queue_xmit+0x1d79/0x3b50 [ 122.083967][ T7919] ? __dev_queue_xmit+0x27b/0x3b50 [ 122.083999][ T7919] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 122.084021][ T7919] ? __pfx___dev_queue_xmit+0x10/0x10 [ 122.084055][ T7919] ? ref_tracker_free+0x63a/0x7d0 [ 122.084072][ T7919] ? __asan_memcpy+0x40/0x70 [ 122.084090][ T7919] ? __pfx_ref_tracker_free+0x10/0x10 [ 122.084123][ T7919] ? skb_clone+0x246/0x3a0 [ 122.084147][ T7919] ? __netlink_deliver_tap+0x807/0x850 [ 122.084164][ T7919] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.084189][ T7919] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.084214][ T7919] netlink_unicast+0x82f/0x9e0 [ 122.084246][ T7919] ? __pfx_netlink_unicast+0x10/0x10 [ 122.084271][ T7919] ? netlink_sendmsg+0x642/0xb30 [ 122.084286][ T7919] ? skb_put+0x11b/0x210 [ 122.084308][ T7919] netlink_sendmsg+0x805/0xb30 [ 122.084336][ T7919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.084357][ T7919] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.084376][ T7919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.084394][ T7919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.084412][ T7919] __sock_sendmsg+0x219/0x270 [ 122.084439][ T7919] ____sys_sendmsg+0x505/0x830 [ 122.084464][ T7919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.084500][ T7919] ? import_iovec+0x74/0xa0 [ 122.084525][ T7919] ___sys_sendmsg+0x21f/0x2a0 [ 122.084548][ T7919] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.084606][ T7919] ? __fget_files+0x2a/0x420 [ 122.084621][ T7919] ? __fget_files+0x3a0/0x420 [ 122.084647][ T7919] __x64_sys_sendmsg+0x19b/0x260 [ 122.084669][ T7919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.084701][ T7919] ? rcu_is_watching+0x15/0xb0 [ 122.084723][ T7919] ? do_syscall_64+0xbe/0x3b0 [ 122.084745][ T7919] do_syscall_64+0xfa/0x3b0 [ 122.084762][ T7919] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.084779][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.084795][ T7919] ? clear_bhb_loop+0x60/0xb0 [ 122.084815][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.084831][ T7919] RIP: 0033:0x7fa5c958eec9 [ 122.084847][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.084860][ T7919] RSP: 002b:00007fa5ca3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.084879][ T7919] RAX: ffffffffffffffda RBX: 00007fa5c97e5fa0 RCX: 00007fa5c958eec9 [ 122.084891][ T7919] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 122.084900][ T7919] RBP: 00007fa5c9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.084910][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.084920][ T7919] R13: 00007fa5c97e6038 R14: 00007fa5c97e5fa0 R15: 00007ffeaef45fe8 [ 122.084949][ T7919] [ 122.085060][ T7919] Mem-Info: [ 122.578509][ T7919] active_anon:9019 inactive_anon:0 isolated_anon:0 [ 122.578509][ T7919] active_file:2820 inactive_file:39893 isolated_file:0 [ 122.578509][ T7919] unevictable:768 dirty:96 writeback:0 [ 122.578509][ T7919] slab_reclaimable:10910 slab_unreclaimable:113865 [ 122.578509][ T7919] mapped:32145 shmem:4209 pagetables:1288 [ 122.578509][ T7919] sec_pagetables:0 bounce:0 [ 122.578509][ T7919] kernel_misc_reclaimable:0 [ 122.578509][ T7919] free:1308375 free_pcp:14921 free_cma:0 [ 122.661968][ T7919] Node 0 active_anon:36376kB inactive_anon:0kB active_file:11280kB inactive_file:159372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119480kB dirty:380kB writeback:0kB shmem:15500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12376kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.810213][ T7919] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.882028][ T7919] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.982700][ T7919] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 123.007733][ T7919] Node 0 DMA32 free:1329832kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26068kB inactive_anon:0kB active_file:11280kB inactive_file:157800kB unevictable:1536kB writepending:380kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:48032kB local_pcp:19968kB free_cma:0kB [ 123.065097][ T7919] lowmem_reserve[]: 0 0 1 1 1 [ 123.070020][ T7919] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 123.111402][ T7949] netlink: 56 bytes leftover after parsing attributes in process `syz.3.565'. [ 123.112313][ T7919] lowmem_reserve[]: 0 0 0 0 0 [ 123.125107][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 123.129094][ T7919] Node 1 [ 123.148256][ T7954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.567'. [ 123.163252][ T7919] Normal free:3893900kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17732kB local_pcp:10176kB free_cma:0kB [ 123.252945][ T7919] lowmem_reserve[]: 0 0 0 0 0 [ 123.272964][ T7919] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 123.364510][ T7919] Node 0 DMA32: 754*4kB (UME) 267*8kB (UME) 70*16kB (UM) 165*32kB (UME) 57*64kB (UME) 14*128kB (UE) 13*256kB (UM) 6*512kB (UME) 3*1024kB (ME) 2*2048kB (ME) 318*4096kB (M) = 1333088kB [ 123.369923][ T7961] netem: unknown loss type 0 [ 123.390409][ T7919] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 123.420542][ T7919] Node 1 Normal: 175*4kB (UE) 62*8kB (UME) 34*16kB (UME) 74*32kB (UME) 18*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3893900kB [ 123.431549][ T7961] netem: change failed [ 123.451865][ T7919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.471927][ T7966] gretap0: entered promiscuous mode [ 123.473543][ T7919] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.478451][ T7966] vlan2: entered promiscuous mode [ 123.490705][ T7919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.504722][ T7919] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.551324][ T7919] 44089 total pagecache pages [ 123.566678][ T7919] 0 pages in swap cache [ 123.574298][ T7919] Free swap = 124996kB [ 123.583959][ T7919] Total swap = 124996kB [ 123.598111][ T7919] 2097051 pages RAM [ 123.611560][ T7919] 0 pages HighMem/MovableOnly [ 123.629454][ T7919] 425672 pages reserved [ 123.634128][ T7919] 0 pages cma reserved [ 123.763231][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.574'. [ 123.816379][ T7985] Bluetooth: MGMT ver 1.23 [ 124.526562][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 124.570814][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.570897][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 124.622944][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.656826][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.757402][ T8007] geneve2: entered promiscuous mode [ 124.782318][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.850118][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 124.936649][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 125.033966][ T8021] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 125.065351][ T8023] netlink: 52 bytes leftover after parsing attributes in process `syz.1.588'. [ 125.098297][ T8024] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 125.186477][ T8021] 8021q: adding VLAN 0 to HW filter on device bond6 [ 125.195042][ T8027] netlink: 'syz.4.590': attribute type 4 has an invalid length. [ 125.218315][ T8036] netlink: 'syz.0.591': attribute type 21 has an invalid length. [ 125.230946][ T8036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.591'. [ 125.242345][ T8036] netlink: 3 bytes leftover after parsing attributes in process `syz.0.591'. [ 125.276981][ T8040] raw_sendmsg: syz.1.592 forgot to set AF_INET. Fix it! [ 125.358939][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.395303][ T8048] bond0: (slave rose0): Enslaving as an active interface with an up link [ 125.498335][ T8059] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 125.602591][ T8069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.600'. [ 125.833879][ T8081] bridge_slave_0: default FDB implementation only supports local addresses [ 126.531894][ T8126] tipc: New replicast peer: 255.255.255.255 [ 126.566925][ T8131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.573735][ T8126] tipc: Enabled bearer , priority 10 [ 126.598369][ T8126] netlink: 256 bytes leftover after parsing attributes in process `syz.2.614'. [ 126.618193][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 126.986709][ T8162] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 127.160629][ T8168] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 127.172254][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.486674][ T8188] ieee802154 phy0 wpan0: encryption failed: -90 [ 127.553239][ T8192] siw: device registration error -23 [ 127.567148][ T8192] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 127.632544][ T8192] team0: Port device geneve0 added [ 127.683448][ T5937] tipc: Node number set to 1812353810 [ 127.706868][ T8200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.906650][ T8190] syzkaller0: entered promiscuous mode [ 127.925176][ T8190] syzkaller0: entered allmulticast mode [ 127.949369][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.976902][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.986419][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.198349][ T8246] netlink: 'syz.2.640': attribute type 2 has an invalid length. [ 128.268620][ T8246] netlink: 'syz.2.640': attribute type 2 has an invalid length. [ 128.324321][ T8251] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 129.388421][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.398115][ T8208] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 129.414724][ T8246] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 129.458942][ T8246] bond7: entered promiscuous mode [ 129.475375][ T8246] bond7: entered allmulticast mode [ 129.480904][ T8246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 129.497678][ T8251] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 129.587402][ T8270] netlink: 'syz.2.645': attribute type 10 has an invalid length. [ 129.610887][ T8270] bridge0: port 3(team0) entered blocking state [ 129.617517][ T8270] bridge0: port 3(team0) entered disabled state [ 129.628126][ T8270] team0: entered allmulticast mode [ 129.648566][ T8270] team_slave_0: entered allmulticast mode [ 129.660971][ T8270] team_slave_1: entered allmulticast mode [ 129.677418][ T8270] team0: entered promiscuous mode [ 129.682463][ T8270] team_slave_0: entered promiscuous mode [ 129.705594][ T8270] team_slave_1: entered promiscuous mode [ 129.713583][ T8270] bridge0: port 3(team0) entered blocking state [ 129.719949][ T8270] bridge0: port 3(team0) entered forwarding state [ 129.738385][ T979] IPVS: starting estimator thread 0... [ 129.767519][ T8280] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 129.779905][ T8280] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 129.782994][ T8278] __nla_validate_parse: 13 callbacks suppressed [ 129.783007][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.647'. [ 129.862904][ T8281] IPVS: using max 34 ests per chain, 81600 per kthread [ 129.972359][ T8286] bridge0: left promiscuous mode [ 129.977552][ T8286] bridge0: left allmulticast mode [ 129.999391][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.020144][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.088428][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.101750][ T8304] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 130.107814][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.170360][ T8308] netlink: 112 bytes leftover after parsing attributes in process `syz.1.655'. [ 130.258642][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 130.581321][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 130.596542][ T8331] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 130.640432][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 130.792981][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 130.811615][ T8350] veth0_macvtap: left promiscuous mode [ 130.871575][ T8355] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 130.872987][ T8356] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 130.909970][ T8355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 130.937162][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 130.981735][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 131.051023][ T8370] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 131.055808][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 131.068427][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.674'. [ 131.092465][ T8372] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 131.121260][ T8372] bond4: (slave vcan1): Error -95 calling set_mac_address [ 131.552383][ T8407] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 131.740127][ T8411] syzkaller0: entered promiscuous mode [ 131.747200][ T8411] syzkaller0: entered allmulticast mode [ 131.797437][ T8420] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 131.986615][ T8425] veth9: entered allmulticast mode [ 132.283021][ T8447] sctp: [Deprecated]: syz.2.695 (pid 8447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.283021][ T8447] Use struct sctp_sack_info instead [ 132.711069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.447825][ T8466] siw: device registration error -23 [ 133.509036][ T8469] syz_tun: entered allmulticast mode [ 133.641384][ T8481] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 133.738293][ T8481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.768213][ T8491] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 133.878822][ T8497] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.896144][ T8498] netlink: 'syz.2.711': attribute type 7 has an invalid length. [ 133.930625][ T8498] : entered promiscuous mode [ 134.291968][ T8468] syz_tun: left allmulticast mode [ 134.812903][ T8532] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 136.122976][ T8593] __nla_validate_parse: 13 callbacks suppressed [ 136.122993][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.735'. [ 136.145395][ T8591] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 136.233182][ T8590] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 136.271280][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 136.314136][ T8606] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 136.326526][ T8606] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 136.339148][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 136.483604][ T8620] netlink: 'syz.4.743': attribute type 6 has an invalid length. [ 136.567533][ T8626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'. [ 136.592635][ T8626] bridge0: port 1(batadv1) entered blocking state [ 136.599365][ T8626] bridge0: port 1(batadv1) entered disabled state [ 136.606076][ T8626] batadv1: entered allmulticast mode [ 136.659865][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 136.664507][ T8626] batadv1: entered promiscuous mode [ 136.911326][ T8647] tipc: Enabling of bearer rejected, failed to enable media [ 136.948691][ T8642] netlink: 155988 bytes leftover after parsing attributes in process `syz.1.749'. [ 136.977841][ T8653] netlink: 40 bytes leftover after parsing attributes in process `syz.4.750'. [ 136.999375][ T8653] nbd: must specify at least one socket [ 137.024286][ T8644] vxcan1 speed is unknown, defaulting to 1000 [ 137.098916][ T66] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 137.108546][ T66] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 137.332902][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'. [ 137.356896][ T8659] netlink: 6 bytes leftover after parsing attributes in process `syz.2.753'. [ 137.895916][ T8698] netlink: 'syz.0.764': attribute type 11 has an invalid length. [ 137.904016][ T8698] netlink: 224 bytes leftover after parsing attributes in process `syz.0.764'. [ 137.918459][ T8698] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 137.942462][ T8698] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 137.954853][ T8698] veth1_macvtap: left promiscuous mode [ 137.961704][ T8698] team0: Device veth1_macvtap failed to register rx_handler [ 137.980310][ T8696] netlink: 'syz.3.763': attribute type 4 has an invalid length. [ 138.541949][ T8741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.678021][ T8746] netlink: 'syz.0.777': attribute type 15 has an invalid length. [ 138.895356][ T8769] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 138.970720][ T8769] 8021q: adding VLAN 0 to HW filter on device bond7 [ 139.009677][ T8777] ipvlan3: entered promiscuous mode [ 139.055872][ T8774] vlan3: entered promiscuous mode [ 139.063493][ T8774] bond7: entered promiscuous mode [ 139.068753][ T8774] vlan3: entered allmulticast mode [ 139.078719][ T8774] bond7: entered allmulticast mode [ 139.130708][ T8769] bond7: (slave gretap2): making interface the new active one [ 139.138771][ T8769] gretap2: entered promiscuous mode [ 139.144373][ T8769] gretap2: entered allmulticast mode [ 139.151606][ T8769] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 139.160699][ T8784] syz_tun: entered allmulticast mode [ 139.207464][ T8786] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 139.231376][ T8780] syz_tun: left allmulticast mode [ 139.249859][ T8791] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 139.287103][ T8792] veth1_macvtap: left promiscuous mode [ 139.411682][ T8797] openvswitch: netlink: Message has -1 unknown bytes. [ 139.523898][ T8813] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 139.647754][ T8821] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 139.702650][ T8819] 8021q: adding VLAN 0 to HW filter on device bond8 [ 139.860286][ T8827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 139.868556][ T8827] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.894927][ T8827] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 140.072548][ T8855] bond0: entered allmulticast mode [ 140.082535][ T8855] bond_slave_0: entered allmulticast mode [ 140.096664][ T8855] bond_slave_1: entered allmulticast mode [ 140.355784][ T8880] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 140.449582][ T8880] bond4: entered promiscuous mode [ 140.457111][ T8880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.508046][ T8889] syzkaller0: entered promiscuous mode [ 140.526078][ T8889] syzkaller0: entered allmulticast mode [ 140.590212][ T8889] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 140.601029][ T8889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.287528][ T8941] __nla_validate_parse: 19 callbacks suppressed [ 141.287546][ T8941] netlink: 256 bytes leftover after parsing attributes in process `syz.2.832'. [ 141.365711][ T8944] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 141.399434][ T8944] bond9: entered promiscuous mode [ 141.405271][ T8944] 8021q: adding VLAN 0 to HW filter on device bond9 [ 141.440138][ T8944] 8021q: adding VLAN 0 to HW filter on device bond10 [ 141.450879][ T8944] bond9: (slave bond10): making interface the new active one [ 141.458748][ T8944] bond10: entered promiscuous mode [ 141.465579][ T8944] bond9: (slave bond10): Enslaving as an active interface with an up link [ 141.468129][ T8952] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 141.491822][ T8900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.493331][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 141.501667][ T8900] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 141.599546][ T8955] netlink: 156 bytes leftover after parsing attributes in process `syz.2.836'. [ 141.702671][ T8965] syz_tun: entered allmulticast mode [ 141.726290][ T8964] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 141.734487][ T8964] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 141.781689][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 141.818197][ T8961] syz_tun: left allmulticast mode [ 142.033818][ T8988] warn_alloc: 1 callbacks suppressed [ 142.033835][ T8988] syz.2.846: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.064667][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(full) [ 142.064690][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.064700][ T8988] Call Trace: [ 142.064707][ T8988] [ 142.064715][ T8988] dump_stack_lvl+0x189/0x250 [ 142.064742][ T8988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.064762][ T8988] ? __pfx__printk+0x10/0x10 [ 142.064784][ T8988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 142.064804][ T8988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 142.064825][ T8988] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 142.064847][ T8988] warn_alloc+0x214/0x310 [ 142.064877][ T8988] ? stack_depot_save_flags+0x40/0x860 [ 142.064902][ T8988] ? __pfx_warn_alloc+0x10/0x10 [ 142.064927][ T8988] ? kasan_save_track+0x4f/0x80 [ 142.064947][ T8988] ? xskq_create+0x56/0x170 [ 142.064962][ T8988] ? xsk_init_queue+0xb0/0x110 [ 142.064976][ T8988] ? xsk_setsockopt+0x4dc/0x8d0 [ 142.064996][ T8988] ? do_sock_setsockopt+0x17c/0x1b0 [ 142.065013][ T8988] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 142.065030][ T8988] ? do_syscall_64+0xfa/0x3b0 [ 142.065047][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.065072][ T8988] __vmalloc_node_range_noprof+0x125/0x12f0 [ 142.065129][ T8988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.065158][ T8988] ? __kasan_kmalloc+0x93/0xb0 [ 142.065183][ T8988] vmalloc_user_noprof+0xad/0xf0 [ 142.065205][ T8988] ? xskq_create+0xbf/0x170 [ 142.065223][ T8988] xskq_create+0xbf/0x170 [ 142.065243][ T8988] xsk_init_queue+0xb0/0x110 [ 142.065262][ T8988] xsk_setsockopt+0x4dc/0x8d0 [ 142.065288][ T8988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.065310][ T8988] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.065338][ T8988] ? aa_sock_opt_perm+0xff/0x1b0 [ 142.065359][ T8988] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 142.065376][ T8988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.065400][ T8988] do_sock_setsockopt+0x17c/0x1b0 [ 142.065425][ T8988] __x64_sys_setsockopt+0x13f/0x1b0 [ 142.065450][ T8988] do_syscall_64+0xfa/0x3b0 [ 142.065466][ T8988] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.065484][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.065500][ T8988] ? clear_bhb_loop+0x60/0xb0 [ 142.065521][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.065537][ T8988] RIP: 0033:0x7fa5c958eec9 [ 142.065552][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.065565][ T8988] RSP: 002b:00007fa5ca3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.065583][ T8988] RAX: ffffffffffffffda RBX: 00007fa5c97e5fa0 RCX: 00007fa5c958eec9 [ 142.065596][ T8988] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 142.065606][ T8988] RBP: 00007fa5c9611f91 R08: 0000000000000004 R09: 0000000000000000 [ 142.065616][ T8988] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.065626][ T8988] R13: 00007fa5c97e6038 R14: 00007fa5c97e5fa0 R15: 00007ffeaef45fe8 [ 142.065656][ T8988] [ 142.065736][ T8988] Mem-Info: [ 142.143215][ T8992] netlink: 9 bytes leftover after parsing attributes in process `syz.3.845'. [ 142.179729][ T8988] active_anon:3915 inactive_anon:0 isolated_anon:0 [ 142.179729][ T8988] active_file:2947 inactive_file:39905 isolated_file:0 [ 142.179729][ T8988] unevictable:768 dirty:82 writeback:0 [ 142.179729][ T8988] slab_reclaimable:11591 slab_unreclaimable:112685 [ 142.179729][ T8988] mapped:28919 shmem:1359 pagetables:910 [ 142.179729][ T8988] sec_pagetables:0 bounce:0 [ 142.179729][ T8988] kernel_misc_reclaimable:0 [ 142.179729][ T8988] free:1316170 free_pcp:13850 free_cma:0 [ 142.230238][ T8999] netlink: 5 bytes leftover after parsing attributes in process `syz.3.845'. [ 142.318703][ T8988] Node 0 active_anon:15960kB inactive_anon:0kB active_file:11788kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119676kB dirty:328kB writeback:0kB shmem:4100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12668kB pagetables:3508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.465154][ T8988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.495882][ T8999] 0{X功: renamed from gretap0 [ 142.496932][ T8988] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.529665][ T8988] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 142.529711][ T8988] Node 0 DMA32 free:1355456kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16008kB inactive_anon:0kB active_file:11788kB inactive_file:157848kB unevictable:1536kB writepending:328kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:36232kB local_pcp:18952kB free_cma:0kB [ 142.581130][ T8999] 0{X功: entered allmulticast mode [ 142.590485][ T8999] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 142.611848][ T8988] lowmem_reserve[]: 0 0 1 1 1 [ 142.617618][ T8988] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 142.657719][ T8988] lowmem_reserve[]: 0 0 0 0 0 [ 142.664541][ T9010] xt_l2tp: unknown flags: 10 [ 142.689442][ T8988] Node 1 Normal free:3893652kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17972kB local_pcp:10416kB free_cma:0kB [ 142.774842][ T8988] lowmem_reserve[]: 0 0 0 0 0 [ 142.779593][ T8988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.806135][ T8988] Node 0 DMA32: 2*4kB (UM) 20*8kB (M) 131*16kB (UME) 509*32kB (UME) 151*64kB (UME) 29*128kB (UME) 19*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 1*2048kB (M) 318*4096kB (M) = 1349048kB [ 142.844957][ T8988] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 142.883153][ T8988] Node 1 Normal: 112*4kB (UE) 62*8kB (UME) 34*16kB (UME) 80*32kB (UME) 19*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3893904kB [ 142.932928][ T8988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.982956][ T8988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.017653][ T8988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.035069][ T8988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.077522][ T8988] 44433 total pagecache pages [ 143.082227][ T8988] 0 pages in swap cache [ 143.119588][ T8988] Free swap = 124996kB [ 143.133563][ T8988] Total swap = 124996kB [ 143.137738][ T8988] 2097051 pages RAM [ 143.155043][ T8988] 0 pages HighMem/MovableOnly [ 143.160635][ T8988] 425672 pages reserved [ 143.168030][ T8988] 0 pages cma reserved [ 143.458074][ T9035] syzkaller0: entered promiscuous mode [ 143.492589][ T9035] syzkaller0: entered allmulticast mode [ 143.643353][ T9051] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 143.643662][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.860'. [ 143.676915][ T9049] netlink: 516 bytes leftover after parsing attributes in process `syz.1.860'. [ 143.869982][ T9064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.864'. [ 143.889512][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 144.111051][ T9080] 8021q: VLANs not supported on ip_vti0 [ 144.111430][ T9084] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 144.211441][ T9084] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.235159][ T9084] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.247763][ T9084] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 144.291088][ T9100] netlink: 'syz.3.874': attribute type 11 has an invalid length. [ 144.361371][ T9099] 8021q: adding VLAN 0 to HW filter on device bond8 [ 144.422155][ T9104] veth0_to_team: entered promiscuous mode [ 144.440661][ T9104] veth0_to_team: entered allmulticast mode [ 144.470517][ T9104] netlink: 'syz.1.876': attribute type 2 has an invalid length. [ 144.731961][ T9120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.788733][ T9124] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 144.802456][ T9124] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 144.958440][ T9134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.396620][ T9166] tipc: Enabled bearer , priority 0 [ 145.420806][ T9162] syzkaller0: entered promiscuous mode [ 145.430564][ T9162] syzkaller0: entered allmulticast mode [ 145.520388][ T9166] netlink: 'syz.0.893': attribute type 16 has an invalid length. [ 145.536962][ T9166] netlink: 'syz.0.893': attribute type 17 has an invalid length. [ 145.590330][ T9164] tipc: Resetting bearer [ 145.621717][ T9162] tipc: Resetting bearer [ 145.628656][ T9162] tipc: Resetting bearer [ 145.671648][ T9166] bond0: left allmulticast mode [ 145.677273][ T9166] bond_slave_0: left allmulticast mode [ 145.683993][ T9166] bond_slave_1: left allmulticast mode [ 145.690388][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.699927][ T9166] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.720235][ T9166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.756594][ T9161] tipc: Resetting bearer [ 145.777895][ T9161] tipc: Disabling bearer [ 145.827557][ T9194] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 145.944298][ T9200] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 146.012312][ T9202] netlink: 'syz.0.904': attribute type 11 has an invalid length. [ 146.150591][ T9210] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 146.796782][ T9222] __nla_validate_parse: 16 callbacks suppressed [ 146.796800][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.908'. [ 146.908868][ T9225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.908'. [ 146.927734][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 146.959955][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'. [ 146.965025][ T9224] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 146.979108][ T9224] netlink: 184 bytes leftover after parsing attributes in process `syz.0.911'. [ 147.079365][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 147.088740][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 147.108595][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.915'. [ 147.180386][ T9239] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 147.203565][ T9239] netlink: 244 bytes leftover after parsing attributes in process `syz.0.917'. [ 147.350326][ T9255] ipvlan2: entered promiscuous mode [ 147.381770][ T9255] ipvlan3: entered promiscuous mode [ 147.392615][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 147.529254][ T9266] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 147.541663][ T9267] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 147.603462][ T9269] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 147.647619][ T9276] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 147.655958][ T9272] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 147.655958][ T9277] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 147.716093][ T9276] bond6: entered promiscuous mode [ 147.721713][ T9276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 147.730403][ T9272] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 147.731800][ T9277] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 147.766464][ T9287] batadv_slave_1: entered promiscuous mode [ 147.784481][ T9287] batman_adv: batadv0: Adding interface: macsec0 [ 147.790847][ T9287] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.816707][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.829231][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.839366][ T9287] batman_adv: batadv0: Interface activated: macsec0 [ 147.864490][ T9276] bond6: (slave bridge0): making interface the new active one [ 147.880190][ T9276] bridge0: entered promiscuous mode [ 147.902365][ T9276] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 147.987995][ T5875] Bluetooth: hci4: command tx timeout [ 149.330261][ T9349] netlink: 'syz.1.949': attribute type 7 has an invalid length. [ 149.339152][ T9353] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 149.365978][ T9349] : entered promiscuous mode [ 149.557720][ T9362] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 149.579481][ T9362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.813778][ T9378] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 149.841117][ T9377] netlink: 'syz.1.955': attribute type 4 has an invalid length. [ 149.868610][ T9366] syzkaller1: entered promiscuous mode [ 149.874215][ T9366] syzkaller1: entered allmulticast mode [ 149.892757][ T9380] netlink: 'syz.1.955': attribute type 4 has an invalid length. [ 149.979803][ T9386] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 150.009226][ T9390] 1{X功: renamed from 30{X功 (while UP) [ 150.018260][ T9390] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 150.166644][ T9391] bond9: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.180925][ T9391] bond9: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 150.191470][ T9391] bond9: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 150.235267][ T9396] pim6reg1: entered promiscuous mode [ 150.241134][ T9396] pim6reg1: entered allmulticast mode [ 150.252219][ T9399] 8021q: adding VLAN 0 to HW filter on device bond9 [ 150.381670][ T9413] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 150.408511][ T9405] netlink: 'syz.2.962': attribute type 4 has an invalid length. [ 150.476356][ T9421] team0: Device gtp0 is up. Set it down before adding it as a team port [ 150.725633][ T9436] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 150.845522][ T9438] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 152.056918][ T9438] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 152.061048][ T9444] bridge0: Device is already in use. [ 152.092898][ T9450] C: renamed from lo (while UP) [ 152.153008][ T9453] netlink: 'syz.3.977': attribute type 5 has an invalid length. [ 152.160668][ T9453] __nla_validate_parse: 14 callbacks suppressed [ 152.160699][ T9453] netlink: 140 bytes leftover after parsing attributes in process `syz.3.977'. [ 152.239998][ T9455] netlink: 11 bytes leftover after parsing attributes in process `syz.1.978'. [ 152.249031][ T9455] netlink: 11 bytes leftover after parsing attributes in process `syz.1.978'. [ 152.270107][ T9453] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.977'. [ 152.301651][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 152.428851][ T9470] bond7: entered promiscuous mode [ 152.434668][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.983'. [ 152.473338][ T9470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.485679][ T9464] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 152.557599][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4a [ 153.523974][ T9526] tipc: Enabled bearer , priority 0 [ 153.545157][ T9526] syzkaller0: entered promiscuous mode [ 153.550761][ T9526] syzkaller0: entered allmulticast mode [ 153.584547][ T9526] tipc: Resetting bearer [ 153.638484][ T9520] tipc: Resetting bearer [ 153.679147][ T9520] tipc: Disabling bearer [ 153.839361][ T9556] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1001'. [ 153.887932][ T9553] 8021q: VLANs not supported on ip6tnl0 [ 155.218645][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 155.244203][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 155.268538][ T9573] tipc: Enabled bearer , priority 0 [ 155.302252][ T9575] syzkaller0: entered promiscuous mode [ 155.308406][ T9575] syzkaller0: entered allmulticast mode [ 155.430090][ T9595] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1012'. [ 155.442402][ T9575] tipc: Resetting bearer [ 155.478381][ T9575] tipc: Disabling bearer [ 155.508698][ T9602] bridge0: port 3(team0) entered disabled state [ 155.527671][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.537520][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.699520][ T9614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.900491][ T9626] bridge7: port 1(veth3) entered blocking state [ 155.926844][ T9626] bridge7: port 1(veth3) entered disabled state [ 155.936635][ T9626] veth3: entered allmulticast mode [ 155.968390][ T9626] veth3: entered promiscuous mode [ 156.001204][ T9628] erspan0: entered promiscuous mode [ 156.133713][ T9636] 8021q: adding VLAN 0 to HW filter on device bond8 [ 156.236511][ T9645] validate_nla: 3 callbacks suppressed [ 156.236528][ T9645] netlink: 'syz.4.1022': attribute type 3 has an invalid length. [ 156.770147][ T9686] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 156.834866][ T9691] netlink: 'syz.4.1036': attribute type 10 has an invalid length. [ 156.872525][ T9686] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 156.887214][ T9691] team0: Device ipvlan1 failed to register rx_handler [ 157.191071][ T9718] netlink: 'syz.2.1045': attribute type 12 has an invalid length. [ 157.214843][ T9718] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 157.216874][ T9720] __nla_validate_parse: 12 callbacks suppressed [ 157.216887][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 157.229372][ T9718] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1045'. [ 157.294026][ T9718] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 157.546752][ T9738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1049'. [ 157.584284][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1049'. [ 157.596247][ T9742] netlink: 'syz.0.1050': attribute type 11 has an invalid length. [ 157.613681][ T9744] netlink: 'syz.4.1052': attribute type 5 has an invalid length. [ 157.820267][ T9753] vxcan1 speed is unknown, defaulting to 1000 [ 157.824066][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 157.916336][ T9763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.003227][ T9769] tipc: Enabled bearer , priority 0 [ 158.011317][ T9769] syzkaller0: entered promiscuous mode [ 158.028157][ T9769] syzkaller0: entered allmulticast mode [ 158.083615][ T9769] tipc: Resetting bearer [ 158.108882][ T9768] tipc: Resetting bearer [ 158.142655][ T9768] tipc: Disabling bearer [ 158.467927][ T9791] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 158.492925][ T9791] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1064'. [ 158.728912][ T9801] sock: sock_set_timeout: `syz.4.1068' (pid 9801) tries to set negative timeout [ 159.070258][ T9817] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 159.086535][ T9823] tipc: Enabling of bearer rejected, failed to enable media [ 159.109895][ T9825] netlink: 'syz.2.1076': attribute type 13 has an invalid length. [ 159.118982][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 159.142412][ T9829] xt_l2tp: v2 tid > 0xffff: 1114244 [ 159.150230][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.150358][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 159.169685][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.187997][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.201800][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.299766][ T9831] bridge0: Device is already in use. [ 159.307234][ T9831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1077'. [ 159.317891][ T9831] 8021q: adding VLAN 0 to HW filter on device bond10 [ 159.387649][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1080'. [ 159.473006][ T9841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.515533][ T9848] tipc: Enabled bearer , priority 0 [ 159.530970][ T9848] syzkaller0: entered promiscuous mode [ 159.542465][ T9848] syzkaller0: entered allmulticast mode [ 159.589435][ T9848] tipc: Resetting bearer [ 159.606061][ T9846] tipc: Resetting bearer [ 159.628331][ T9846] tipc: Disabling bearer [ 159.704739][ T9853] 8021q: adding VLAN 0 to HW filter on device bond10 [ 159.738713][ T9859] vlan4: entered promiscuous mode [ 159.759346][ T9859] bond10: entered promiscuous mode [ 159.764827][ T9859] vlan4: entered allmulticast mode [ 159.770000][ T9859] bond10: entered allmulticast mode [ 160.048558][ T9873] tipc: Enabling of bearer rejected, failed to enable media [ 160.064723][ T9872] tipc: Enabling of bearer rejected, failed to enable media [ 160.244244][ T9899] team0: Port device dummy0 added [ 160.526252][ T9922] IPVS: length: 157 != 24 [ 160.719718][ T9932] bond0: entered promiscuous mode [ 160.727731][ T9932] bond_slave_0: entered promiscuous mode [ 160.736145][ T9932] bond_slave_1: entered promiscuous mode [ 160.761742][ T9932] bond0: left promiscuous mode [ 160.772906][ T9932] bond_slave_0: left promiscuous mode [ 160.778694][ T9932] bond_slave_1: left promiscuous mode [ 161.077324][ T9946] nbd: couldn't find a device at index -373156329 [ 161.171085][ T9939] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 161.421701][ T9967] validate_nla: 8 callbacks suppressed [ 161.421719][ T9967] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 161.455243][ T9967] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 161.510990][ T9974] tipc: MTU too low for tipc bearer [ 161.518952][ T9967] syzkaller1: entered promiscuous mode [ 161.525205][ T9967] syzkaller1: entered allmulticast mode [ 161.547460][ T9977] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 161.588989][ T9974] netlink: 'syz.4.1120': attribute type 5 has an invalid length. [ 161.635341][ T9977] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.656208][ T9977] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 161.670656][ T9977] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 161.740200][ T9983] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.811743][ T9992] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.320107][T10028] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 162.368536][T10028] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.381244][T10028] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 162.392207][T10028] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 162.409255][T10035] __nla_validate_parse: 10 callbacks suppressed [ 162.409269][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'. [ 162.441069][T10038] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 162.442410][T10035] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.520123][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 162.552697][T10042] netlink: 'syz.0.1140': attribute type 11 has an invalid length. [ 162.670989][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'. [ 162.759361][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 162.779643][T10053] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001 [ 162.839005][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'. [ 163.072730][T10074] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1152'. [ 163.116440][T10079] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 163.161141][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 163.519139][T10103] tap0: tun_chr_ioctl cmd 1074025676 [ 163.532286][T10103] tap0: owner set to 0 [ 163.546199][T10106] tap0: tun_chr_ioctl cmd 1074025676 [ 163.561753][T10106] tap0: owner set to 0 [ 163.645658][T10103] bond12: entered promiscuous mode [ 163.651503][T10103] bond12: entered allmulticast mode [ 163.657321][T10103] 8021q: adding VLAN 0 to HW filter on device bond12 [ 164.726515][T10160] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 164.821912][T10165] bond8 (unregistering): Released all slaves [ 164.832209][T10171] netlink: 'syz.1.1175': attribute type 4 has an invalid length. [ 164.855621][T10160] ip6tnl2: entered promiscuous mode [ 164.860844][T10160] ip6tnl2: entered allmulticast mode [ 164.913408][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 164.916750][T10163] sctp: [Deprecated]: syz.1.1175 (pid 10163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.916750][T10163] Use struct sctp_sack_info instead [ 164.922399][T10175] netlink: 'syz.3.1177': attribute type 7 has an invalid length. [ 164.922414][T10175] netlink: 'syz.3.1177': attribute type 8 has an invalid length. [ 164.975174][T10177] syz.2.1178 uses old SIOCAX25GETINFO [ 164.988637][T10177] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 164.997362][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 165.183725][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 165.337525][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 165.685350][T10219] syz_tun: entered allmulticast mode [ 165.709994][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.738566][T10218] syz_tun: left allmulticast mode [ 165.879453][T10226] 8021q: adding VLAN 0 to HW filter on device bond11 [ 165.968303][T10235] bond11: (slave geneve2): making interface the new active one [ 165.991384][T10235] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 166.597565][T10275] xt_l2tp: wrong L2TP version: 0 [ 166.602585][T10282] syz.0.1209: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.618812][T10276] xt_l2tp: wrong L2TP version: 0 [ 166.624329][T10282] CPU: 1 UID: 0 PID: 10282 Comm: syz.0.1209 Not tainted syzkaller #0 PREEMPT(full) [ 166.624351][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.624362][T10282] Call Trace: [ 166.624369][T10282] [ 166.624377][T10282] dump_stack_lvl+0x189/0x250 [ 166.624407][T10282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.624427][T10282] ? __pfx__printk+0x10/0x10 [ 166.624451][T10282] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.624472][T10282] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.624494][T10282] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 166.624517][T10282] warn_alloc+0x214/0x310 [ 166.624543][T10282] ? stack_depot_save_flags+0x40/0x860 [ 166.624570][T10282] ? __pfx_warn_alloc+0x10/0x10 [ 166.624597][T10282] ? kasan_save_track+0x4f/0x80 [ 166.624620][T10282] ? xskq_create+0x56/0x170 [ 166.624635][T10282] ? xsk_init_queue+0xb0/0x110 [ 166.624649][T10282] ? xsk_setsockopt+0x4dc/0x8d0 [ 166.624670][T10282] ? do_sock_setsockopt+0x17c/0x1b0 [ 166.624689][T10282] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 166.624707][T10282] ? do_syscall_64+0xfa/0x3b0 [ 166.624724][T10282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.624750][T10282] __vmalloc_node_range_noprof+0x125/0x12f0 [ 166.624807][T10282] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.624837][T10282] ? __kasan_kmalloc+0x93/0xb0 [ 166.624862][T10282] vmalloc_user_noprof+0xad/0xf0 [ 166.624886][T10282] ? xskq_create+0xbf/0x170 [ 166.624904][T10282] xskq_create+0xbf/0x170 [ 166.624924][T10282] xsk_init_queue+0xb0/0x110 [ 166.624944][T10282] xsk_setsockopt+0x4dc/0x8d0 [ 166.624971][T10282] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.624995][T10282] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.625023][T10282] ? aa_sock_opt_perm+0xff/0x1b0 [ 166.625045][T10282] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 166.625063][T10282] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.625088][T10282] do_sock_setsockopt+0x17c/0x1b0 [ 166.625114][T10282] __x64_sys_setsockopt+0x13f/0x1b0 [ 166.625140][T10282] do_syscall_64+0xfa/0x3b0 [ 166.625157][T10282] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.625179][T10282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.625195][T10282] ? clear_bhb_loop+0x60/0xb0 [ 166.625217][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.625233][T10282] RIP: 0033:0x7f43f4f8eec9 [ 166.625249][T10282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.625263][T10282] RSP: 002b:00007f43f5d58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.625281][T10282] RAX: ffffffffffffffda RBX: 00007f43f51e5fa0 RCX: 00007f43f4f8eec9 [ 166.625294][T10282] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 166.625343][T10282] RBP: 00007f43f5011f91 R08: 0000000000000004 R09: 0000000000000000 [ 166.625354][T10282] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.625365][T10282] R13: 00007f43f51e6038 R14: 00007f43f51e5fa0 R15: 00007ffe91da00a8 [ 166.625396][T10282] [ 166.626407][T10282] Mem-Info: [ 166.924796][T10282] active_anon:3940 inactive_anon:0 isolated_anon:0 [ 166.924796][T10282] active_file:2947 inactive_file:39916 isolated_file:0 [ 166.924796][T10282] unevictable:768 dirty:110 writeback:0 [ 166.924796][T10282] slab_reclaimable:11851 slab_unreclaimable:115323 [ 166.924796][T10282] mapped:28917 shmem:1359 pagetables:947 [ 166.924796][T10282] sec_pagetables:0 bounce:0 [ 166.924796][T10282] kernel_misc_reclaimable:0 [ 166.924796][T10282] free:1307348 free_pcp:14096 free_cma:0 [ 166.970130][T10282] Node 0 active_anon:15760kB inactive_anon:0kB active_file:11788kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115668kB dirty:440kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13072kB pagetables:3656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.010425][T10282] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.048833][T10282] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.083656][T10282] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 167.089546][T10282] Node 0 DMA32 free:1319624kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15708kB inactive_anon:0kB active_file:11788kB inactive_file:157892kB unevictable:1536kB writepending:440kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:38940kB local_pcp:18012kB free_cma:0kB [ 167.131360][T10282] lowmem_reserve[]: 0 0 1 1 1 [ 167.136485][T10282] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 167.147393][T10285] team0: left allmulticast mode [ 167.170811][T10282] lowmem_reserve[]: 0 0 0 0 0 [ 167.175888][T10282] Node 1 Normal free:3894436kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17124kB local_pcp:7524kB free_cma:0kB [ 167.191030][T10285] team_slave_0: left allmulticast mode [ 167.212224][T10282] lowmem_reserve[]: 0 0 0 0 0 [ 167.217593][T10282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.229451][T10285] team_slave_1: left allmulticast mode [ 167.242587][T10282] Node 0 DMA32: 1169*4kB (UM) 494*8kB (UM) 178*16kB (UME) 465*32kB (UM) 177*64kB (UME) 71*128kB (UME) 50*256kB (UM) 23*512kB (UM) 11*1024kB (UM) 4*2048kB (UM) 300*4096kB (M) = 1319604kB [ 167.247712][T10285] team0: left promiscuous mode [ 167.270190][T10282] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 167.288756][T10282] Node 1 Normal: 173*4kB (UE) 62*8kB (UME) 34*16kB (UME) 89*32kB (UME) 19*64kB (UME) 8*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894436kB [ 167.291448][T10285] team_slave_0: left promiscuous mode [ 167.311259][T10282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.327326][T10282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.335956][T10285] team_slave_1: left promiscuous mode [ 167.338317][T10282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.353969][T10285] bridge0: port 3(team0) entered disabled state [ 167.360966][T10282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.372740][T10285] bridge_slave_1: left allmulticast mode [ 167.378486][T10285] bridge_slave_1: left promiscuous mode [ 167.385285][T10282] 44219 total pagecache pages [ 167.390289][T10285] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.418003][T10282] 0 pages in swap cache [ 167.444872][T10282] Free swap = 124996kB [ 167.455983][T10285] bridge_slave_0: left allmulticast mode [ 167.469964][T10282] Total swap = 124996kB [ 167.475307][T10282] 2097051 pages RAM [ 167.479215][T10285] bridge_slave_0: left promiscuous mode [ 167.484960][T10282] 0 pages HighMem/MovableOnly [ 167.490938][T10282] 425672 pages reserved [ 167.497422][T10285] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.502760][T10282] 0 pages cma reserved [ 167.646746][T10305] veth0: entered promiscuous mode [ 167.682621][T10304] veth0: left promiscuous mode [ 167.979176][T10323] validate_nla: 2 callbacks suppressed [ 167.979193][T10323] netlink: 'syz.4.1221': attribute type 2 has an invalid length. [ 167.992901][T10323] __nla_validate_parse: 11 callbacks suppressed [ 167.992915][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1221'. [ 168.031399][T10325] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 168.397207][T10332] syzkaller0: entered promiscuous mode [ 168.434405][T10332] syzkaller0: entered allmulticast mode [ 168.509555][T10351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.659063][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 168.682973][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 168.712945][T10357] netlink: 'syz.2.1230': attribute type 20 has an invalid length. [ 168.745708][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 168.763328][T10365] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 168.768275][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 168.778136][T10365] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1232'. [ 168.801944][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 168.806385][T10357] netlink: 'syz.2.1230': attribute type 20 has an invalid length. [ 169.648739][T10392] netlink: 'syz.3.1240': attribute type 10 has an invalid length. [ 170.331885][T10385] kthread_run failed with err -4 [ 170.355933][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.473815][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 170.576775][T10412] netlink: 'syz.3.1245': attribute type 10 has an invalid length. [ 170.585528][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1245'. [ 171.087996][T10412] team0: Port device geneve0 added [ 171.141528][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 171.401569][T10444] tipc: Enabling of bearer rejected, already enabled [ 172.240845][T10492] lo: left allmulticast mode [ 172.254188][T10492] tunl0: entered promiscuous mode [ 172.266177][T10492] gre0: entered promiscuous mode [ 172.315509][T10492] 1{X功: left allmulticast mode [ 172.356918][T10492] erspan0: entered promiscuous mode [ 172.378776][T10492] ip_vti0: entered promiscuous mode [ 172.391715][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 172.411580][T10504] netlink: 'syz.1.1271': attribute type 12 has an invalid length. [ 172.608296][T10518] Driver unsupported XDP return value 0 on prog (id 273) dev N/A, expect packet loss! [ 172.632191][T10528] sctp: [Deprecated]: syz.2.1277 (pid 10528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.632191][T10528] Use struct sctp_sack_info instead [ 172.666888][T10531] netlink: 'syz.0.1276': attribute type 7 has an invalid length. [ 172.715363][T10522] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 173.582332][ T5952] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 173.607480][ T5952] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 173.703646][T10590] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 173.711566][T10590] __nla_validate_parse: 6 callbacks suppressed [ 173.711581][T10590] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1292'. [ 173.751756][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1291'. [ 173.855938][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 173.875000][T10597] netlink: 'syz.4.1296': attribute type 12 has an invalid length. [ 173.883028][T10597] netlink: 'syz.4.1296': attribute type 29 has an invalid length. [ 173.891204][T10597] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1296'. [ 173.901365][T10592] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.904018][ T24] IPVS: starting estimator thread 0... [ 173.917442][T10597] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1296'. [ 173.931150][T10604] veth0: entered promiscuous mode [ 173.952490][T10598] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1294'. [ 173.952943][T10604] veth0: left promiscuous mode [ 173.993105][T10599] siw: device registration error -23 [ 174.013269][T10605] IPVS: using max 28 ests per chain, 67200 per kthread [ 174.086218][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 174.089860][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'. [ 174.120634][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 174.168407][T10611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.193560][T10611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.258178][T10620] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 174.278654][T10620] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.332131][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1304'. [ 174.421104][T10636] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 174.647637][T10520] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.672754][T10520] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.681848][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.743097][T10673] netlink: 'syz.2.1311': attribute type 10 has an invalid length. [ 174.796637][T10673] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 174.973083][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.336893][T10711] gretap0: entered promiscuous mode [ 175.347559][T10711] 0{X功: renamed from gretap0 [ 175.354378][T10711] 0{X功: left promiscuous mode [ 175.359419][T10711] 0{X功: entered allmulticast mode [ 175.367162][T10711] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 175.587835][ T5937] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.750347][T10729] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.756825][T10729] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.786197][T10731] netlink: 'syz.0.1334': attribute type 10 has an invalid length. [ 175.811951][T10731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.856322][T10731] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 175.888119][T10735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.941260][T10735] bond0: (slave batadv0): Releasing backup interface [ 176.298578][T10762] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 177.320665][T10843] netlink: 'syz.2.1374': attribute type 11 has an invalid length. [ 177.605287][T10861] openvswitch: netlink: IP tunnel TTL not specified. [ 177.685374][T10866] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 177.878642][T10876] veth0: entered promiscuous mode [ 177.971707][T10876] veth0: left promiscuous mode [ 178.109572][T10886] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 178.132014][T10889] netlink: 'syz.0.1389': attribute type 12 has an invalid length. [ 178.142382][T10889] netlink: 'syz.0.1389': attribute type 11 has an invalid length. [ 178.223540][ T5875] Bluetooth: hci0: command tx timeout [ 178.505910][T10915] tipc: Enabled bearer , priority 0 [ 178.535741][T10915] syzkaller0: entered promiscuous mode [ 178.541547][T10915] syzkaller0: entered allmulticast mode [ 178.607521][T10915] tipc: Resetting bearer [ 178.616907][T10912] tipc: Resetting bearer [ 178.623000][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 178.648617][T10912] tipc: Disabling bearer [ 178.678464][T10927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.768840][T10931] __nla_validate_parse: 23 callbacks suppressed [ 178.768858][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 178.775607][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1403'. [ 178.797049][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 178.911943][T10939] netlink: zone id is out of range [ 178.920390][T10939] netlink: zone id is out of range [ 178.928366][T10939] netlink: zone id is out of range [ 178.934186][T10939] netlink: zone id is out of range [ 178.936780][T10941] netlink: 'syz.3.1406': attribute type 32 has an invalid length. [ 178.940166][T10939] netlink: del zone limit has 4 unknown bytes [ 178.950164][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 178.956792][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 178.962747][T10941] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 179.150101][T10952] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.1410'. [ 179.166096][T10952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 179.412442][T10975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1416'. [ 179.428263][T10975] netlink: 'syz.3.1416': attribute type 23 has an invalid length. [ 179.573487][T10990] netlink: 'syz.1.1421': attribute type 4 has an invalid length. [ 179.671117][T10996] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 179.729065][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 179.763251][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 180.220628][T11038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.384120][T11048] IPVS: stopping backup sync thread 9210 ... [ 180.536501][T11055] sit2: entered promiscuous mode [ 180.540843][T11051] openvswitch: netlink: Message has 5 unknown bytes. [ 180.541642][T11055] sit2: entered allmulticast mode [ 180.651515][T11063] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.656375][T11061] bridge4: entered promiscuous mode [ 180.675634][T11061] bridge4: entered allmulticast mode [ 180.728801][T11068] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 180.745210][T11069] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 180.797515][T11077] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 180.845482][T11068] bridge0: Device is already in use. [ 181.323124][T11115] tun0: tun_chr_ioctl cmd 1074025675 [ 181.333635][T11115] tun0: persist disabled [ 181.498103][T11132] tipc: Enabled bearer , priority 0 [ 181.525972][T11132] syzkaller0: entered promiscuous mode [ 181.531455][T11132] syzkaller0: entered allmulticast mode [ 181.601278][T11136] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 181.741847][T11125] tipc: Resetting bearer [ 181.778416][T11125] tipc: Disabling bearer [ 182.044791][T11162] netlink: 'syz.4.1469': attribute type 1 has an invalid length. [ 182.067220][T11162] netlink: 'syz.4.1469': attribute type 2 has an invalid length. [ 182.077867][T11162] netlink: 'syz.4.1469': attribute type 8 has an invalid length. [ 182.388791][T11195] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.401280][T11195] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 182.411960][T11195] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 182.594224][T11209] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003 [ 183.033254][T11246] bond12: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.045909][T11246] bond12: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 183.079679][T11246] bond12: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 183.208760][T11252] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 183.238108][T11252] openvswitch: netlink: Duplicate key (type 0). [ 183.774866][T11275] tipc: Enabled bearer , priority 0 [ 183.793934][T11275] syzkaller0: entered promiscuous mode [ 183.799490][T11275] syzkaller0: entered allmulticast mode [ 183.869255][T11275] tipc: Resetting bearer [ 183.883403][T11274] tipc: Resetting bearer [ 183.919148][T11274] tipc: Disabling bearer [ 183.967530][T11288] tipc: Enabling of bearer rejected, failed to enable media [ 184.072346][T11288] tipc: Enabling of bearer rejected, already enabled [ 184.194206][T11305] validate_nla: 3 callbacks suppressed [ 184.194223][T11305] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 184.254410][T11305] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 184.267046][T11305] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 184.277370][T11305] bond5: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 184.290611][T11313] __nla_validate_parse: 22 callbacks suppressed [ 184.290621][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1513'. [ 184.321576][T11311] tipc: Enabled bearer , priority 0 [ 184.332117][T11311] syzkaller0: entered promiscuous mode [ 184.338819][T11311] syzkaller0: entered allmulticast mode [ 184.362009][T11311] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.395284][T11311] tipc: Resetting bearer [ 184.404435][T11310] tipc: Resetting bearer [ 184.434268][T11310] tipc: Disabling bearer [ 184.915798][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1526'. [ 184.932556][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 185.822851][T11384] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1535'. [ 186.013775][T11397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1537'. [ 186.066336][T11404] IPVS: Error connecting to the multicast addr [ 186.256497][T11414] wg2: entered promiscuous mode [ 186.261384][T11414] wg2: entered allmulticast mode [ 186.426553][T11427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1545'. [ 186.568806][T11437] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1548'. [ 186.600082][T11436] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1548'. [ 186.695141][T11436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.809838][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 187.103040][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 187.556464][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 189.377881][T11541] __nla_validate_parse: 3 callbacks suppressed [ 189.377899][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1574'. [ 189.420403][T11544] openvswitch: netlink: IP tunnel dst address not specified [ 189.482331][T11544] netlink: 'syz.3.1575': attribute type 83 has an invalid length. [ 189.502293][T11548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1574'. [ 189.536663][T11544] netlink: 'syz.3.1575': attribute type 4 has an invalid length. [ 189.651518][T11560] syzkaller0: entered promiscuous mode [ 189.684620][T11560] syzkaller0: entered allmulticast mode [ 189.705793][T11559] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1577'. [ 189.921330][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1580'. [ 189.921332][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1580'. [ 189.980040][T11569] veth0: entered promiscuous mode [ 190.010879][T11568] veth0: left promiscuous mode [ 190.076043][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 190.088080][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 190.097124][T11583] batadv1: left allmulticast mode [ 190.102160][T11583] batadv1: left promiscuous mode [ 190.123087][T11583] bridge0: port 1(batadv1) entered disabled state [ 190.254516][T11597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1587'. [ 190.419918][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 190.440014][T11608] netlink: 'syz.1.1590': attribute type 12 has an invalid length. [ 190.479631][T11612] team0: Port device geneve3 added [ 190.494524][ T5960] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 190.504642][ T5960] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 190.535280][ T5960] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 190.565938][ T5960] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 190.728047][T11631] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1597'. [ 190.740821][T11630] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 190.875835][T11635] veth0: entered promiscuous mode [ 191.120888][T11655] openvswitch: netlink: Tunnel attr 16 has unexpected len 10 expected 0 [ 191.135934][T11655] openvswitch: netlink: Tunnel attr 16 has unexpected len 10 expected 0 [ 191.230923][T11659] bond16: entered promiscuous mode [ 191.276699][T11659] bond16: entered allmulticast mode [ 191.296763][T11659] 8021q: adding VLAN 0 to HW filter on device bond16 [ 191.340797][T11663] syzkaller1: entered promiscuous mode [ 191.360303][T11663] syzkaller1: entered allmulticast mode [ 191.385925][T11663] syzkaller1: left promiscuous mode [ 191.392325][T11663] syzkaller1: left allmulticast mode [ 191.403941][T11672] netlink: 'syz.3.1611': attribute type 33 has an invalid length. [ 191.471757][T11681] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 191.707898][T11696] xt_nfacct: accounting object `\$9Z鶰#睃緈U祙盺c羂F9Y獬埆弥' does not exist [ 192.094476][T11720] netlink: 'syz.2.1621': attribute type 10 has an invalid length. [ 192.122497][T11724] netlink: 'syz.2.1621': attribute type 10 has an invalid length. [ 192.137925][T11720] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.255152][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.264696][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.293276][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.327620][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.337540][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.350009][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.358519][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.366800][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.375242][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 192.387525][T11729] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 194.154340][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.226160][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 196.226183][ T5182] Bluetooth: hci1: command 0x0406 tx timeout [ 196.226195][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 203.102977][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.993861][T11766] tipc: Enabled bearer , priority 0 [ 213.001518][T11766] syzkaller0: entered promiscuous mode [ 213.008354][T11766] syzkaller0: entered allmulticast mode [ 213.017698][T11766] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 213.067932][T11765] tipc: Resetting bearer [ 213.088435][T11765] tipc: Disabling bearer [ 213.199559][T11773] delete_channel: no stack [ 213.233931][T11781] __nla_validate_parse: 76 callbacks suppressed [ 213.233953][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 213.251597][T11781] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1639'. [ 213.294158][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 213.356672][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'. [ 213.372436][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'. [ 213.451576][T11800] netlink: 'syz.3.1645': attribute type 30 has an invalid length. [ 213.599142][T11808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1646'. [ 213.613828][T11808] nbd: must specify at least one socket [ 213.675434][T11817] netlink: 'syz.4.1646': attribute type 10 has an invalid length. [ 213.675434][T11810] netlink: 'syz.4.1646': attribute type 10 has an invalid length. [ 213.675456][T11810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1646'. [ 213.693076][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1646'. [ 213.741690][T11810] team0: Port device geneve0 added [ 213.789858][T11828] xt_l2tp: v2 sid > 0xffff: 1114112 [ 213.900522][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 213.932602][T11831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'. [ 213.948403][T11831] macvlan3: entered promiscuous mode [ 213.953982][T11831] macvlan3: entered allmulticast mode [ 213.960440][T11831] bond12: (slave macvlan3): Opening slave failed [ 214.118274][T11842] nla_validate_range_unsigned: 55 callbacks suppressed [ 214.118292][T11842] netlink: 'syz.1.1655': attribute type 11 has an invalid length. [ 214.333298][T11855] tipc: Enabled bearer , priority 0 [ 214.341309][T11855] syzkaller0: entered promiscuous mode [ 214.347495][T11855] syzkaller0: entered allmulticast mode [ 214.369230][T11855] tipc: Resetting bearer [ 214.378067][T11853] tipc: Resetting bearer [ 214.393520][T11853] tipc: Disabling bearer [ 214.427279][T11860] tipc: Enabled bearer , priority 0 [ 214.481191][T11860] syzkaller0: entered promiscuous mode [ 214.486954][T11860] syzkaller0: entered allmulticast mode [ 214.494026][T11860] tipc: Resetting bearer [ 214.526284][T11865] tipc: Resetting bearer [ 215.506430][ T5937] tipc: Node number set to 171003642 [ 215.781206][T11865] tipc: Disabling bearer [ 215.954209][T11897] netlink: 'syz.2.1671': attribute type 4 has an invalid length. [ 216.062035][T11909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.576189][T11952] netlink: 'syz.2.1686': attribute type 2 has an invalid length. [ 216.979515][T11987] macvtap0: entered promiscuous mode [ 216.994726][T11987] macvtap0: entered allmulticast mode [ 217.351636][T12015] netem: incorrect ge model size [ 217.370442][T12015] netem: change failed [ 217.765164][T12041] IPv6: sit2: Disabled Multicast RS [ 217.875317][T12046] netlink: 'syz.1.1717': attribute type 1 has an invalid length. [ 217.962198][T12051] netlink: 'syz.0.1718': attribute type 3 has an invalid length. [ 217.991894][T12052] bond17: entered promiscuous mode [ 217.997170][T12052] bond17: entered allmulticast mode [ 218.003143][T12052] 8021q: adding VLAN 0 to HW filter on device bond17 [ 218.130624][T12063] netlink: 'syz.2.1726': attribute type 26 has an invalid length. [ 218.139100][T12063] netlink: 'syz.2.1726': attribute type 26 has an invalid length. [ 218.275276][T12072] __nla_validate_parse: 18 callbacks suppressed [ 218.275294][T12072] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1728'. [ 218.424142][T12086] netlink: 'syz.2.1732': attribute type 10 has an invalid length. [ 218.447618][T12086] veth1_macvtap: left promiscuous mode [ 218.491645][T12089] netlink: 'syz.3.1733': attribute type 33 has an invalid length. [ 218.491944][T12092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1734'. [ 218.501103][T12089] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 218.514963][T12093] netlink: 'syz.2.1732': attribute type 1 has an invalid length. [ 218.535615][T12093] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1732'. [ 218.588868][T12092] openvswitch: netlink: Actions may not be safe on all matching packets [ 218.626917][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 218.677348][T12101] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1737'. [ 218.692635][T12100] sctp: [Deprecated]: syz.2.1736 (pid 12100) Use of int in maxseg socket option. [ 218.692635][T12100] Use struct sctp_assoc_value instead [ 218.748336][T12103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1738'. [ 218.781042][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 218.795763][T12108] smc: net device erspan0 applied user defined pnetid SYZ0 [ 219.098900][T12120] syzkaller0: entered promiscuous mode [ 219.117317][T12120] syzkaller0: entered allmulticast mode [ 219.471857][T12149] netlink: 'syz.1.1753': attribute type 32 has an invalid length. [ 219.486679][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 219.560222][T12157] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 219.679744][T12163] xt_policy: too many policy elements [ 220.647620][T12149] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 220.677724][T12154] netlink: 'syz.1.1753': attribute type 4 has an invalid length. [ 220.824125][T12170] macvlan0: entered promiscuous mode [ 220.840638][T12170] batadv0: entered promiscuous mode [ 220.881704][T12170] hsr1: entered allmulticast mode [ 220.887145][T12170] macvlan0: entered allmulticast mode [ 220.892939][T12170] veth1_vlan: entered allmulticast mode [ 220.898781][T12170] batadv0: entered allmulticast mode [ 220.924285][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 220.935007][T12170] macvlan0: left promiscuous mode [ 220.947580][T12170] batadv0: left promiscuous mode [ 220.987133][T12186] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 221.017551][T12194] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 221.031368][T12182] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1759'. [ 221.148433][T12201] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 221.157870][T12201] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 221.176680][T12201] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 221.538034][T12226] syzkaller1: entered promiscuous mode [ 221.554834][T12232] netlink: 'syz.0.1775': attribute type 7 has an invalid length. [ 221.562743][T12226] syzkaller1: entered allmulticast mode [ 221.782856][T12245] vlan2: entered promiscuous mode [ 221.788056][T12245] bridge0: entered promiscuous mode [ 222.082158][T12263] Unsupported ieee802154 address type: 0 [ 222.567016][T12290] xfrm1: entered promiscuous mode [ 222.572081][T12290] xfrm1: entered allmulticast mode [ 222.619684][T12293] openvswitch: netlink: Missing key (keys=40, expected=80) [ 222.741946][T12316] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 222.769292][T12312] gre1: entered promiscuous mode [ 222.790143][T12312] gre1: entered allmulticast mode [ 223.021634][T12330] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.081422][T12330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.262065][T12347] xt_HMARK: spi-set and port-set can't be combined [ 223.275704][T12345] veth1_to_bond: entered allmulticast mode [ 223.285620][T12345] __nla_validate_parse: 11 callbacks suppressed [ 223.285634][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1812'. [ 223.353051][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 223.430598][T12345] bond0: (slave bond_slave_1): Releasing backup interface [ 223.479367][T12345] veth1_to_bond (unregistering): left allmulticast mode [ 223.656690][T12378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1819'. [ 223.758911][T12382] validate_nla: 5 callbacks suppressed [ 223.758941][T12382] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 223.785939][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 223.979378][T12366] 8021q: adding VLAN 0 to HW filter on device bond18 [ 224.005546][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 224.024981][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1822'. [ 224.128783][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 224.166972][T12402] 8021q: adding VLAN 0 to HW filter on device bond19 [ 224.258916][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 224.279306][T12402] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 224.496763][T12427] tipc: Can't bind to reserved service type 2 [ 224.541848][T12433] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1834'. [ 224.635615][T12440] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1834'. [ 225.488606][T12503] lo: left promiscuous mode [ 225.495783][T12503] tunl0: left promiscuous mode [ 225.503940][T12503] gre0: left promiscuous mode [ 225.508893][T12503] erspan0: left promiscuous mode [ 225.519545][T12503] ip_vti0: left promiscuous mode [ 225.639495][T12503] vlan0: left promiscuous mode [ 225.646552][T12503] vlan0: left allmulticast mode [ 225.651421][T12503] veth0_vlan: left allmulticast mode [ 225.679357][T12503] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 225.736013][T12503] gre3: left allmulticast mode [ 225.751729][T12503] ipvlan3: left promiscuous mode [ 225.759786][T12503] bond4: left promiscuous mode [ 225.776300][T12503] vlan2: left promiscuous mode [ 225.781080][T12503] bridge0: left promiscuous mode [ 225.840783][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.850984][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.871033][T10521] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.896746][T10521] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.925805][T10521] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.947105][T10521] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.971222][T10521] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.987103][T10521] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.186933][T12527] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 226.213617][T12538] tipc: Enabling of bearer rejected, failed to enable media [ 226.231876][T12532] vxcan1 speed is unknown, defaulting to 1000 [ 226.537552][T12555] tipc: Enabled bearer , priority 10 [ 226.583852][T10521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.613051][T10521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.662657][T12300] ------------[ cut here ]------------ [ 226.668461][T12300] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 226.678912][T12300] WARNING: CPU: 0 PID: 12300 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 226.689014][T12300] Modules linked in: [ 226.693187][T12300] CPU: 0 UID: 0 PID: 12300 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 226.702642][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 226.712767][T12300] Workqueue: mld mld_ifc_work [ 226.717464][T12300] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 226.723749][T12300] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 91 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 76 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 226.743383][T12300] RSP: 0018:ffffc9001b3ee4d8 EFLAGS: 00010246 [ 226.749461][T12300] RAX: 49d9ae9a81547000 RBX: 000000000000000c RCX: ffff888031e95a00 [ 226.757477][T12300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 226.765482][T12300] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 226.773482][T12300] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff888027d58528 [ 226.781459][T12300] R13: 0000000000000000 R14: ffff888029900e40 R15: ffff8880299030d8 [ 226.789460][T12300] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 226.798415][T12300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.805026][T12300] CR2: 00007fa5c9574860 CR3: 00000000295c6000 CR4: 00000000003526f0 [ 226.813030][T12300] Call Trace: [ 226.816314][T12300] [ 226.819271][T12300] rate_control_send_low+0x194/0x7a0 [ 226.824598][T12300] rate_control_get_rate+0x20b/0x5d0 [ 226.829909][T12300] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 226.835616][T12300] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 226.841705][T12300] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 226.848002][T12300] invoke_tx_handlers_late+0xb6/0x1820 [ 226.853505][T12300] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 226.859422][T12300] ieee80211_tx_dequeue+0x308e/0x4360 [ 226.864905][T12300] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 226.870637][T12300] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.876072][T12300] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 226.882156][T12300] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 226.888775][T12300] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.894178][T12300] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 226.899898][T12300] ? do_raw_spin_unlock+0x122/0x240 [ 226.905126][T12300] ieee80211_queue_skb+0x1a31/0x21c0 [ 226.910434][T12300] ieee80211_tx+0x297/0x420 [ 226.914974][T12300] ? __pfx_ieee80211_tx+0x10/0x10 [ 226.920012][T12300] ? ieee80211_xmit+0x315/0x400 [ 226.924884][T12300] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 226.930874][T12300] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 226.937070][T12300] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 226.943527][T12300] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 226.949771][T12300] ieee80211_subif_start_xmit+0xe0/0x510 [ 226.955424][T12300] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 226.961676][T12300] ? __pfx_netif_skb_features+0x10/0x10 [ 226.967252][T12300] ? call_rcu+0x6ff/0x9c0 [ 226.971587][T12300] ? __lock_acquire+0xab9/0xd20 [ 226.976469][T12300] dev_hard_start_xmit+0x2d7/0x830 [ 226.981595][T12300] __dev_queue_xmit+0x1b8d/0x3b50 [ 226.986636][T12300] ? register_lock_class+0x51/0x320 [ 226.991844][T12300] ? __dev_queue_xmit+0x27b/0x3b50 [ 226.996996][T12300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 227.002375][T12300] ? read_seqbegin+0x122/0x250 [ 227.007160][T12300] ? neigh_resolve_output+0x438/0x750 [ 227.012529][T12300] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.017758][T12300] ? read_seqbegin+0x1ac/0x250 [ 227.022528][T12300] ? __pfx_read_seqbegin+0x10/0x10 [ 227.027678][T12300] ? __local_bh_enable_ip+0x12d/0x1c0 [ 227.033079][T12300] ? eth_header+0x11b/0x200 [ 227.037588][T12300] ? __asan_memcpy+0x40/0x70 [ 227.042199][T12300] ip6_finish_output2+0x11fb/0x16a0 [ 227.047423][T12300] ? ip6_finish_output2+0x701/0x16a0 [ 227.052709][T12300] ? ip6_mtu+0x7d/0x3f0 [ 227.056902][T12300] ? __pfx_ip6_finish_output2+0x10/0x10 [ 227.062447][T12300] ? ip6_mtu+0x7d/0x3f0 [ 227.066617][T12300] ? ip6_mtu+0x321/0x3f0 [ 227.070863][T12300] ? ip6_finish_output+0x2ef/0x4e0 [ 227.076001][T12300] NF_HOOK+0x9e/0x380 [ 227.079992][T12300] ? NF_HOOK+0x101/0x380 [ 227.084257][T12300] ? __pfx_NF_HOOK+0x10/0x10 [ 227.088851][T12300] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 227.094685][T12300] ? do_raw_spin_unlock+0x122/0x240 [ 227.099886][T12300] ? icmp6_dst_alloc+0x3a5/0x420 [ 227.104850][T12300] ? icmp6_dst_alloc+0x3a5/0x420 [ 227.109800][T12300] mld_sendpack+0x800/0xd80 [ 227.114344][T12300] ? mld_sendpack+0x1de/0xd80 [ 227.119019][T12300] ? __pfx_mld_sendpack+0x10/0x10 [ 227.124080][T12300] mld_ifc_work+0x83e/0xd60 [ 227.128586][T12300] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.133809][T12300] ? process_scheduled_works+0x9ef/0x17b0 [ 227.139531][T12300] process_scheduled_works+0xae1/0x17b0 [ 227.145123][T12300] ? __pfx_process_scheduled_works+0x10/0x10 [ 227.151111][T12300] worker_thread+0x8a0/0xda0 [ 227.155753][T12300] kthread+0x70e/0x8a0 [ 227.159830][T12300] ? __pfx_worker_thread+0x10/0x10 [ 227.164956][T12300] ? __pfx_kthread+0x10/0x10 [ 227.169550][T12300] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.174774][T12300] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.179969][T12300] ? __pfx_kthread+0x10/0x10 [ 227.184578][T12300] ret_from_fork+0x439/0x7d0 [ 227.189178][T12300] ? __pfx_ret_from_fork+0x10/0x10 [ 227.194335][T12300] ? __switch_to_asm+0x39/0x70 [ 227.199103][T12300] ? __switch_to_asm+0x33/0x70 [ 227.203879][T12300] ? __pfx_kthread+0x10/0x10 [ 227.208481][T12300] ret_from_fork_asm+0x1a/0x30 [ 227.213299][T12300] [ 227.216326][T12300] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 227.223587][T12300] CPU: 0 UID: 0 PID: 12300 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 227.233023][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.243071][T12300] Workqueue: mld mld_ifc_work [ 227.247740][T12300] Call Trace: [ 227.251004][T12300] [ 227.253926][T12300] dump_stack_lvl+0x99/0x250 [ 227.258519][T12300] ? __asan_memcpy+0x40/0x70 [ 227.263092][T12300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.268274][T12300] ? __pfx__printk+0x10/0x10 [ 227.272872][T12300] vpanic+0x281/0x750 [ 227.276856][T12300] ? __pfx__printk+0x10/0x10 [ 227.281434][T12300] ? __pfx_vpanic+0x10/0x10 [ 227.285938][T12300] ? is_bpf_text_address+0x292/0x2b0 [ 227.291215][T12300] panic+0xb9/0xc0 [ 227.294921][T12300] ? __pfx_panic+0x10/0x10 [ 227.299346][T12300] __warn+0x31b/0x4b0 [ 227.303321][T12300] ? __rate_control_send_low+0x5df/0x820 [ 227.308936][T12300] ? __rate_control_send_low+0x5df/0x820 [ 227.314553][T12300] report_bug+0x2be/0x4f0 [ 227.318883][T12300] ? __rate_control_send_low+0x5df/0x820 [ 227.324499][T12300] ? __rate_control_send_low+0x5df/0x820 [ 227.330115][T12300] ? __rate_control_send_low+0x5e1/0x820 [ 227.335728][T12300] handle_bug+0x84/0x160 [ 227.339957][T12300] exc_invalid_op+0x1a/0x50 [ 227.344449][T12300] asm_exc_invalid_op+0x1a/0x20 [ 227.349296][T12300] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 227.355545][T12300] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 91 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 76 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 227.375132][T12300] RSP: 0018:ffffc9001b3ee4d8 EFLAGS: 00010246 [ 227.381180][T12300] RAX: 49d9ae9a81547000 RBX: 000000000000000c RCX: ffff888031e95a00 [ 227.389133][T12300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 227.397090][T12300] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 227.405052][T12300] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff888027d58528 [ 227.413010][T12300] R13: 0000000000000000 R14: ffff888029900e40 R15: ffff8880299030d8 [ 227.420988][T12300] ? __rate_control_send_low+0x5de/0x820 [ 227.426620][T12300] rate_control_send_low+0x194/0x7a0 [ 227.431897][T12300] rate_control_get_rate+0x20b/0x5d0 [ 227.437170][T12300] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 227.442813][T12300] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 227.448890][T12300] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 227.455116][T12300] invoke_tx_handlers_late+0xb6/0x1820 [ 227.460568][T12300] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 227.466450][T12300] ieee80211_tx_dequeue+0x308e/0x4360 [ 227.471842][T12300] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 227.477545][T12300] ? __local_bh_enable_ip+0x12d/0x1c0 [ 227.482933][T12300] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 227.488989][T12300] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 227.495560][T12300] ? __local_bh_enable_ip+0x12d/0x1c0 [ 227.500915][T12300] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 227.506617][T12300] ? do_raw_spin_unlock+0x122/0x240 [ 227.511802][T12300] ieee80211_queue_skb+0x1a31/0x21c0 [ 227.517102][T12300] ieee80211_tx+0x297/0x420 [ 227.521602][T12300] ? __pfx_ieee80211_tx+0x10/0x10 [ 227.526647][T12300] ? ieee80211_xmit+0x315/0x400 [ 227.531491][T12300] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 227.537454][T12300] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 227.543600][T12300] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 227.550005][T12300] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 227.556238][T12300] ieee80211_subif_start_xmit+0xe0/0x510 [ 227.561870][T12300] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 227.568094][T12300] ? __pfx_netif_skb_features+0x10/0x10 [ 227.573630][T12300] ? call_rcu+0x6ff/0x9c0 [ 227.577957][T12300] ? __lock_acquire+0xab9/0xd20 [ 227.582815][T12300] dev_hard_start_xmit+0x2d7/0x830 [ 227.587938][T12300] __dev_queue_xmit+0x1b8d/0x3b50 [ 227.592950][T12300] ? register_lock_class+0x51/0x320 [ 227.598154][T12300] ? __dev_queue_xmit+0x27b/0x3b50 [ 227.603259][T12300] ? __pfx___dev_queue_xmit+0x10/0x10 [ 227.608617][T12300] ? read_seqbegin+0x122/0x250 [ 227.613366][T12300] ? neigh_resolve_output+0x438/0x750 [ 227.618735][T12300] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.623916][T12300] ? read_seqbegin+0x1ac/0x250 [ 227.628662][T12300] ? __pfx_read_seqbegin+0x10/0x10 [ 227.633758][T12300] ? __local_bh_enable_ip+0x12d/0x1c0 [ 227.639125][T12300] ? eth_header+0x11b/0x200 [ 227.643613][T12300] ? __asan_memcpy+0x40/0x70 [ 227.648212][T12300] ip6_finish_output2+0x11fb/0x16a0 [ 227.653404][T12300] ? ip6_finish_output2+0x701/0x16a0 [ 227.658690][T12300] ? ip6_mtu+0x7d/0x3f0 [ 227.662836][T12300] ? __pfx_ip6_finish_output2+0x10/0x10 [ 227.668380][T12300] ? ip6_mtu+0x7d/0x3f0 [ 227.672520][T12300] ? ip6_mtu+0x321/0x3f0 [ 227.676751][T12300] ? ip6_finish_output+0x2ef/0x4e0 [ 227.681852][T12300] NF_HOOK+0x9e/0x380 [ 227.685823][T12300] ? NF_HOOK+0x101/0x380 [ 227.690058][T12300] ? __pfx_NF_HOOK+0x10/0x10 [ 227.694641][T12300] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 227.700444][T12300] ? do_raw_spin_unlock+0x122/0x240 [ 227.705629][T12300] ? icmp6_dst_alloc+0x3a5/0x420 [ 227.710553][T12300] ? icmp6_dst_alloc+0x3a5/0x420 [ 227.715484][T12300] mld_sendpack+0x800/0xd80 [ 227.719978][T12300] ? mld_sendpack+0x1de/0xd80 [ 227.724636][T12300] ? __pfx_mld_sendpack+0x10/0x10 [ 227.729652][T12300] mld_ifc_work+0x83e/0xd60 [ 227.734153][T12300] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.739345][T12300] ? process_scheduled_works+0x9ef/0x17b0 [ 227.745046][T12300] process_scheduled_works+0xae1/0x17b0 [ 227.750591][T12300] ? __pfx_process_scheduled_works+0x10/0x10 [ 227.756563][T12300] worker_thread+0x8a0/0xda0 [ 227.761151][T12300] kthread+0x70e/0x8a0 [ 227.765208][T12300] ? __pfx_worker_thread+0x10/0x10 [ 227.770299][T12300] ? __pfx_kthread+0x10/0x10 [ 227.774887][T12300] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.780066][T12300] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.785244][T12300] ? __pfx_kthread+0x10/0x10 [ 227.789819][T12300] ret_from_fork+0x439/0x7d0 [ 227.794409][T12300] ? __pfx_ret_from_fork+0x10/0x10 [ 227.799523][T12300] ? __switch_to_asm+0x39/0x70 [ 227.804274][T12300] ? __switch_to_asm+0x33/0x70 [ 227.809021][T12300] ? __pfx_kthread+0x10/0x10 [ 227.813604][T12300] ret_from_fork_asm+0x1a/0x30 [ 227.818376][T12300] [ 227.821644][T12300] Kernel Offset: disabled [ 227.825951][T12300] Rebooting in 86400 seconds..