last executing test programs: 2.676367459s ago: executing program 0 (id=1779): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl(r3, 0x8b2c, &(0x7f0000000040)) (async) 2.333253947s ago: executing program 1 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f00000005c0)=""/96, 0x2e, 0x60, 0x1}, 0x1e) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r2, 0x29, 0xc8, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0x4000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 2.047329897s ago: executing program 0 (id=1786): r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r1, 0x0, 0xfffffffc, 0xf) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x0, 0x0, 0x3f8, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.963770917s ago: executing program 1 (id=1788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) close(r3) (async) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x1, 0xfffffffb, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x1, 0xfffffffb, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@var={0x10, 0x0, 0x0, 0xe, 0x3, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000440)=""/170, 0x3c, 0xaa, 0x1, 0x3178, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x6e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x1000, 0x8}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x68}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x2, 0x6, 0x2, 0x9, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x3, 0x1, 0xf, 0x0, 0x80, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r3}, @ringbuf_query, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x38}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xae6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x23, &(0x7f0000000140)=""/35, 0x41100, 0x21, '\x00', r7, @fallback=0x1e, r8, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x8, 0x37dc, 0x2}, 0x10, r9, r0, 0x3, &(0x7f0000000900)=[r10, r11, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r12, r14], &(0x7f0000000940)=[{0x4, 0x4, 0x6, 0x4}, {0x1, 0x5, 0x0, 0xc}, {0x3, 0x5, 0xa, 0x1}], 0x10, 0x849}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.756413029s ago: executing program 3 (id=1790): r0 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 1.68683769s ago: executing program 1 (id=1791): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000800488004000800100001800c001080080006fd040000800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.543227746s ago: executing program 4 (id=1794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xf8, 0x0, 0xfffffffe, 0xc}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003"], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02010000000000001400030000000a000100bbbbbbbbbbbb0000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r2 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xffff, 0xf8, 0x4, 0x456}]}, 0x10) 1.457332095s ago: executing program 4 (id=1795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/136, 0x88}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_init_net_socket$ax25(0x3, 0x4, 0xcc) 1.450306025s ago: executing program 1 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x0, 0x3, {0xa, 0x4e23, 0x1, @private2, 0x9}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)="e8315e76274b44cb7852f08b4bf0c02395bf3c54e85f6623127dbe0cbbc59d9151f74a", 0x23}, {&(0x7f0000000300)="76beeacbcd92e123ea0589a1f6777339c9b0ef6170a825fd0a42ff36850e85f2fb9994013afc189ddb91a8e1814854995d5adb9664f19594f2a9a5c854e120c300e29565cbf63a825380652d7c4d4df360d64d641e636c7fd68ea0f829124433b18b622b34c1ef2a55b2ab6a2d716c95302eab51f306711e72eb9e8bac56816c1a8dc8d41fbc4c229f6ca03fad352ce4297b78458e6472957875885e6fdd57d6a6db96b9342e4651f4453bd0d71107a6728d88edeaf32be3237b1f1743db1642742e1a3f340a", 0xc6}, {&(0x7f0000000400)="98fb8d79ac335ebc9062e326e930902cdf311fbf0dbcabfae4c7af5843803cb7ae177cd404a11a44b43ec5cd2d35440d38b6cc55e95053cc02a5975e48629c9ab73af712c3b187d11448dc7db74419060803a31d9faf75bdaa1add82af6779f2fd3a27446e43c08535769f06f6e8b901e6b34245d1e7f2bced991a565823bc2e9554db047791910fb21fe77c3cd8839c5883", 0x92}, {&(0x7f00000004c0)="4101b7b84695441b7ff6b36cc06b3fccd115de956561cc953f9cccf063c340889b6872fbeda16cf50a571ae298e514c013a81514e5ab43e4842f85e7cb299707ae61423b66207af016d2fecb4ecada2e8a15467c5a823f6acf275e516acf71873d811d3b", 0x64}, {&(0x7f0000000540)="6ed00b470721c8e1e6211fd2f97315656e9a2596b8cd9c8843b2266e2cd80279b3cdc71df5f01b494282e9d632f191902ab0f8471dfa55ada37f7a3391c613f215fc35642907c83437", 0x49}, {&(0x7f0000000280)="a0f20c407393fd6f6e4fbc2272a22ef242b82d9a2d2bbacc", 0x18}, {&(0x7f00000005c0)}], 0x7, &(0x7f0000000680)=[{0xb0, 0x10e, 0x8, "da2f999d6cba878bfe87672a51e7a9dd96a5f0972d314e15cf6a5827111ec14d7f8c9ece1f3d0850fa7eed7a5e5fc38926f97a7c7e9e0bb2a719b73d69188a38b3a34579c5bfccae72979f5de5331b2e75d1e40c9422f8c34d9251930289fd00bfabedc63583148bab79b0a27d67d8afeb144877e4fb0f3890a08483e670ed619fc477dc1f623ca1a9a88e432f9424d90abc9741dd1c6dafc88cd609"}, {0xc0, 0x3a, 0x3, "9bce93d1b191399236f77ad1b528dca1e6726767ec48463da6545ff9a11829c56ceb25c0d77ba53d83eed266b449f107bc7eb1071ef920b083414aa34a795cf132e02617b45f26966bfbc96956d15fbe5426df16cabd5899fe2cb30e5d82b7e49d77aa6ac96c6189b457039e3f86ff3cc9c354946096f4e19462fbd9e880fe50bb67c9a089aeb97888779e627fa70f1c98d6fba4be7766cb8cca17192bf45bb5cc859b66a4e20a8872dae8b3"}], 0x170}}, {{&(0x7f0000000800)=@ax25={{0x3, @bcast, 0x5}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)="92549bb06458c793c7aa92f6ed7b01043033f01facb8e6b3c77e25e49f03dc235a210b0344ad3440d2060a752483cc60153ccefc1fdc468e699d6af9cc1411a7258fcca88e330b68509247117856e117205d608f8280176a170706ec577dbe47128c702f8e84b75ea61fef2a8f8ffed9f7a7535f59a435672ceabfc720d7294127d14b2231c56a4c5664474595b2daf5de6308840c1b7c3f8c9756a093e492db4d8a1a76f5914658e9d52f08d41ac1b37f840904a71db9ba", 0xb8}], 0x1, &(0x7f0000000980)=[{0x48, 0x6, 0x1, "c1aa999f42c8a83c34861e27c8459a1104ad9952d5c57028d0794472bf8d6aeed52cca2307f2cdca107f7fe5b70c78546e45"}], 0x48}}], 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x1c, r4, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_newneigh={0x6c, 0x1c, 0x400, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, r1, 0x8, 0x34, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LINK_NETNSID={0x8, 0xa, 0xffffe5a3}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NDA_VNI={0x8, 0x7, 0x29}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_MASTER={0x8, 0x9, 0x1ff}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_IFINDEX={0x8, 0x8, r1}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.3474293s ago: executing program 3 (id=1797): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0xc4, &(0x7f0000000280)=""/196, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xc, 0x10, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x2, 0x4, 0xb, 0x4}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='mmc_request_start\x00', r1}, 0x18) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.326412019s ago: executing program 2 (id=1798): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000080)="d208bd09b50863869e56ccf88e831d21623a275c3e4087bd228a9f7e9c61bce37a3baf2cd5a0de878e9797241ca865835addf8b509f59ea2eb3bcaa3", &(0x7f00000000c0)=""/214, &(0x7f00000001c0)="61485bfce4af3af33df046ad4394c8f053997896ee1b3df9b02cb09106de1500d1b829db39", &(0x7f0000000200)="6cf06fb31cdcdfe72ca95b970f10d7a2debf1b92e7cb31593fb7067d33f2527b6b7d262fa49b32fbdbe93325dbc1584fe68b671f1e76aebf66164f47d3bb25f9c0bb9b23fcf9da893ee722d3ed054019f44e6ce2c98c2d4e19b2ab2c6e57e86e479d648820f33625d50bcf245740a377352830c5af44d42e657d", 0x8, r2, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x8dd}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x1}]}, @func_proto]}, {0x0, [0x61, 0x0, 0x0, 0x3a6f5491e0ad3b4f]}}, 0x0, 0x62}, 0x28) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) 1.236447884s ago: executing program 3 (id=1799): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000e, 0x4010, r0, 0xb7ded000) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x3d, 0x400, 0x70bd27, 0x25dfdbfb, {0xa}, [@typed={0x35, 0x12e, 0x0, 0x0, @binary="f93d9979a90b6ce178146aa50c3490f49d17a8bb0edc6a732dce745b0b2b7d3b2e2ba904aed8694802f73c3bab6b4c67f7"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040) socket(0x5, 0xf, 0x8031) (async) socket(0x5, 0xf, 0x8031) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r4, 0x1, 0x1e, 0x0, &(0x7f00000004c0)) setsockopt$inet6_buf(r3, 0x29, 0x23, &(0x7f0000000780)="ee340ad606a8ba6e1e06303bac9177f9a3f6d9178ca1bad7eccc3d7ae8b07450e0a3c731907db20ecf01a9511db303e44811acbd45fe6edf94bd96e076302cf7d8b6e3fa8ffe70ad9535c25c101c0370a80d867a2973a213fd246db2454a0041bcb061928774290f65a55b06443fb6112b943a42b44409af03583799006b61bf1e12650e8f23dbe8b8d7a9b52d8b0a96e406b358114283a359b6100ffc316e2b73b5c1ecde61f6334c", 0xa9) socket$kcm(0x2, 0x2, 0x73) r5 = socket$kcm(0x2, 0x2, 0x73) close(r5) (async) close(r5) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) 1.147490659s ago: executing program 2 (id=1800): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x40, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x14) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.118930938s ago: executing program 4 (id=1801): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32], 0x54}}, 0x0) 1.051150868s ago: executing program 0 (id=1802): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) (async) bind$netlink(r1, &(0x7f00000002c0), 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) 935.365192ms ago: executing program 2 (id=1803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="000000000000180012800900010073697404001400"/30], 0x38}}, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c) 914.635053ms ago: executing program 4 (id=1804): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) 850.700681ms ago: executing program 0 (id=1805): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x9, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000700)={0x73, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0xb7d, 0x25}, 0x2c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), r3) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r6}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x2f, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000f20302000014001600b703000000000000850000008300000004090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000001000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000024890100fcffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x30}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000380)="99d21956e096db59d72510b91db5603170de59ff4015e410ddc2b013ab56b43d344822ac68f0de3fd85709b83d2a4da80c35876affe6d115717367e2b6e6ba76305e084d17bf25d2e6ff1b0551e66a04aa74ab15490abcab342759f1a5d2a58ef7945e6b731045016a68f9ed11c553e0d62e6d0507b5f14746603fd99902327a55dfc074c1", &(0x7f0000000480)=""/212, &(0x7f0000000140)="a6e94d39cc7a061fbd99078236b8bfe1a20465899fdc4c15e078cf46e1e822c37c2998cf34", &(0x7f0000000580)="53d9cbbe3762959e26615110560f011c2f23ff4d3ac53dcf35b2daed212ed5fc2c32b5989b8e6ced1e742ea9fb9b5e60ad1cf2eb96f51cd150b206276849b39940122fd37c23dcbca675c2300ab67413e8a234cccd0314bbb99d83ba80ade1d6707171430f3c33f321bef1a5e8edfa7e4ce5f6a6b69b57b04a7e5349324f341ef1321cd22dc9579ab3fe7dd3fd800e1c39743b471f33ca89cfbd669e813025c13e26c440b20082aa9d0b94c8e9717d76a63f719f7e7dde504a70ccfb54df4dd793d8fb4989643bb40ada6bb4ecf065a004c567ff9ac47b0d70", 0x6, r7, 0x4}, 0x38) 795.41639ms ago: executing program 3 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="300000003e000701fefffffffcffffff047c000008004280040008000c00018006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 788.182343ms ago: executing program 1 (id=1807): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1f, 0xc58, 0x7497, 0x2, 0x1, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000340)='GPL\x00', 0x6, 0x86, &(0x7f0000000780)=""/134, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x288ad, 0xffffffffffffffff, 0x2, &(0x7f0000000840)=[r2], &(0x7f0000000880)=[{0x0, 0x4, 0x1, 0x3}, {0x4, 0x5, 0x7}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)={0x24c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x440e}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4811}, 0x4010) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @local}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', r8, 0x20, 0x20, 0x800, 0xe, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x64, 0x0, 0x4b, 0x3a, 0x0, @broadcast, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) close(r4) 778.941918ms ago: executing program 2 (id=1808): getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x20000, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000f00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6002000000103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r3, &(0x7f00000003c0)="d10ecce370a17ac4d75904dc27cdf72188034782c82fc8e0fb62e0b120778620cf14055205b2da72dd8d4d69c862550b7d7b34891be5c2ed7c280dfe643ef15363bdfa1cee6b518a61f80addabfc602e10c9bc298f3a9973851e094c3f16fa6ed2a786ffa1a460a5f9d76547e123e227eeb36344153cc53c91e9c34b45236c", 0x7f, 0x8080, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xffffff5f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4c2d, 0x40006, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}, 0x1c) syz_emit_ethernet(0xe5, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa050000af1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22"], 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x20000, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) (async) syz_emit_ethernet(0x46, &(0x7f0000000f00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6002000000103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) sendto$unix(r3, &(0x7f00000003c0)="d10ecce370a17ac4d75904dc27cdf72188034782c82fc8e0fb62e0b120778620cf14055205b2da72dd8d4d69c862550b7d7b34891be5c2ed7c280dfe643ef15363bdfa1cee6b518a61f80addabfc602e10c9bc298f3a9973851e094c3f16fa6ed2a786ffa1a460a5f9d76547e123e227eeb36344153cc53c91e9c34b45236c", 0x7f, 0x8080, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xffffff5f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4c2d, 0x40006, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}, 0x1c) (async) syz_emit_ethernet(0xe5, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa050000af1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22"], 0x0) (async) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) (async) 607.492752ms ago: executing program 3 (id=1809): r0 = socket(0x840000000002, 0x3, 0xff) shutdown(r0, 0x1) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086) 599.726319ms ago: executing program 0 (id=1810): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0xb}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2a, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x800, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x5, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) close(r6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private0, 0x95c5}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) connect$inet6(r0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0xbc0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) socket$inet6(0xa, 0xa, 0x1) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f00000000c0)=0x904, 0x4) 510.000122ms ago: executing program 2 (id=1811): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 411.503422ms ago: executing program 3 (id=1812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04000000000a0101000000000000b2a2ea7255fddda57a21deed386870f436efead273c89bad45e30423"], 0x20}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000e7ff000000000000001200000000000000", @ANYRES32=0x0, @ANYBLOB="b36000000000000014001280090001007663616e0000000004000280"], 0x34}}, 0x4000000) 408.915377ms ago: executing program 1 (id=1813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @remote}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c010000ace52ff468e4c30c76c46f1f7e8a8ac0691ee6411f1a8ecaf45d8b2d4141fd4deaf33d35aea59aa5a33674954507e54ce41d17ae54c3e114948a61324f0861d2a3458b18f5323915798aef84af2111f9d7444a625f6507fa59abb7b8b321a5e0b7f04f37c043986fafbd68eeab9a265bea03552d7662856ff6cb7e7839287a42229ff6fcd87e98f63e7daf3d6d6ba34fce93e788f1f0375e85f50bbfa8a4f826c3cbce1c9e29ef51e461f71528509fe2f004c8ac19da2c000f452750ef9d8a92c3903c94af6958cb3723a142f1", @ANYRES16=r8, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 377.248511ms ago: executing program 4 (id=1814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0c009900020000005d0000000600360036000000"], 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x18000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r5, 0x40049409, r5) 101.587403ms ago: executing program 4 (id=1815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001bb6bbd36eb0c"], 0xdc}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x10000}]}}]}, 0x98}}, 0x48004) socket(0x2b, 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000)=""/46, 0x2e, 0xa, 0x1}) 7.032853ms ago: executing program 2 (id=1816): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x10, 0x14}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x124, r1, 0x24, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x44, 0x5b, "c74bb651f6557ac2cbc62fd61ae0c884c49411d3088d8c79d34dc0532493c9e59477d180729d6b0196058f8d23de93c6830ec643f8623636354036e3e5a9bc7f"}, @NL80211_ATTR_FRAME_MATCH={0x1c, 0x5b, "3fb18b85fa75afa354f0b36445491dd6888e8647a91d2fda"}, @NL80211_ATTR_FRAME_MATCH={0xaf, 0x5b, "f1a31790115793f85cb96f9db1e8b68d4ce3de1ca9487d9dc9a871356160e5db2d656492377576b7c6e1769035ea3caadaf14edfd763aab05189914bcd380189bbb95d53f2d56e98ad3c514a4f2f9fb78e2aa89d7989884c8983fdecf41e4dd2bd71f49eef3fe0de40539847e2bec394b543cc02175d29d115302ae77e0febd9a4e930b89fa8275ef8c3c710506ff543a98b55f0d77309628165c39a1d40a3420893041cde1c157f296d52"}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x20000140) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000500)={0x558, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbc75, 0x52}}}}, [@NL80211_ATTR_CSA_IES={0x534, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x210, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0x7, 0xe}, @value=@ver_80211n={0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x8, @random=0x2, 0x221, @void, @val={0x1, 0x8, [{0x18}, {0x30, 0x1}, {0xb}, {0x3d, 0x1}, {0x9}, {0x36}, {0x24, 0x1}, {0x2}]}, @void, @void, @val={0x6, 0x2, 0x3}, @val={0x5, 0x93, {0xd4, 0xfe, 0x8, "9aa315cd730f54826fee7f9e398e433dcf3fdbaedcf1becc4229c43e1c06c214ec2a906e0f3cdebee2c957aeeae253ff5038d50a39fff3bc37e6976e5cd85f2ae946adffee78e94633e116d1d3f76a19247edbf9f8fa34b734be08e594b8f84981d9d5ad7c927b9cebbfdd2b6799df9f94e95581aa35dde14aa914d65570f6a7de660f2e0a2755f05bc1b3c71d73fad3"}}, @void, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x8, 0x6, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x1000, 0x4}}, @void, @void, @val={0x76, 0x6, {0x9, 0x3, 0x28, 0x1149}}, [{0xdd, 0x8, "a98eee715d400c21"}, {0xdd, 0x31, "96fc56538d3e341e586747afa3b53327c081ca5c312dced377a340fb9cfeded7d7583513e1927b0ccb7814c06a80a7fa27"}, {0xdd, 0xdb, "5f9e1254ceb3005b101d258ca1859caeb4e004c21bf4354e20de881ed8a9b0e0d6bae598c6b2182a9682925e282623cbbe4c2bfefaa5a1fd49e3eb0c6dfc96a743094dfa8bd887e846d8701767500401dd6aa0aa5c707e459e63f961b5b693114e97caec51c29be44a89db60bf917e8fee1e149489c46b379732f5b985ea739fbcdc23ca00e38145dbe70c237b00488c08fecedbe1a966bf30f2556a1be54bad9d71564610b389c4f14c53437fb6a05532870e85588cd9f2e591e94ae32f3e4fc38388213b16e42c8e9f5425dc80ce709acd03421e5a05e92ccdaf"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x10, 0x7f, [@supported_rates={0x1, 0x2, [{0x9, 0x1}, {0x36, 0x1}]}, @peer_mgmt={0x75, 0x6, {0x1, 0x5, @void, @val=0x1a, @void}}]}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x74, 0x2, "4a90bb5f1be4c26bed908fe1b4dac17778e51da5249abe9d0b6729f4d4a470faf4ed307d417b267403945665fdee62d8e4e05148e4cc277feef0093b72751fbbca5da9430ed16a297fb96398a59028b304a6498d1aadff15ea2445467fcd5f86a327b442fa9e301379439fbfc967a5b6"}, @NL80211_FTM_RESP_ATTR_LCI={0x7f, 0x2, "925206cb0b2ef155d3dc068fae299676d43aa7569289bb6ecf7248b74288ff612478f45a7eb12b7557cc1e61e8c424e9d7f571a973a1326c09ab41d1741d93802236853cb50ace06e7214b173f6913c20be477393817afab979f68bb11f37a2b7a90b43eeb0aebdcb88b163d63c00b5d147cfc8bb2b1dc0fb77ffb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x23, 0x2, "26bed819a8ee84153cfba29063dde2a42e5788606d525c713850aa21aee749"}]}, @NL80211_ATTR_PROBE_RESP={0x1da, 0x91, "efcad93aa09814a00cf8d2c508d6768e08067fa022dd11afcd598bdb79ec422a861e0145d7ee73d12fd9efe94bc9aa801e09847c7f8ddade49918dc42137cb8ed6d0d0bc0bf997f7f5093686dc691d6aef5fa5429a646b65ef99cbb87648c023d65c53c69706793e1ab576a7167a9b77b2a44701effa3ab46dd54118f83e92727210bf47cf74c759a155f9c2a855a379c613863dfd659ea3a0dd368afa080720df13a806b6ee504bc309573abb695c4f14e345141ac1156ac792bd252cd8c6d918020a85fbbd75a1a9d76a80e376acb246040a110b3db6019c11e52b1988c49560f1c33d053b164cb45e2c3e846f5286d6c8a5d28138e88e5b25380b4935fadf32b1871cd8a18666bc432309d0512b4344f8da7632e8b1939e8783db071f48cf44130734509aec5907ee06894eb7fc3a2cfa8a86a9f924e31bc0944f05308b166dae996530594f52572eaf32e9bcf668993df9c590b06992ebe33ab4c75790926e84b60a3f88c74449d0eb149c436f4012c6658f380c253508775fbab5e8e4c4f66c08e0a67f22edb8141ecf33a63ea85d975606c69dd34dfdc90a3cbd4786b6f209b34507640b54834ce782b5759a5a27ab1ed6f80bc22d5153b781d1313e96f66a76cfd0889088b27ed546258efd3fcd7280bcb171"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2, 0x2, 0xdb, 0x3, 0x4, 0x2, 0x7]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x558}, 0x1, 0x0, 0x0, 0x11}, 0x40080) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000b40)={'team0\x00', &(0x7f0000000b00)=@ethtool_pauseparam={0x12, 0x800, 0x0, 0x81}}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000bc0)={'vxcan1\x00', &(0x7f0000000b80)=@ethtool_wolinfo={0x6, 0x7, 0xfffffffa, "dd550ef861aa"}}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000c00)={{0x67, @rand_addr=0x64010100, 0x4e24, 0x3, 'rr\x00', 0x2, 0x9a6, 0x58}, {@broadcast, 0x4e23, 0x4, 0x9c, 0xc, 0xfffffff7}}, 0x44) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000c80)={0xffffffffffffffff, 0x8, 0x3, 0x9cc2, @vifc_lcl_addr=@multicast2, @multicast2}, 0x10) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000cc0)) ioctl(r3, 0xd168, &(0x7f0000000d00)="59c0e0acac4be1b7c909433d4274aad76425e21ca7cd9de3687ebc76095e601b6460ebcac0828fe0a051dc83a1a587771ca6559b8d47ab352235939ff7a30c0adf841cf8de0deaaa830e38effd0e99af61d20d2aaca0227574d4ab3f82a45ffa1cfd1a99f0e899b535a28ff815a34766da0f76d6b167e119e0bcd4b59a2e77c2fcfd66ce5272f2e31269") getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000dc0)={0x0, 0x37a}, &(0x7f0000000e00)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000e40)={r4, @in6={{0xa, 0x4e22, 0x666bbeb6, @private0, 0x7fffffff}}}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001340)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000f40)={0x390, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x338, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa0, 0x3, "24f7252f106b85abc9776a720e20fdb94e9baaf08bb65342a7f4b263df97e9dac13f110c70d9d39bd8d10deccd31e80c29d9b3ea7c4610989e872038452d5dc989993eeb2340c76ebbeafafd1d88168a8acd8ae63580dd6018996d5f10f4f7564e5103035e1efc75438af2dc43eb37650fe89046c47054b8d5bcd09bb0e39842ca0d4f8863df7b3f54d3735425cf050e20a588dd0e0554e9773e6481"}, @TIPC_NLA_NODE_ID={0x5c, 0x3, "87569e58b54cb4ec05101fe3001a45ca8b954257763bebbdcbc8a8d8d88c5a0892df82cc1cfdd0889b65628113cf69b69aa7a41925ef3984c6238f16d85ca6e1760eb35a6c7233c76c45322e7fca66f5dcfee10d7d3dacbd"}, @TIPC_NLA_NODE_ID={0xad, 0x3, "f55d8a20d41b55cedc1399669dbb17aec99a0a064bf8aaffa44982312d982ec05dab57064871f84249fff361f96eb22dfedcbea8a307f487d83bd6593b96bf8603c02830417f2ff71228e0e118f2d9a8aa4162482e60823c19934f1fe03a30e4286e3508a2ac893cc034fecd4bdab47ae52ff155e0e2bfa1fcbaa79832de787e11440bc5d96368f8c4e09b55b8a9c1a62c74905ec153dd8ad9033546614f7ba631961a5c894e87f848"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x71, 0x3, "59931ac61486f59468fb5eab4869f8f1a5b3aeb9c82f772b4a7e3d1bfbd00278ace6e7c6d1d2837ce070f48d0b5db8e5ff52dc2500d83b4df46651a378b507adaef4e37e4c77d18bc2e879dac8f6d71ffa017731437a5179813c764a8ee69d9cf6c366c3a464d5d8809efe7428"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf6, 0x3, "81cec8ec1ce4823a2dd8e457d3cde0acc98cee568dd90c317f88441c8efea0cf7073b3b40c4cb483055e3fddf37e7fd25ec0bff5ee30307397dd6534b576b9f63c622fb37d97720aa775ca1beba158c42f870ce9fc067fe518e18216724b3f6a5fb49e88c19974d30152cf78da0674bb7c4fdc66aea092b5d26b5693ff6e4d5cfbec48e20cb1e486f70affbe5ba3518ca56fb9beb0c761844969abc8b9f558cec67fdb4b42cc80593ceca0d8919d86f9d29c10b2a15c3db75d342fecf9904ceea842d16b53629bfaf39d2f77ecd18d730e1c206d130bb7cc40d91c52ddd38acf55cc5a029a6d7e5ecc262678a4413738a519"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x51f}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x4c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x42c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001580)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x4c, r7, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0xfa80fcb3d5bb9373}, 0x6000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000016c0)={'vcan0\x00'}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001700)={0x395, 0x203, 0xb, 0xffff, r4}, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001780), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x84, r10, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ba9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9fd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 0s ago: executing program 0 (id=1817): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x4) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth1_to_hsr\x00', {0xa9c}}) close(r1) kernel console output (not intermixed with test programs): [ T6592] veth3: entered allmulticast mode [ 130.743357][ T6618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.389042][ T6650] __nla_validate_parse: 5 callbacks suppressed [ 131.389066][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 131.425981][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 131.462286][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 131.505578][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 131.580966][ T6658] 8021q: VLANs not supported on ip6_vti0 [ 132.109168][ T6677] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 132.293077][ T6691] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 132.327940][ T6691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.390154][ T6691] netlink: 444 bytes leftover after parsing attributes in process `syz.0.210'. [ 132.491341][ T6700] Bluetooth: MGMT ver 1.23 [ 132.540293][ T6691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.569726][ T6704] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 132.635628][ T6704] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 132.714485][ T6709] xt_hashlimit: size too large, truncated to 1048576 [ 132.943468][ T6722] netlink: 232 bytes leftover after parsing attributes in process `syz.4.215'. [ 133.418278][ T6729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.219'. [ 134.080019][ T6764] netlink: 232 bytes leftover after parsing attributes in process `syz.0.229'. [ 134.313469][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 134.409530][ T6780] syzkaller1: entered promiscuous mode [ 134.415078][ T6780] syzkaller1: entered allmulticast mode [ 134.532434][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 134.547215][ T6784] Bluetooth: MGMT ver 1.23 [ 134.746563][ T6798] tipc: Can't bind to reserved service type 0 [ 134.789235][ T6799] netlink: 'syz.4.242': attribute type 142 has an invalid length. [ 135.051103][ T6808] syzkaller1: entered promiscuous mode [ 135.062868][ T6808] syzkaller1: entered allmulticast mode [ 135.567908][ T6835] lo: entered allmulticast mode [ 135.580886][ T6835] tunl0: entered allmulticast mode [ 135.586151][ T6836] xt_limit: Overflow, try lower: 271964/0 [ 135.597102][ T6835] gre0: entered allmulticast mode [ 135.609893][ T6835] gretap0: entered allmulticast mode [ 135.623833][ T6835] erspan0: entered allmulticast mode [ 135.639954][ T6835] ip_vti0: entered allmulticast mode [ 135.653192][ T6835] ip6_vti0: entered allmulticast mode [ 135.673581][ T6835] sit0: entered allmulticast mode [ 135.684935][ T6835] ip6tnl0: entered allmulticast mode [ 135.694579][ T6835] ip6gre0: entered allmulticast mode [ 135.704707][ T6835] ip6gretap0: entered allmulticast mode [ 135.714686][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.723086][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.735844][ T6835] bridge0: entered allmulticast mode [ 135.746112][ T6835] vcan0: entered allmulticast mode [ 135.754114][ T6835] bond0: entered allmulticast mode [ 135.761958][ T6835] bond_slave_0: entered allmulticast mode [ 135.769332][ T6835] bond_slave_1: entered allmulticast mode [ 135.783184][ T6835] team0: entered allmulticast mode [ 135.794121][ T6835] team_slave_0: entered allmulticast mode [ 135.801438][ T6835] team_slave_1: entered allmulticast mode [ 135.839490][ T6835] dummy0: entered allmulticast mode [ 135.863248][ T6835] nlmon0: entered allmulticast mode [ 135.883524][ T6835] caif0: entered allmulticast mode [ 135.893753][ T6835] batadv0: entered allmulticast mode [ 135.906640][ T6835] vxcan0: entered allmulticast mode [ 135.914121][ T6835] vxcan1: entered allmulticast mode [ 135.922950][ T6835] veth0: entered allmulticast mode [ 135.933021][ T6835] veth1: entered allmulticast mode [ 135.943225][ T6835] wg0: entered allmulticast mode [ 135.952384][ T6835] wg1: entered allmulticast mode [ 135.960734][ T6835] wg2: entered allmulticast mode [ 135.969503][ T6835] veth0_to_bridge: entered allmulticast mode [ 135.981503][ T6835] veth1_to_bridge: entered allmulticast mode [ 136.001360][ T6835] veth0_to_bond: entered allmulticast mode [ 136.031142][ T6835] veth1_to_bond: entered allmulticast mode [ 136.073055][ T6835] veth0_to_team: entered allmulticast mode [ 136.087947][ T6835] veth1_to_team: entered allmulticast mode [ 136.113273][ T6835] veth0_to_batadv: entered allmulticast mode [ 136.140920][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.155218][ T6835] batadv_slave_0: entered allmulticast mode [ 136.169880][ T6835] veth1_to_batadv: entered allmulticast mode [ 136.179736][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.188484][ T6835] batadv_slave_1: entered allmulticast mode [ 136.198790][ T6835] xfrm0: entered allmulticast mode [ 136.206895][ T6835] veth0_to_hsr: entered allmulticast mode [ 136.220016][ T6835] hsr_slave_0: entered allmulticast mode [ 136.227929][ T6835] veth1_to_hsr: entered allmulticast mode [ 136.236988][ T6835] hsr_slave_1: entered allmulticast mode [ 136.246604][ T6835] hsr0: entered allmulticast mode [ 136.254589][ T6835] veth1_virt_wifi: entered allmulticast mode [ 136.264896][ T6835] veth0_virt_wifi: entered allmulticast mode [ 136.277623][ T6835] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 136.286214][ T6835] veth1_vlan: entered allmulticast mode [ 136.295258][ T6835] veth0_vlan: entered allmulticast mode [ 136.311722][ T6835] vlan0: entered allmulticast mode [ 136.317755][ T6835] vlan1: entered allmulticast mode [ 136.327835][ T6835] macvlan0: entered allmulticast mode [ 136.340988][ T6835] macvlan1: entered allmulticast mode [ 136.350141][ T6835] ipvlan0: entered allmulticast mode [ 136.357059][ T6835] ipvlan1: entered allmulticast mode [ 136.363120][ T6835] veth1_macvtap: entered allmulticast mode [ 136.376329][ T6835] veth0_macvtap: entered allmulticast mode [ 136.386797][ T6835] macvtap0: entered allmulticast mode [ 136.398043][ T6835] macsec0: entered allmulticast mode [ 136.410481][ T6835] geneve0: entered allmulticast mode [ 136.419888][ T6835] geneve1: entered allmulticast mode [ 136.430245][ T6835] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 136.441623][ T6835] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 136.458444][ T6835] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 136.471202][ T6835] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 136.498946][ T6835] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 136.516107][ T6835] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 136.527363][ T6835] vti60: entered allmulticast mode [ 136.533747][ T6835] vlan2: entered allmulticast mode [ 136.543433][ T6835] veth2: entered allmulticast mode [ 136.549496][ T6835] veth3: left promiscuous mode [ 136.588193][ T6846] __nla_validate_parse: 6 callbacks suppressed [ 136.588211][ T6846] netlink: 80 bytes leftover after parsing attributes in process `syz.4.255'. [ 136.607265][ T6846] netlink: 80 bytes leftover after parsing attributes in process `syz.4.255'. [ 136.627060][ T6845] syzkaller1: entered promiscuous mode [ 136.643301][ T6845] syzkaller1: entered allmulticast mode [ 136.663888][ T6854] tc_dump_action: action bad kind [ 136.721130][ T6862] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 136.751766][ T6862] netlink: 224 bytes leftover after parsing attributes in process `syz.3.258'. [ 136.773157][ T1002] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.796711][ T6866] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 136.801024][ T1002] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.028914][ T6867] bond1 (unregistering): Released all slaves [ 137.137864][ T6881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.144693][ T6866] bond1: entered promiscuous mode [ 137.159184][ T6866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.196830][ T1002] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.218547][ T1002] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.297869][ T6885] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 137.311746][ T6885] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.265'. [ 137.334728][ T6885] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 137.347994][ T6885] netlink: 216 bytes leftover after parsing attributes in process `syz.2.265'. [ 137.714499][ T6901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 137.747887][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.270'. [ 137.967026][ T6909] bond1: entered promiscuous mode [ 137.972906][ T6909] bond1: entered allmulticast mode [ 137.985009][ T6909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.037909][ T2909] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.068052][ T2909] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.109613][ T2909] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.150819][ T2909] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.521013][ T6937] openvswitch: netlink: IPv4 frag type 56 is out of range max 2 [ 138.577651][ T6929] netlink: 64 bytes leftover after parsing attributes in process `syz.4.278'. [ 139.036631][ T6962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.285'. [ 139.073116][ T6962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.285'. [ 139.114701][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 139.156291][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.163161][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.177508][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.190615][ T6970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.240594][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.279006][ T6970] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.312075][ T6972] lo: left allmulticast mode [ 139.345986][ T6975] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 139.392096][ T6972] tunl0: left allmulticast mode [ 139.409774][ T6972] gre0: left allmulticast mode [ 139.414787][ T6972] gretap0: left allmulticast mode [ 139.438365][ T6972] ip_vti0: left allmulticast mode [ 139.449250][ T6972] ip6_vti0: left allmulticast mode [ 139.456524][ T6972] sit0: left allmulticast mode [ 139.461596][ T6972] ip6tnl0: left allmulticast mode [ 139.469057][ T6972] ip6gre0: left allmulticast mode [ 139.474375][ T6972] ip6gretap0: left allmulticast mode [ 139.482702][ T6972] bridge0: left allmulticast mode [ 139.499759][ T6972] vcan0: left allmulticast mode [ 139.505187][ T6972] bond0: left allmulticast mode [ 139.514170][ T6972] team0: left allmulticast mode [ 139.520354][ T6972] dummy0: left allmulticast mode [ 139.526136][ T6972] nlmon0: left allmulticast mode [ 139.531767][ T6972] caif0: left allmulticast mode [ 139.538917][ T6972] batadv0: left allmulticast mode [ 139.544417][ T6972] vxcan0: left allmulticast mode [ 139.552901][ T6972] vxcan1: left allmulticast mode [ 139.558509][ T6972] veth0: left allmulticast mode [ 139.563857][ T6972] veth1: left allmulticast mode [ 139.569250][ T6972] wg0: left allmulticast mode [ 139.574524][ T6972] wg1: left allmulticast mode [ 139.580003][ T6972] wg2: left allmulticast mode [ 139.585072][ T6972] veth0_to_bridge: left allmulticast mode [ 139.593431][ T6972] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.639844][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.651399][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.668478][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.695347][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.725095][ T6970] wg1 speed is unknown, defaulting to 1000 [ 139.928369][ T6991] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 140.425006][ T7019] netlink: 'syz.3.303': attribute type 12 has an invalid length. [ 140.513379][ T7020] sctp: [Deprecated]: syz.4.304 (pid 7020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.513379][ T7020] Use struct sctp_sack_info instead [ 141.253135][ T7044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.702145][ T7083] __nla_validate_parse: 6 callbacks suppressed [ 141.702166][ T7083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.316'. [ 141.977912][ T7094] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 142.008299][ T7094] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.322'. [ 142.036567][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 142.049217][ T7094] nbd: must specify a device to reconfigure [ 142.570365][ T7115] netlink: 576 bytes leftover after parsing attributes in process `syz.2.327'. [ 143.599513][ T7151] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 143.739487][ T7161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.823613][ T7166] netlink: 'syz.2.341': attribute type 21 has an invalid length. [ 143.897444][ T7171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.341'. [ 143.966748][ T7166] netlink: 156 bytes leftover after parsing attributes in process `syz.2.341'. [ 144.146653][ T7176] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 144.213281][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 144.261389][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.331226][ T7185] bridge_slave_1 (unregistering): left allmulticast mode [ 144.373632][ T7185] bridge_slave_1 (unregistering): left promiscuous mode [ 144.382269][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.418881][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.349'. [ 144.472964][ T7196] tipc: Started in network mode [ 144.522078][ T7196] tipc: Node identity 8e6d54e4e165, cluster identity 4711 [ 144.554386][ T7196] tipc: Enabled bearer , priority 0 [ 144.633742][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 144.683282][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 144.690477][ T7196] tipc: Disabling bearer [ 144.741679][ T7202] trusted_key: syz.1.350 sent an empty control message without MSG_MORE. [ 145.029820][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a24400: rx timeout, send abort [ 145.433273][ T7249] Cannot find add_set index 0 as target [ 145.530585][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a24000: rx timeout, send abort [ 145.539226][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a24400: abort rx timeout. Force session deactivation [ 145.594201][ T7254] netlink: 'syz.4.362': attribute type 21 has an invalid length. [ 145.826682][ T7266] openvswitch: netlink: Flow key attr not present in new flow. [ 145.873647][ T7266] xt_bpf: check failed: parse error [ 145.908655][ T7266] openvswitch: netlink: Flow key attr not present in new flow. [ 145.927529][ T7268] xt_bpf: check failed: parse error [ 146.038954][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028a24000: abort rx timeout. Force session deactivation [ 146.343729][ T7280] netlink: 'syz.0.371': attribute type 4 has an invalid length. [ 146.374207][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 146.550464][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 146.571958][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 146.603914][ T7287] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.679241][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 146.699931][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 146.721537][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 146.762505][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 146.779829][ T7287] hsr0 speed is unknown, defaulting to 1000 [ 148.117348][ T7339] gre1: entered promiscuous mode [ 148.133956][ T7339] gre1: entered allmulticast mode [ 148.174371][ T7349] __nla_validate_parse: 15 callbacks suppressed [ 148.174393][ T7349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.390'. [ 148.630512][ T7371] xfrm1: entered allmulticast mode [ 148.906843][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 148.918406][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 149.155717][ T7397] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 149.190328][ T7397] netlink: 'syz.3.406': attribute type 3 has an invalid length. [ 149.199227][ T7397] netlink: 224 bytes leftover after parsing attributes in process `syz.3.406'. [ 149.209860][ T7396] nbd: nbd1 already in use [ 149.215727][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 149.237477][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 149.312549][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 149.363624][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 149.886793][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 149.899103][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 150.009730][ T7444] netlink: 'syz.1.417': attribute type 64 has an invalid length. [ 150.153800][ T7446] netlink: 'syz.1.418': attribute type 4 has an invalid length. [ 150.667478][ T7468] tipc: Started in network mode [ 150.687387][ T7468] tipc: Node identity 0200000000000000ff07, cluster identity 4711 [ 151.235889][ T7491] netlink: 'syz.1.432': attribute type 10 has an invalid length. [ 151.296328][ T7491] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 151.425678][ T7495] veth0_to_bond: entered allmulticast mode [ 151.920811][ T7527] netlink: 'syz.2.441': attribute type 16 has an invalid length. [ 152.129793][ T7532] netlink: 'syz.3.444': attribute type 7 has an invalid length. [ 152.351592][ T7547] xt_time: unknown flags 0xf4 [ 152.549153][ T7552] syzkaller0: entered promiscuous mode [ 152.558082][ T7552] syzkaller0: entered allmulticast mode [ 152.811323][ T7558] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 152.832714][ T7558] IPVS: set_ctl: invalid protocol: 18 0.0.0.0:0 [ 152.980620][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.279894][ T7583] __nla_validate_parse: 33 callbacks suppressed [ 153.279918][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 153.321113][ T7577] wg1 speed is unknown, defaulting to 1000 [ 153.350199][ T7577] hsr0 speed is unknown, defaulting to 1000 [ 153.489223][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 153.604010][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 153.670701][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 153.711057][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 153.890925][ T7609] netlink: 148 bytes leftover after parsing attributes in process `syz.4.470'. [ 153.901793][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'. [ 154.132178][ T2909] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.165689][ T2909] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.205338][ T2909] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.232040][ T2909] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.489499][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.474'. [ 154.503613][ C1] vcan0: j1939_session_tx_dat: 0xffff888033791400: queue data error: -100 [ 154.593715][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 154.829641][ T7652] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 154.842759][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.482'. [ 156.321034][ T1588] IPVS: starting estimator thread 0... [ 156.447775][ T7739] IPVS: using max 24 ests per chain, 57600 per kthread [ 156.847502][ T7772] netlink: 'syz.4.514': attribute type 9 has an invalid length. [ 156.849653][ T7770] _ÐZ`Ô€@Y: entered promiscuous mode [ 156.976407][ T7775] netlink: 'syz.0.516': attribute type 30 has an invalid length. [ 157.039108][ T7775] bond2: option arp_missed_max: invalid value (0) [ 157.076473][ T7775] bond2: option arp_missed_max: allowed values 1 - 255 [ 157.112701][ T7775] bond2 (unregistering): Released all slaves [ 157.301675][ T7792] tipc: Enabling of bearer rejected, failed to enable media [ 157.378579][ T7798] netlink: 'syz.0.521': attribute type 27 has an invalid length. [ 157.426262][ T7798] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 157.574098][ T7792] syzkaller0: entered promiscuous mode [ 157.605476][ T7792] syzkaller0: entered allmulticast mode [ 157.687224][ T7810] sctp: [Deprecated]: syz.0.524 (pid 7810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.687224][ T7810] Use struct sctp_sack_info instead [ 158.064359][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.095029][ T7826] batadv_slave_1: entered promiscuous mode [ 158.101644][ T7826] batadv_slave_1: entered allmulticast mode [ 158.702397][ T7859] __nla_validate_parse: 9 callbacks suppressed [ 158.702419][ T7859] netlink: 200 bytes leftover after parsing attributes in process `syz.1.541'. [ 158.831294][ T25] IPVS: starting estimator thread 0... [ 158.862725][ T7870] netlink: 32 bytes leftover after parsing attributes in process `syz.4.543'. [ 158.881027][ T7867] tipc: Enabled bearer , priority 0 [ 158.896741][ T7871] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 158.914477][ T7867] syzkaller0: entered promiscuous mode [ 158.919871][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 158.930066][ T7867] syzkaller0: entered allmulticast mode [ 158.936556][ T7866] IPVS: using max 27 ests per chain, 64800 per kthread [ 158.981299][ T7879] netlink: 'syz.0.546': attribute type 2 has an invalid length. [ 159.053490][ T7872] bond2: (slave bridge1): making interface the new active one [ 159.064202][ T7872] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 159.074443][ T7867] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.096224][ T7875] tipc: Resetting bearer [ 159.114205][ T7878] vlan2: entered promiscuous mode [ 159.120181][ T7878] bond2: entered promiscuous mode [ 159.134266][ T7878] vlan2: entered allmulticast mode [ 159.148144][ T7878] bond2: entered allmulticast mode [ 159.159449][ T7863] tipc: Resetting bearer [ 159.197462][ T7863] tipc: Disabling bearer [ 159.342298][ T7895] netlink: 'syz.3.550': attribute type 8 has an invalid length. [ 159.574877][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.3.554'. [ 159.584434][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.3.554'. [ 160.437993][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 160.626161][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.562'. [ 160.734093][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 160.785884][ T7953] netlink: 340 bytes leftover after parsing attributes in process `syz.1.564'. [ 160.808768][ T7953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.310919][ T7984] netlink: 'syz.2.569': attribute type 12 has an invalid length. [ 161.489220][ T7987] netlink: 'syz.1.571': attribute type 21 has an invalid length. [ 161.526202][ T7987] netlink: 'syz.1.571': attribute type 22 has an invalid length. [ 161.533987][ T7987] netlink: 'syz.1.571': attribute type 23 has an invalid length. [ 161.548449][ T7987] netlink: 'syz.1.571': attribute type 25 has an invalid length. [ 161.559565][ T7987] netlink: 96 bytes leftover after parsing attributes in process `syz.1.571'. [ 161.573694][ T7991] netlink: 'syz.0.573': attribute type 2 has an invalid length. [ 161.783083][ T8000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.160901][ T8018] tipc: Enabled bearer , priority 0 [ 162.237941][ T8018] syzkaller0: entered promiscuous mode [ 162.255934][ T8018] syzkaller0: entered allmulticast mode [ 162.265305][ T8018] tipc: Resetting bearer [ 162.365282][ T8016] tipc: Resetting bearer [ 163.230894][ T5914] tipc: Node number set to 4245094400 [ 163.957278][ T8016] tipc: Disabling bearer [ 163.968696][ T8043] tipc: Enabling of bearer rejected, failed to enable media [ 164.198159][ T8057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.230079][ T8061] __nla_validate_parse: 5 callbacks suppressed [ 164.230100][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 164.262203][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.592'. [ 164.301618][ T8066] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 164.343614][ T8066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.389492][ T8057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.434292][ T8069] vlan2: entered promiscuous mode [ 164.455664][ T8069] bond5: entered promiscuous mode [ 164.474455][ T8069] vlan2: entered allmulticast mode [ 164.504636][ T8069] bond5: entered allmulticast mode [ 164.530068][ T8066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.595'. [ 164.556343][ T8057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.598080][ T8070] bond5: (slave gretap0): making interface the new active one [ 164.608918][ T8070] gretap0: entered promiscuous mode [ 164.614563][ T8070] gretap0: entered allmulticast mode [ 164.621827][ T8070] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 164.631440][ T8072] vcan0: entered allmulticast mode [ 164.668649][ T8057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.710108][ T8076] bridge0: port 3(batadv1) entered blocking state [ 164.721807][ T8076] bridge0: port 3(batadv1) entered disabled state [ 164.734592][ T8076] batadv1: entered allmulticast mode [ 164.746897][ T8076] batadv1: entered promiscuous mode [ 164.851152][ T8075] bond3 (unregistering): Released all slaves [ 164.947443][ T20] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.980473][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.137853][ T1002] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.157346][ T1002] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.193309][ T8094] netlink: 'syz.4.604': attribute type 11 has an invalid length. [ 165.206127][ T1002] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 165.213315][ T8095] netlink: 312 bytes leftover after parsing attributes in process `syz.2.603'. [ 165.216056][ T1002] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 165.347865][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 165.559342][ T8108] vlan2: entered promiscuous mode [ 165.564465][ T8108] bridge0: entered promiscuous mode [ 165.576666][ T8114] netlink: 80 bytes leftover after parsing attributes in process `syz.0.610'. [ 165.601939][ T8118] sctp: [Deprecated]: syz.1.611 (pid 8118) Use of int in max_burst socket option. [ 165.601939][ T8118] Use struct sctp_assoc_value instead [ 165.624940][ T8114] netlink: 165 bytes leftover after parsing attributes in process `syz.0.610'. [ 165.817555][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 165.883484][ T8131] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.169140][ T8133] bond6: option lp_interval: invalid value (0) [ 166.200078][ T8133] bond6: option lp_interval: allowed values 1 - 2147483647 [ 166.217764][ T8133] bond6 (unregistering): Released all slaves [ 166.222112][ T8149] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 166.298904][ T8153] tipc: Enabled bearer , priority 0 [ 166.337919][ T8153] syzkaller0: entered promiscuous mode [ 166.343450][ T8153] syzkaller0: entered allmulticast mode [ 166.415998][ T8148] tipc: Resetting bearer [ 166.461086][ T8155] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 166.505762][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 166.518005][ T8148] tipc: Disabling bearer [ 166.558849][ T8163] lo speed is unknown, defaulting to 1000 [ 166.576429][ T8166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.627'. [ 166.647036][ T8163] lo speed is unknown, defaulting to 1000 [ 166.653829][ T8163] lo speed is unknown, defaulting to 1000 [ 166.668989][ T8167] atomic_op ffff88807ddc2198 conn xmit_atomic 0000000000000000 [ 166.809812][ T8172] macvtap1: entered allmulticast mode [ 166.825670][ T8172] veth0_macvtap: entered allmulticast mode [ 166.954407][ T8182] netlink: 'syz.0.632': attribute type 12 has an invalid length. [ 166.983446][ T8180] tipc: Enabling of bearer rejected, failed to enable media [ 167.187992][ T1588] lo speed is unknown, defaulting to 1000 [ 167.204371][ T8163] infiniband syz0: set active [ 167.222618][ T8163] infiniband syz0: added lo [ 167.386513][ T8163] RDS/IB: syz0: added [ 167.391792][ T8163] smc: adding ib device syz0 with port count 1 [ 167.401196][ T8163] smc: ib device syz0 port 1 has no pnetid [ 167.411746][ T5900] lo speed is unknown, defaulting to 1000 [ 167.421981][ T8163] lo speed is unknown, defaulting to 1000 [ 167.559004][ T8209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.776380][ T8219] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 168.114592][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.122354][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.135779][ T8230] bond0: left promiscuous mode [ 168.140815][ T8230] bond_slave_0: left promiscuous mode [ 168.146823][ T8230] bond_slave_1: left promiscuous mode [ 168.196734][ T8230] bridge_slave_0: left allmulticast mode [ 168.202521][ T8230] bridge_slave_0: left promiscuous mode [ 168.209434][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.229283][ T8230] bridge_slave_1: left allmulticast mode [ 168.235092][ T8230] bridge_slave_1: left promiscuous mode [ 168.241635][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.259546][ T8230] bond0: (slave bond_slave_0): Releasing backup interface [ 168.274130][ T8230] bond0: (slave bond_slave_1): Releasing backup interface [ 168.291242][ T8230] team0: Port device team_slave_0 removed [ 168.306899][ T8230] team0: Port device team_slave_1 removed [ 168.318128][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.330909][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.344941][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.359324][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.380040][ T8230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.399839][ T8163] lo speed is unknown, defaulting to 1000 [ 168.491268][ T8240] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 168.761778][ T8252] ieee802154 phy1 wpan1: encryption failed: -22 [ 168.762081][ T8246] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.796887][ T8246] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 168.910902][ T8163] lo speed is unknown, defaulting to 1000 [ 169.363260][ T8163] lo speed is unknown, defaulting to 1000 [ 169.372219][ T8275] netlink: 'syz.4.655': attribute type 12 has an invalid length. [ 169.486380][ T8277] __nla_validate_parse: 4 callbacks suppressed [ 169.486402][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 169.567643][ T8277] veth5: entered promiscuous mode [ 169.765925][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.660'. [ 169.938980][ T8163] lo speed is unknown, defaulting to 1000 [ 170.120590][ T8305] tipc: Enabled bearer , priority 0 [ 170.168432][ T8308] syzkaller0: entered promiscuous mode [ 170.184376][ T8308] syzkaller0: entered allmulticast mode [ 170.208352][ T8305] tipc: Resetting bearer [ 170.222968][ T8304] tipc: Resetting bearer [ 170.253244][ T8304] tipc: Disabling bearer [ 170.279295][ T8310] raw_sendmsg: syz.4.667 forgot to set AF_INET. Fix it! [ 170.359301][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.667'. [ 170.480553][ T8315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.629668][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 170.664778][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 170.686038][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 170.713344][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 170.774116][ T8329] netlink: 88 bytes leftover after parsing attributes in process `syz.4.671'. [ 170.810715][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 170.826464][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 171.127705][ T8345] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 171.247529][ T8345] bond4: entered promiscuous mode [ 171.253724][ T8345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.264403][ T8337] syzkaller0: entered promiscuous mode [ 171.292636][ T8337] syzkaller0: entered allmulticast mode [ 171.369874][ T8354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.381331][ T8354] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 171.395869][ T8354] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 171.416156][ T8354] bond4: (slave wireguard0): making interface the new active one [ 171.424485][ T8354] wireguard0: entered promiscuous mode [ 171.433096][ T8354] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 172.380021][ T8415] netlink: 'syz.0.696': attribute type 21 has an invalid length. [ 172.634312][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 172.771657][ T8424] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.795861][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 172.926878][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 172.958063][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 172.977669][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 172.997527][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 173.027751][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 173.065704][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 173.094007][ T8424] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 173.259106][ T10] IPVS: starting estimator thread 0... [ 173.365628][ T8463] IPVS: using max 26 ests per chain, 62400 per kthread [ 173.381789][ T8466] netlink: 'syz.1.710': attribute type 11 has an invalid length. [ 174.041294][ T8491] bridge: RTM_NEWNEIGH with invalid ether address [ 174.369748][ T8502] bond2: (slave gretap1): making interface the new active one [ 174.384266][ T8502] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 174.569888][ T8516] __nla_validate_parse: 71 callbacks suppressed [ 174.569910][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.726'. [ 174.614727][ T8519] netlink: 48 bytes leftover after parsing attributes in process `syz.0.727'. [ 174.643886][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.726'. [ 174.672925][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.726'. [ 175.357605][ T8543] erspan0: entered allmulticast mode [ 175.550070][ T8562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.743'. [ 175.608506][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 175.678956][ T8564] geneve3: entered promiscuous mode [ 175.684338][ T8564] geneve3: entered allmulticast mode [ 175.701829][ T2999] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.742394][ T2999] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.825581][ T2999] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.834736][ T2999] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 176.332010][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.753'. [ 176.382465][ T8593] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 176.992478][ T8628] tipc: New replicast peer: 0.0.0.0 [ 177.017223][ T8628] tipc: Enabled bearer , priority 10 [ 177.027341][ T8634] netlink: 104 bytes leftover after parsing attributes in process `syz.2.760'. [ 177.172597][ T8645] netlink: 196 bytes leftover after parsing attributes in process `syz.3.763'. [ 177.234222][ T8645] netlink: 196 bytes leftover after parsing attributes in process `syz.3.763'. [ 177.661518][ T8664] validate_nla: 30 callbacks suppressed [ 177.661565][ T8664] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 177.788538][ T8667] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.811416][ T8667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.819086][ T8667] IPv6: NLM_F_CREATE should be set when creating new route [ 177.826395][ T8667] IPv6: NLM_F_CREATE should be set when creating new route [ 177.918766][ T8678] bridge_slave_1: left allmulticast mode [ 177.924487][ T8678] bridge_slave_1: left promiscuous mode [ 177.931006][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.956705][ T8678] bridge_slave_0: left allmulticast mode [ 177.965102][ T8678] bridge_slave_0: left promiscuous mode [ 177.996705][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.096055][ T8689] netlink: 'syz.0.774': attribute type 4 has an invalid length. [ 178.126370][ T1588] tipc: Node number set to 2966250665 [ 178.141014][ T8681] netlink: 'syz.0.774': attribute type 4 has an invalid length. [ 178.673131][ T8706] syzkaller1: entered promiscuous mode [ 178.680347][ T8706] syzkaller1: entered allmulticast mode [ 179.091936][ T8743] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 179.114555][ T8743] team0: Port device dummy0 added [ 179.550173][ T8762] : renamed from hsr0 [ 179.648290][ T8770] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 179.661579][ T8774] sctp: [Deprecated]: syz.2.804 (pid 8774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.661579][ T8774] Use struct sctp_sack_info instead [ 179.894870][ T8785] º: renamed from bond0 (while UP) [ 180.256352][ T8801] can: request_module (can-proto-0) failed. [ 180.415042][ T8814] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 180.440613][ T8820] __nla_validate_parse: 9 callbacks suppressed [ 180.440634][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 180.456383][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 180.469041][ T8814] bond6 (unregistering): Released all slaves [ 180.779644][ T8835] netlink: 256 bytes leftover after parsing attributes in process `syz.1.821'. [ 180.789124][ T8829] nbd0: detected capacity change from 0 to 127 [ 180.828993][ T8839] netlink: 'syz.3.822': attribute type 33 has an invalid length. [ 180.838480][ T8839] netlink: 152 bytes leftover after parsing attributes in process `syz.3.822'. [ 180.841196][ T51] block nbd0: Receive control failed (result -104) [ 180.950465][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 181.304790][ T8858] siw: device registration error -23 [ 181.455782][ T8870] netlink: zone id is out of range [ 181.464853][ T8870] netlink: zone id is out of range [ 181.473718][ T8870] netlink: zone id is out of range [ 181.479428][ T8870] netlink: zone id is out of range [ 181.487504][ T8870] netlink: zone id is out of range [ 181.492789][ T8870] netlink: zone id is out of range [ 181.502446][ T8870] netlink: zone id is out of range [ 181.509066][ T8870] netlink: zone id is out of range [ 181.514461][ T8870] netlink: zone id is out of range [ 181.521223][ T8870] netlink: zone id is out of range [ 181.908764][ T8890] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 181.919023][ T8890] netlink: 224 bytes leftover after parsing attributes in process `syz.4.833'. [ 182.927600][ T8861] syzkaller0: entered promiscuous mode [ 182.933409][ T8861] syzkaller0: entered allmulticast mode [ 182.953651][ T8862] veth1: entered allmulticast mode [ 182.959677][ T8864] netlink: 'syz.2.829': attribute type 29 has an invalid length. [ 183.131031][ T8899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.834'. [ 183.401672][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 183.499720][ T8909] batadv1: left allmulticast mode [ 183.505635][ T8909] batadv1: left promiscuous mode [ 183.526183][ T8909] bridge0: port 3(batadv1) entered disabled state [ 183.542213][ T8914] netlink: 'syz.1.841': attribute type 2 has an invalid length. [ 183.577440][ T8909] bridge_slave_1: left promiscuous mode [ 183.584622][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.634036][ T8909] bridge_slave_0: left allmulticast mode [ 183.658489][ T8909] bridge_slave_0: left promiscuous mode [ 183.674563][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.694037][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 183.840594][ T8922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.841'. [ 184.309295][ T8940] syz.2.845 (8940) used greatest stack depth: 17864 bytes left [ 184.614080][ T8961] netlink: 'syz.3.851': attribute type 10 has an invalid length. [ 184.636407][ T8968] tipc: Enabling of bearer rejected, failed to enable media [ 184.698142][ T8961] team0: Port device veth0_virt_wifi added [ 185.040128][ T8990] dvmrp1: left allmulticast mode [ 185.248278][ T8991] bond6: option lp_interval: invalid value (0) [ 185.254758][ T8991] bond6: option lp_interval: allowed values 1 - 2147483647 [ 185.267396][ T8991] bond6 (unregistering): Released all slaves [ 185.518100][ T9011] __nla_validate_parse: 1 callbacks suppressed [ 185.518122][ T9011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.865'. [ 185.568535][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 185.670280][ T9027] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 185.678152][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.688093][ T9027] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 185.696083][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.715773][ T9027] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 185.724281][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.735485][ T9027] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 185.743351][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.754316][ T9027] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 185.762548][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.772614][ T9027] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 185.790134][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.800391][ T9027] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 185.808509][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 185.818674][ T9027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.869'. [ 186.069030][ T9016] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.137104][ T9034] tipc: Enabled bearer , priority 0 [ 186.175922][ T9035] syzkaller0: entered promiscuous mode [ 186.182067][ T9035] syzkaller0: entered allmulticast mode [ 186.233525][ T9013] tipc: Resetting bearer [ 186.329068][ T9013] tipc: Disabling bearer [ 186.446087][ T9048] nbd2: detected capacity change from 0 to 127 [ 186.485629][ T51] block nbd2: Receive control failed (result -32) [ 186.511068][ T5885] block nbd2: Dead connection, failed to find a fallback [ 186.544964][ T5885] block nbd2: shutting down sockets [ 186.574710][ T5885] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.587527][ T5885] Buffer I/O error on dev nbd2, logical block 0, async page read [ 186.595955][ T5885] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.605778][ T5885] Buffer I/O error on dev nbd2, logical block 1, async page read [ 186.613715][ T5885] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.639411][ T5885] Buffer I/O error on dev nbd2, logical block 2, async page read [ 186.655924][ T5885] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.688558][ T5885] Buffer I/O error on dev nbd2, logical block 3, async page read [ 186.696990][ T5885] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.713520][ T5885] Buffer I/O error on dev nbd2, logical block 0, async page read [ 186.722129][ T5885] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.732675][ T5885] Buffer I/O error on dev nbd2, logical block 1, async page read [ 186.741129][ T5885] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.762908][ T5885] Buffer I/O error on dev nbd2, logical block 2, async page read [ 186.772136][ T5885] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.785930][ T5885] Buffer I/O error on dev nbd2, logical block 3, async page read [ 186.794024][ T5885] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.858279][ T9071] tipc: Enabled bearer , priority 0 [ 186.865512][ T5885] Buffer I/O error on dev nbd2, logical block 0, async page read [ 186.883825][ T5885] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.892309][ T9066] syzkaller0: entered promiscuous mode [ 186.900080][ T5885] Buffer I/O error on dev nbd2, logical block 1, async page read [ 186.905871][ T9066] syzkaller0: entered allmulticast mode [ 186.984631][ T5885] ldm_validate_partition_table(): Disk read failed. [ 187.008242][ T9070] tipc: Resetting bearer [ 187.014437][ T5885] Dev nbd2: unable to read RDB block 0 [ 187.050068][ T5885] nbd2: unable to read partition table [ 187.079366][ T9063] tipc: Resetting bearer [ 187.095982][ T9063] tipc: Disabling bearer [ 187.122605][ T5885] ldm_validate_partition_table(): Disk read failed. [ 187.137836][ T5885] Dev nbd2: unable to read RDB block 0 [ 187.139321][ T9081] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 187.147057][ T5885] nbd2: unable to read partition table [ 187.179204][ T9082] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 187.629133][ T9120] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 187.801787][ T9128] net_ratelimit: 331 callbacks suppressed [ 187.801809][ T9128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.846161][ T9133] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 187.855345][ T9131] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 187.856367][ T9133] syz.1.893: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 187.884232][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.1.893 Not tainted syzkaller #0 PREEMPT(full) [ 187.884262][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.884283][ T9133] Call Trace: [ 187.884293][ T9133] [ 187.884303][ T9133] dump_stack_lvl+0x189/0x250 [ 187.884339][ T9133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.884363][ T9133] ? __pfx__printk+0x10/0x10 [ 187.884386][ T9133] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.884413][ T9133] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.884441][ T9133] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 187.884470][ T9133] warn_alloc+0x214/0x310 [ 187.884500][ T9133] ? stack_depot_save_flags+0x40/0x860 [ 187.884526][ T9133] ? __pfx_warn_alloc+0x10/0x10 [ 187.884556][ T9133] ? kasan_save_track+0x4f/0x80 [ 187.884578][ T9133] ? xskq_create+0x56/0x170 [ 187.884606][ T9133] ? xsk_init_queue+0xb0/0x110 [ 187.884632][ T9133] ? xsk_setsockopt+0x4dc/0x8d0 [ 187.884657][ T9133] ? do_sock_setsockopt+0x179/0x1b0 [ 187.884693][ T9133] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 187.884720][ T9133] ? do_syscall_64+0xfa/0xfa0 [ 187.884751][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.884781][ T9133] __vmalloc_node_range_noprof+0x125/0x12f0 [ 187.884843][ T9133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.884870][ T9133] ? xskq_create+0x56/0x170 [ 187.884903][ T9133] ? __kasan_kmalloc+0x93/0xb0 [ 187.884930][ T9133] vmalloc_user_noprof+0xad/0xf0 [ 187.884955][ T9133] ? xskq_create+0xbf/0x170 [ 187.884987][ T9133] xskq_create+0xbf/0x170 [ 187.885021][ T9133] xsk_init_queue+0xb0/0x110 [ 187.885053][ T9133] xsk_setsockopt+0x4dc/0x8d0 [ 187.885085][ T9133] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.885117][ T9133] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.885145][ T9133] ? aa_sock_opt_perm+0xff/0x1b0 [ 187.885177][ T9133] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 187.885207][ T9133] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.885236][ T9133] do_sock_setsockopt+0x179/0x1b0 [ 187.885271][ T9133] __x64_sys_setsockopt+0x13f/0x1b0 [ 187.885308][ T9133] do_syscall_64+0xfa/0xfa0 [ 187.885339][ T9133] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.885376][ T9133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.885395][ T9133] ? clear_bhb_loop+0x60/0xb0 [ 187.885421][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.885442][ T9133] RIP: 0033:0x7f9043d8eec9 [ 187.885462][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.885480][ T9133] RSP: 002b:00007f9044c34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.885501][ T9133] RAX: ffffffffffffffda RBX: 00007f9043fe5fa0 RCX: 00007f9043d8eec9 [ 187.885517][ T9133] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 187.885529][ T9133] RBP: 00007f9043e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 187.885543][ T9133] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.885556][ T9133] R13: 00007f9043fe6038 R14: 00007f9043fe5fa0 R15: 00007fff90775ec8 [ 187.885592][ T9133] [ 187.926096][ T9120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.937454][ T9133] Mem-Info: [ 188.208929][ T9133] active_anon:5775 inactive_anon:0 isolated_anon:0 [ 188.208929][ T9133] active_file:2884 inactive_file:39908 isolated_file:0 [ 188.208929][ T9133] unevictable:768 dirty:87 writeback:0 [ 188.208929][ T9133] slab_reclaimable:10687 slab_unreclaimable:100306 [ 188.208929][ T9133] mapped:29250 shmem:1357 pagetables:1228 [ 188.208929][ T9133] sec_pagetables:0 bounce:0 [ 188.208929][ T9133] kernel_misc_reclaimable:0 [ 188.208929][ T9133] free:1319280 free_pcp:13622 free_cma:0 [ 188.254588][ T9133] Node 0 active_anon:23100kB inactive_anon:0kB active_file:11536kB inactive_file:159432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117000kB dirty:348kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12888kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.298214][ T9130] veth5: entered promiscuous mode [ 188.302820][ T9133] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.330497][ T9130] bond1: (slave veth5): Enslaving as an active interface with an up link [ 188.334986][ T9133] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.458125][ T9133] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 188.490040][ T9133] Node 0 DMA32 free:1374260kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22752kB inactive_anon:0kB active_file:11536kB inactive_file:157604kB unevictable:1536kB writepending:348kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:33552kB local_pcp:20440kB free_cma:0kB [ 188.565036][ T9133] lowmem_reserve[]: 0 0 1 1 1 [ 188.580824][ T9133] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 188.656132][ T9133] lowmem_reserve[]: 0 0 0 0 0 [ 188.662262][ T9133] Node 1 Normal free:3887740kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21216kB local_pcp:14912kB free_cma:0kB [ 188.728368][ T9133] lowmem_reserve[]: 0 0 0 0 0 [ 188.733187][ T9133] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.747293][ T9133] Node 0 DMA32: 347*4kB (ME) 265*8kB (M) 246*16kB (UM) 426*32kB (UME) 61*64kB (UME) 24*128kB (UME) 41*256kB (UM) 35*512kB (UME) 27*1024kB (UM) 2*2048kB (UM) 314*4096kB (M) = 1374356kB [ 188.798737][ T9133] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 188.816745][ T9160] validate_nla: 63 callbacks suppressed [ 188.816765][ T9160] netlink: 'syz.4.904': attribute type 1 has an invalid length. [ 188.855930][ T9133] Node 1 Normal: 181*4kB (UE) 49*8kB (UME) 36*16kB (UME) 73*32kB (UME) 23*64kB (UME) 4*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3887740kB [ 188.882372][ T9133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.895908][ T9133] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.919476][ T9133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.935921][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.938020][ T9133] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.972163][ T9133] 44145 total pagecache pages [ 188.977845][ T9133] 0 pages in swap cache [ 188.982646][ T9133] Free swap = 124996kB [ 188.994084][ T9133] Total swap = 124996kB [ 188.999932][ T9133] 2097051 pages RAM [ 189.003892][ T9133] 0 pages HighMem/MovableOnly [ 189.010779][ T9133] 424452 pages reserved [ 189.015051][ T9133] 0 pages cma reserved [ 189.368199][ T9189] delete_channel: no stack [ 189.461359][ T9195] netlink: 'syz.3.913': attribute type 9 has an invalid length. [ 189.570540][ T3454] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 189.570984][ T9200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.794526][ T9217] ip6t_REJECT: ECHOREPLY is not supported [ 189.831103][ T9217] netlink: 'syz.2.919': attribute type 10 has an invalid length. [ 189.946131][ T9217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 190.299074][ T9243] syzkaller0: entered promiscuous mode [ 190.304615][ T9243] syzkaller0: entered allmulticast mode [ 190.444817][ T9247] bond3: (slave bond_slave_1): Device is not our slave [ 190.470858][ T9247] bond3: option active_slave: invalid value (bond_slave_1) [ 190.507248][ T9247] bond3 (unregistering): Released all slaves [ 190.519706][ T9260] netlink: 'syz.3.930': attribute type 28 has an invalid length. [ 190.536233][ T9260] netlink: 'syz.3.930': attribute type 3 has an invalid length. [ 190.544798][ T9260] __nla_validate_parse: 73 callbacks suppressed [ 190.544818][ T9260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.930'. [ 190.549433][ T9254] netlink: 'syz.0.927': attribute type 12 has an invalid length. [ 190.570531][ T9254] netlink: 'syz.0.927': attribute type 29 has an invalid length. [ 190.579650][ T9254] netlink: 148 bytes leftover after parsing attributes in process `syz.0.927'. [ 190.595151][ T9254] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 190.722279][ T9266] vlan3: entered allmulticast mode [ 190.738103][ T9266] bridge_slave_0: entered allmulticast mode [ 190.781829][ T9273] openvswitch: netlink: Key 6 has unexpected len 90 expected 2 [ 191.035698][ T9287] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 191.053958][ T9287] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 191.067323][ T9287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.232344][ T9298] openvswitch: netlink: Message has 249 unknown bytes. [ 191.284382][ T9299] netlink: 'syz.1.941': attribute type 39 has an invalid length. [ 191.340239][ T9299] veth0_macvtap: left promiscuous mode [ 191.452150][ T9310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 191.506631][ T9313] netlink: 220 bytes leftover after parsing attributes in process `syz.0.946'. [ 191.540315][ T9312] netlink: 220 bytes leftover after parsing attributes in process `syz.0.946'. [ 191.783497][ T9318] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.952798][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 192.141120][ T9328] pim6reg: entered allmulticast mode [ 192.429918][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 192.652674][ T9360] sock: sock_timestamping_bind_phc: sock not bind to device [ 192.768428][ T9362] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.812094][ T9365] bond6: (slave veth3): Enslaving as an active interface with a down link [ 193.010480][ T9379] netlink: 500 bytes leftover after parsing attributes in process `syz.3.965'. [ 193.055684][ T9379] unsupported nla_type 58 [ 193.103480][ T9384] tipc: Enabling of bearer rejected, failed to enable media [ 193.210964][ T9384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.279313][ T9390] bond3: (slave gretap2): making interface the new active one [ 193.304451][ T9390] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 193.361865][ T9390] syz.0.968 (9390) used greatest stack depth: 16072 bytes left [ 193.413887][ T9391] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 193.882492][ T9424] validate_nla: 6 callbacks suppressed [ 193.882514][ T9424] netlink: 'syz.3.979': attribute type 9 has an invalid length. [ 193.950091][ T9424] netlink: 'syz.3.979': attribute type 6 has an invalid length. [ 194.298186][ T9452] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 194.360433][ T9452] bond6: (slave ip6gretap2): making interface the new active one [ 194.369975][ T9452] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 194.378934][ T9452] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 194.387087][ T9452] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 194.438993][ T9456] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 194.464151][ T9456] netlink: 'syz.0.990': attribute type 29 has an invalid length. [ 194.523538][ T9456] netlink: 500 bytes leftover after parsing attributes in process `syz.0.990'. [ 194.656035][ T12] syzkaller0: tun_net_xmit 76 [ 194.661473][ T12] syzkaller0: tun_net_xmit 48 [ 194.668536][ T9461] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 194.674543][ T9461] syzkaller0: Linktype set failed because interface is up [ 194.682584][ T10] syzkaller0: tun_net_xmit 76 [ 196.411503][ T9496] netlink: 'syz.2.1003': attribute type 3 has an invalid length. [ 196.688372][ T3454] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.710644][ T1002] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.746884][ T1002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.782971][ T1002] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.835296][ T9517] wg1 speed is unknown, defaulting to 1000 [ 196.869911][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 196.880326][ T9517] lo speed is unknown, defaulting to 1000 [ 196.899303][ T9519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 197.103548][ T9527] wg1 speed is unknown, defaulting to 1000 [ 197.415355][ T9527] lo speed is unknown, defaulting to 1000 [ 198.246193][ T9578] netlink: 'syz.1.1030': attribute type 11 has an invalid length. [ 199.047252][ T9603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.209482][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 199.508089][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 199.653030][ T9627] netlink: 'syz.2.1045': attribute type 7 has an invalid length. [ 199.740702][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'. [ 200.023594][ T9644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'. [ 200.037299][ T9648] syz_tun: entered allmulticast mode [ 200.059737][ T9645] syz_tun: left allmulticast mode [ 200.257793][ T9656] netlink: 'syz.3.1054': attribute type 1 has an invalid length. [ 200.349376][ T9658] bond7: option miimon: invalid value (18446744073709551585) [ 200.360150][ T9658] bond7: option miimon: allowed values 0 - 2147483647 [ 200.373846][ T9658] bond7 (unregistering): Released all slaves [ 200.395866][ T9671] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1057'. [ 200.449588][ T9656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.530469][ T9660] veth7: entered promiscuous mode [ 200.543692][ T9660] bond3: (slave veth7): Enslaving as an active interface with a down link [ 200.592025][ T9666] bond3: entered allmulticast mode [ 200.674173][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.731794][ T9684] 8021q: VLANs not supported on lo [ 200.767243][ T9684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1063'. [ 201.029791][ T9701] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1070'. [ 201.333635][ T9718] netlink: 'syz.3.1074': attribute type 4 has an invalid length. [ 201.690059][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 201.940721][ T9744] syzkaller1: entered promiscuous mode [ 201.949010][ T9744] syzkaller1: entered allmulticast mode [ 202.006606][ T9749] netlink: 'syz.2.1084': attribute type 4 has an invalid length. [ 202.056142][ T9] lo speed is unknown, defaulting to 1000 [ 202.061981][ T9] syz0: Port: 1 Link DOWN [ 202.104471][ T10] lo speed is unknown, defaulting to 1000 [ 202.229265][ T9756] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 202.247446][ T9756] __nla_validate_parse: 1 callbacks suppressed [ 202.247466][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 202.302809][ T9756] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 202.509471][ T9774] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1091'. [ 202.535883][ T9760] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 202.565836][ T9760] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 202.626889][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 202.690136][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 202.733270][ T9780] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1092'. [ 202.802667][ T9780] 8021q: VLANs not supported on ip6_vti0 [ 203.015584][ T9800] : renamed from bridge_slave_0 (while UP) [ 203.051305][ T9800] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1097'. [ 203.062938][ T9803] sctp: [Deprecated]: syz.2.1098 (pid 9803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.062938][ T9803] Use struct sctp_sack_info instead [ 203.092367][ T9809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1099'. [ 203.322141][ T9813] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 203.580223][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 203.852295][ T9846] SET target dimension over the limit! [ 204.065819][ T9853] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1112'. [ 204.266874][ T9867] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1118'. [ 204.520688][ T9878] netlink: 'syz.4.1116': attribute type 2 has an invalid length. [ 204.591465][ T9883] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 204.608060][ T9883] tipc: Disabling bearer [ 204.742196][ T9886] netlink: 'syz.0.1126': attribute type 11 has an invalid length. [ 204.779209][ T9886] netlink: 'syz.0.1126': attribute type 11 has an invalid length. [ 204.858589][ T9893] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 204.913292][ T9893] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 205.155338][ T20] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.201778][ T20] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.424051][ T9925] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 205.657614][ T9937] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 205.710019][ T9937] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 206.783805][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.797006][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.808493][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.816288][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.873548][ T9959] netlink: ct family unspecified [ 206.883191][ T9959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.314490][ T9979] __nla_validate_parse: 15 callbacks suppressed [ 207.314511][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'. [ 207.438896][ T9979] netem: change failed [ 207.478403][ T9986] lo: entered allmulticast mode [ 207.488129][ T9986] lo: left allmulticast mode [ 207.504131][ T9988] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 207.535161][ T9989] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1159'. [ 207.558305][ T9988] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 207.742657][ T9990] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1161'. [ 208.179275][T10021] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 208.258555][T10021] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.306113][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 208.320156][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 208.332805][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 208.619864][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1175'. [ 208.752240][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 208.989246][T10058] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1178'. [ 208.996740][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'. [ 209.314772][T10070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.403870][T10070] team0: Device vti0 is of different type [ 209.931939][T10109] netlink: 'syz.1.1188': attribute type 13 has an invalid length. [ 210.010868][T10104] syz.2.1189: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 210.061238][T10104] CPU: 0 UID: 0 PID: 10104 Comm: syz.2.1189 Not tainted syzkaller #0 PREEMPT(full) [ 210.061268][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.061281][T10104] Call Trace: [ 210.061289][T10104] [ 210.061299][T10104] dump_stack_lvl+0x189/0x250 [ 210.061329][T10104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.061352][T10104] ? __pfx__printk+0x10/0x10 [ 210.061374][T10104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.061400][T10104] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.061426][T10104] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 210.061468][T10104] warn_alloc+0x214/0x310 [ 210.061496][T10104] ? stack_depot_save_flags+0x40/0x860 [ 210.061520][T10104] ? __pfx_warn_alloc+0x10/0x10 [ 210.061549][T10104] ? kasan_save_track+0x4f/0x80 [ 210.061570][T10104] ? xskq_create+0x56/0x170 [ 210.061599][T10104] ? xsk_init_queue+0xb0/0x110 [ 210.061625][T10104] ? xsk_setsockopt+0x4dc/0x8d0 [ 210.061649][T10104] ? do_sock_setsockopt+0x179/0x1b0 [ 210.061676][T10104] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 210.061703][T10104] ? do_syscall_64+0xfa/0xfa0 [ 210.061733][T10104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.061764][T10104] __vmalloc_node_range_noprof+0x125/0x12f0 [ 210.061824][T10104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 210.061850][T10104] ? xskq_create+0x56/0x170 [ 210.061882][T10104] ? __kasan_kmalloc+0x93/0xb0 [ 210.061908][T10104] vmalloc_user_noprof+0xad/0xf0 [ 210.061933][T10104] ? xskq_create+0xbf/0x170 [ 210.061963][T10104] xskq_create+0xbf/0x170 [ 210.061996][T10104] xsk_init_queue+0xb0/0x110 [ 210.062028][T10104] xsk_setsockopt+0x4dc/0x8d0 [ 210.062059][T10104] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.062090][T10104] ? __pfx_aa_sk_perm+0x10/0x10 [ 210.062118][T10104] ? aa_sock_opt_perm+0xff/0x1b0 [ 210.062149][T10104] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 210.062178][T10104] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.062207][T10104] do_sock_setsockopt+0x179/0x1b0 [ 210.062242][T10104] __x64_sys_setsockopt+0x13f/0x1b0 [ 210.062278][T10104] do_syscall_64+0xfa/0xfa0 [ 210.062311][T10104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.062330][T10104] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 210.062351][T10104] ? clear_bhb_loop+0x60/0xb0 [ 210.062377][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.062397][T10104] RIP: 0033:0x7efed2f8eec9 [ 210.062415][T10104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.062441][T10104] RSP: 002b:00007efed3e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.062464][T10104] RAX: ffffffffffffffda RBX: 00007efed31e5fa0 RCX: 00007efed2f8eec9 [ 210.062479][T10104] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000010 [ 210.062491][T10104] RBP: 00007efed3011f91 R08: 0000000000000004 R09: 0000000000000000 [ 210.062504][T10104] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.062516][T10104] R13: 00007efed31e6038 R14: 00007efed31e5fa0 R15: 00007ffe0834c078 [ 210.062554][T10104] [ 210.064877][T10104] Mem-Info: [ 210.395414][T10104] active_anon:5911 inactive_anon:0 isolated_anon:0 [ 210.395414][T10104] active_file:3012 inactive_file:39916 isolated_file:0 [ 210.395414][T10104] unevictable:768 dirty:45 writeback:0 [ 210.395414][T10104] slab_reclaimable:10915 slab_unreclaimable:104654 [ 210.395414][T10104] mapped:30344 shmem:1360 pagetables:1363 [ 210.395414][T10104] sec_pagetables:0 bounce:0 [ 210.395414][T10104] kernel_misc_reclaimable:0 [ 210.395414][T10104] free:1312794 free_pcp:14899 free_cma:0 [ 210.475576][T10104] Node 0 active_anon:23644kB inactive_anon:0kB active_file:12048kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121376kB dirty:180kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13404kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.541351][T10104] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.574261][T10104] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.612781][T10104] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 210.619080][T10104] Node 0 DMA32 free:1347104kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23596kB inactive_anon:0kB active_file:12048kB inactive_file:157636kB unevictable:1536kB writepending:180kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:39364kB local_pcp:18420kB free_cma:0kB [ 210.661854][T10104] lowmem_reserve[]: 0 0 1 1 1 [ 210.668282][T10104] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 210.699371][T10104] lowmem_reserve[]: 0 0 0 0 0 [ 210.704348][T10104] Node 1 Normal free:3887996kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20992kB local_pcp:6080kB free_cma:0kB [ 210.736997][T10104] lowmem_reserve[]: 0 0 0 0 0 [ 210.741956][T10104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.761631][T10104] Node 0 DMA32: 534*4kB (UME) 445*8kB (UM) 223*16kB (UME) 130*32kB (UM) 62*64kB (UME) 8*128kB (U) 42*256kB (UM) 33*512kB (UM) 26*1024kB (UM) 2*2048kB (U) 310*4096kB (M) = 1346544kB [ 210.785959][T10104] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 210.798797][T10104] Node 1 Normal: 181*4kB (UE) 49*8kB (UME) 36*16kB (UME) 79*32kB (UME) 24*64kB (UME) 4*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3887996kB [ 210.821909][T10104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.832394][T10104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.842505][T10104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.852780][T10104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.862887][T10104] 44284 total pagecache pages [ 210.868467][T10104] 0 pages in swap cache [ 210.877709][T10104] Free swap = 124996kB [ 210.882079][T10104] Total swap = 124996kB [ 210.887199][T10104] 2097051 pages RAM [ 210.891186][T10104] 0 pages HighMem/MovableOnly [ 210.896352][T10104] 424452 pages reserved [ 210.900798][T10104] 0 pages cma reserved [ 210.907652][ T55] block nbd0: Possible stuck request ffff88802539e000: control (read@0,1024B). Runtime 30 seconds [ 210.920394][ T55] block nbd0: Possible stuck request ffff88802539e1c0: control (read@1024,1024B). Runtime 30 seconds [ 210.931607][ T55] block nbd0: Possible stuck request ffff88802539e380: control (read@2048,1024B). Runtime 30 seconds [ 210.942577][ T55] block nbd0: Possible stuck request ffff88802539e540: control (read@3072,1024B). Runtime 30 seconds [ 211.041462][T10109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.052993][T10109] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.070590][T10109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.142658][T10109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.213826][T10109] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 211.238091][T10109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.261391][T10109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.276338][T10109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.301717][T10109] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.320623][T10109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.425601][ T3454] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.443321][ T3454] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.464625][ T3454] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.518647][ T3454] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.562943][ T2909] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.586023][ T25] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 211.907005][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.307756][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.329235][T10184] netlink: 'syz.4.1208': attribute type 1 has an invalid length. [ 212.493440][T10196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.493440][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.523658][ T25] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.542829][T10184] bond4: entered promiscuous mode [ 212.552545][T10184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.562269][T10189] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 212.896961][T10212] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 212.899850][T10214] tc_dump_action: action bad kind [ 212.990264][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.035809][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.169966][T10226] __nla_validate_parse: 4 callbacks suppressed [ 213.169986][T10226] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1220'. [ 213.211679][T10226] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1220'. [ 213.282522][T10226] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1220'. [ 213.365566][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805870c000: rx timeout, send abort [ 213.382611][T10239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1223'. [ 213.418915][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 213.457057][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.526488][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.851861][T10261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1229'. [ 213.865797][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fa13c00: rx timeout, send abort [ 213.874178][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805870c000: abort rx timeout. Force session deactivation [ 214.122423][T10264] netlink: 'syz.3.1231': attribute type 64 has an invalid length. [ 214.135610][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1231'. [ 214.157184][T10264] netlink: 'syz.3.1231': attribute type 64 has an invalid length. [ 214.195991][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1231'. [ 214.374173][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802fa13c00: abort rx timeout. Force session deactivation [ 214.685877][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 214.878699][T10296] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 214.992969][T10296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.063289][T10305] veth7: entered promiscuous mode [ 215.149844][T10305] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 215.174105][T10305] bond6 (unregistering): Released all slaves [ 215.755087][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 215.769039][T10326] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 215.836352][T10331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1252'. [ 216.727063][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.763572][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.771656][T10373] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 216.791934][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.857093][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.873262][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.883201][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.892311][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.917900][ T3454] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 216.917920][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 216.934564][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.976530][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 216.999398][T10374] netlink: 'syz.3.1266': attribute type 64 has an invalid length. [ 217.386215][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 217.496702][T10409] Cannot find del_set index 2 as target [ 218.056060][ T2999] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 218.316498][T10450] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 218.331210][T10450] bond4 (unregistering): Released all slaves [ 218.417603][T10460] __nla_validate_parse: 68 callbacks suppressed [ 218.417624][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 218.452375][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 218.847729][T10485] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1298'. [ 218.861259][T10486] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1297'. [ 219.165595][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 219.436466][T10497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.486252][T10497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.521912][T10514] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1308'. [ 219.655699][T10497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.676273][T10497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.815622][T10497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.836016][T10497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.073275][T10497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.084674][T10497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.188692][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1314'. [ 220.199234][T10537] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1316'. [ 220.220146][T10535] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 220.276066][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 220.477230][ T2909] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.495548][ T2909] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.605682][ T2909] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.618573][ T2909] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.674389][ T2909] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.723110][ T2909] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.771866][ T2909] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.792667][ T2909] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.302121][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1334'. [ 221.375669][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 221.942133][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 222.197022][T10632] nbd: must specify a size in bytes for the device [ 222.217690][T10633] openvswitch: netlink: IP tunnel dst address not specified [ 222.505834][ T1002] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 223.618768][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 223.976169][T10711] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 224.141325][T10719] bridge0: port 2(batadv2) entered blocking state [ 224.191978][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 224.237406][T10729] validate_nla: 64 callbacks suppressed [ 224.237427][T10729] netlink: 'syz.1.1374': attribute type 16 has an invalid length. [ 224.245453][T10719] bridge0: port 2(batadv2) entered disabled state [ 224.262140][T10719] batadv2: entered allmulticast mode [ 224.272005][T10719] batadv2: entered promiscuous mode [ 224.304227][T10729] netlink: 'syz.1.1374': attribute type 17 has an invalid length. [ 224.328923][T10737] netlink: 'syz.2.1375': attribute type 9 has an invalid length. [ 224.388321][T10729] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.500285][T10729] vlan2: left promiscuous mode [ 224.507716][T10729] bond2: left promiscuous mode [ 224.512810][T10729] vlan2: left allmulticast mode [ 224.522899][T10729] bond2: left allmulticast mode [ 224.532783][T10729] veth5: left promiscuous mode [ 224.539644][T10729] bond4: left promiscuous mode [ 224.544678][T10729] wireguard0: left promiscuous mode [ 224.585855][ T25] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 224.616110][ T20] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 224.625597][ T20] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 224.685780][ T5914] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 224.708055][T10742] tipc: Enabled bearer , priority 0 [ 224.716315][T10742] syzkaller0: entered promiscuous mode [ 224.721833][T10742] syzkaller0: entered allmulticast mode [ 224.745719][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 224.770165][T10742] tipc: Resetting bearer [ 224.789892][T10741] tipc: Resetting bearer [ 224.807335][T10741] tipc: Disabling bearer [ 224.985811][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.142549][ T59] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 225.178616][ T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 225.195764][ T59] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 225.226640][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.311771][T10757] dvmrp2: entered allmulticast mode [ 225.364802][T10763] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1385'. [ 225.390155][T10766] syzkaller0: entered promiscuous mode [ 225.405650][T10766] syzkaller0: entered allmulticast mode [ 225.415255][T10759] tipc: Enabled bearer , priority 0 [ 225.542628][T10770] nbd: nbd0 already in use [ 225.548723][T10759] tipc: Resetting bearer [ 225.558467][T10770] block nbd0: NBD_DISCONNECT [ 225.564235][T10770] block nbd0: Send disconnect failed -32 [ 225.572116][T10770] block nbd0: shutting down sockets [ 225.599524][ C1] blk_print_req_error: 138 callbacks suppressed [ 225.599548][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.615502][ C1] buffer_io_error: 138 callbacks suppressed [ 225.615519][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.636601][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.645781][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.653954][T10771] block nbd0: NBD_DISCONNECT [ 225.658798][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.658843][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 225.658956][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.658982][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 225.696092][T10759] tipc: Disabling bearer [ 225.704602][ T6295] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.716929][T10771] block nbd0: Send disconnect failed -32 [ 225.724337][ T6295] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.737190][ T6295] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.749372][ T6295] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.758927][ T6295] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.805771][ T6295] Buffer I/O error on dev nbd0, logical block 2, async page read [ 225.838133][ T55] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.858049][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 225.868814][ T6295] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.879116][ T6295] Buffer I/O error on dev nbd0, logical block 0, async page read [ 225.887657][ T6295] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.898238][ T6295] Buffer I/O error on dev nbd0, logical block 1, async page read [ 225.909208][ T6295] ldm_validate_partition_table(): Disk read failed. [ 225.918348][ T6295] Dev nbd0: unable to read RDB block 0 [ 225.926484][ T6295] nbd0: unable to read partition table [ 225.939707][ T6295] ldm_validate_partition_table(): Disk read failed. [ 225.950134][ T6295] Dev nbd0: unable to read RDB block 0 [ 225.958423][ T6295] nbd0: unable to read partition table [ 226.117729][T10794] netlink: 'syz.1.1395': attribute type 2 has an invalid length. [ 226.161910][T10794] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1395'. [ 226.211429][T10801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1397'. [ 226.346013][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 226.540836][T10815] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 226.618393][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 226.740853][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'. [ 226.850634][T10828] netlink: 'syz.4.1408': attribute type 29 has an invalid length. [ 226.879257][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 226.900288][T10827] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1406'. [ 227.004356][T10842] netlink: 'syz.3.1410': attribute type 11 has an invalid length. [ 227.154352][T10847] netlink: 'syz.1.1411': attribute type 21 has an invalid length. [ 227.202249][T10856] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1411'. [ 227.443191][T10866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.450519][T10866] IPv6: NLM_F_CREATE should be set when creating new route [ 227.457823][T10866] IPv6: NLM_F_CREATE should be set when creating new route [ 227.457904][T10868] tipc: Failed to remove unknown binding: 66,1,1/178295196:3486540814/3486540816 [ 227.531573][T10868] tipc: Failed to remove unknown binding: 66,1,1/178295196:3486540814/3486540816 [ 227.649541][T10861] syzkaller0: entered promiscuous mode [ 227.655218][T10861] syzkaller0: entered allmulticast mode [ 228.097743][ T20] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 228.097765][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 228.348345][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 228.348887][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 228.357722][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 228.840127][T10906] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 229.145676][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 229.247232][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 229.385994][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 230.131379][T10957] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 230.202194][T10959] __nla_validate_parse: 3 callbacks suppressed [ 230.202215][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1440'. [ 230.394049][ T1002] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 230.652146][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'. [ 231.149312][T10991] wg1: entered promiscuous mode [ 231.154438][T10991] wg1: entered allmulticast mode [ 231.401172][T11002] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 231.445331][T11002] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 231.505779][T11007] tipc: Enabled bearer , priority 0 [ 231.555614][ T1002] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 231.607568][ T31] audit: type=1800 audit(1759950900.219:2): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1452" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1572 res=0 errno=0 [ 231.667824][T11007] tipc: Disabling bearer [ 231.847222][T11033] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 231.897864][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 231.916836][ T5194] udevd[5194]: worker [5885] terminated by signal 33 (Unknown signal 33) [ 231.935731][ T5194] udevd[5194]: worker [5885] failed while handling '/devices/virtual/block/loop4' [ 231.950740][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'. [ 231.985157][T11033] bond8: entered promiscuous mode [ 232.012783][T11033] 8021q: adding VLAN 0 to HW filter on device bond8 [ 232.078753][T11040] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.091506][T11040] bond8: (slave bond9): making interface the new active one [ 232.099443][T11040] bond9: entered promiscuous mode [ 232.106564][T11040] bond8: (slave bond9): Enslaving as an active interface with an up link [ 232.141866][T11049] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1459'. [ 232.529373][T11069] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 232.686017][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 233.105077][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 233.699053][T11124] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 233.737125][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1479'. [ 233.805576][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 233.814227][T11130] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 234.410121][T11160] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 234.428481][T11160] netlink: 'syz.4.1487': attribute type 10 has an invalid length. [ 234.467344][T11155] syzkaller0: entered promiscuous mode [ 234.474146][T11155] syzkaller0: entered allmulticast mode [ 234.480474][T11163] nft_compat: unsupported protocol 0 [ 234.487250][T11157] netlink: 'syz.1.1488': attribute type 29 has an invalid length. [ 234.509392][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 234.861916][T11177] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1491'. [ 234.915786][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 235.047453][T11182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1492'. [ 235.510032][T11197] netlink: 'syz.3.1496': attribute type 12 has an invalid length. [ 236.026371][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 236.357475][T11161] netlink: 'syz.1.1488': attribute type 29 has an invalid length. [ 236.366383][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 236.397390][T11197] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 236.547601][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 236.757739][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 236.831027][T11219] bond0: entered promiscuous mode [ 236.837330][T11219] bond_slave_0: entered promiscuous mode [ 236.843221][T11219] bond_slave_1: entered promiscuous mode [ 237.145631][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 237.153287][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 237.260644][T11239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1512'. [ 237.363191][T11249] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 237.394897][T11252] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 237.447195][T11251] tap0: tun_chr_ioctl cmd 1074025677 [ 237.455208][T11251] tap0: linktype set to 65534 [ 237.731316][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 237.751238][T11273] netlink: 'syz.1.1520': attribute type 11 has an invalid length. [ 237.804506][T11273] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1520'. [ 238.093450][T11298] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1527'. [ 238.205708][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 238.295784][ T44] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 238.433353][T11312] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 238.448574][T11312] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 238.461143][T11312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.514505][T11315] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1531'. [ 238.869054][T11329] macvtap1: entered promiscuous mode [ 238.902537][T11329] vlan0: entered promiscuous mode [ 238.929328][T11329] macvtap1: entered allmulticast mode [ 239.070913][T11338] macvtap2: entered promiscuous mode [ 239.089067][T11338] macvtap2: entered allmulticast mode [ 239.089249][T11351] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1540'. [ 239.170685][T11348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.189041][T11348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.231663][T11347] netlink: 'syz.2.1540': attribute type 12 has an invalid length. [ 239.254793][T11353] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 239.272907][T11353] batman_adv: batadv0: Adding interface: team0 [ 239.279505][T11353] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.342989][T11353] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 239.434173][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 239.494799][T11348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.506552][T11348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.703075][T11348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.726994][T11378] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 239.731719][T11348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.862975][T11348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.885693][T11348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.927716][T11383] sch_fq: defrate 1791 ignored. [ 239.948916][T11385] netlink: 'syz.2.1552': attribute type 2 has an invalid length. [ 240.121661][ T1002] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.141149][ T1002] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.146505][T11395] netlink: 'syz.2.1555': attribute type 4 has an invalid length. [ 240.165734][T11392] veth0_to_batadv: mtu less than device minimum [ 240.189925][ T20] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.198481][ T20] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.297207][ T20] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.312455][ T20] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.386602][ T1002] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.400434][ T1002] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.547161][T11405] syzkaller1: entered promiscuous mode [ 240.552698][T11405] syzkaller1: entered allmulticast mode [ 240.570062][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 240.753603][T11418] vcan0 (unregistering): left allmulticast mode [ 241.238980][T11443] bond0: (slave bond_slave_1): Releasing backup interface [ 241.248046][T11446] block nbd0: Unsupported socket: should be TCP or UNIX. [ 241.715550][ T1002] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 241.829949][T11475] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 241.844959][T11473] netlink: 'syz.4.1582': attribute type 26 has an invalid length. [ 242.131129][T11495] __nla_validate_parse: 15 callbacks suppressed [ 242.131152][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'. [ 242.207511][T11495] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 242.217163][T11495] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 242.276105][ T3454] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.336363][ T3454] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.344621][ T3454] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.387608][ T3454] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.588272][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 242.672126][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1593'. [ 242.758268][T11525] netlink: 'syz.3.1596': attribute type 4 has an invalid length. [ 242.826351][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 243.184583][T11525] netlink: 'syz.3.1596': attribute type 4 has an invalid length. [ 243.326432][T11543] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.516457][T11543] veth9: entered promiscuous mode [ 243.531545][T11543] bond7: (slave veth9): Enslaving as an active interface with a down link [ 243.546114][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 243.843509][T11560] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 243.864983][T11560] bond5 (unregistering): Released all slaves [ 243.986229][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 244.159466][T11578] lo: entered allmulticast mode [ 244.198292][T11578] lo: left allmulticast mode [ 244.455212][T11600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1619'. [ 244.671055][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 244.723573][T11614] xfrm2: entered promiscuous mode [ 244.730598][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 244.744795][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1623'. [ 244.772494][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 244.793492][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 244.795504][T11614] xfrm2: entered allmulticast mode [ 244.808271][T11620] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1626'. [ 244.927424][T11625] validate_nla: 1 callbacks suppressed [ 244.927444][T11625] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 244.955982][T11625] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1629'. [ 244.975927][T11625] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 245.086146][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 245.353788][T11648] ip6gre1: entered allmulticast mode [ 245.518872][T11658] netlink: 'syz.3.1640': attribute type 7 has an invalid length. [ 245.551899][T11658] netlink: 'syz.3.1640': attribute type 7 has an invalid length. [ 245.585279][T11660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.811197][T11663] netlink: 'syz.0.1642': attribute type 1 has an invalid length. [ 246.189510][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 246.218507][T11669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.337928][ T1002] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 247.345981][T11740] __nla_validate_parse: 3 callbacks suppressed [ 247.345998][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 247.392673][T11744] netlink: 'syz.0.1663': attribute type 21 has an invalid length. [ 247.415938][T11744] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1663'. [ 247.449898][T11744] netem: change failed [ 247.497650][T11747] netlink: 'syz.1.1664': attribute type 9 has an invalid length. [ 247.548834][T11747] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1664'. [ 247.618794][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1665'. [ 247.858392][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 247.917121][T11770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.183620][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 248.203413][T11785] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 248.327012][T11791] netlink: 'syz.3.1681': attribute type 6 has an invalid length. [ 248.357682][T11785] veth5: entered promiscuous mode [ 248.465794][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 248.598809][T11804] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.636056][T11804] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.798314][T11804] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.815613][T11804] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.952512][T11817] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 248.964769][T11817] bond7 (unregistering): Released all slaves [ 248.990585][T11804] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.994126][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 249.000850][T11804] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.051238][T11822] geneve2: entered promiscuous mode [ 249.058233][T11822] geneve2: entered allmulticast mode [ 249.094601][T11804] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.117764][T11804] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.155663][ T3454] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.183927][ T3454] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.214140][T11829] netlink: ct family unspecified [ 249.219864][T11829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.243754][ T3454] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.258957][ T3454] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.380158][T11836] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1696'. [ 249.398581][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.412473][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.463729][T11841] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1698'. [ 249.476932][T11841] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1698'. [ 249.519028][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.542563][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.594669][ T44] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.603172][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 249.622386][ T44] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.679951][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.712655][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.763029][T11848] syzkaller0: entered promiscuous mode [ 249.770136][T11848] syzkaller0: entered allmulticast mode [ 249.787657][T11848] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 249.972933][T11861] tipc: Enabled bearer , priority 0 [ 249.984668][T11861] syzkaller0: entered promiscuous mode [ 249.998993][T11861] syzkaller0: entered allmulticast mode [ 250.081495][T11873] tipc: Resetting bearer [ 250.101818][T11860] tipc: Resetting bearer [ 250.134014][T11860] tipc: Disabling bearer [ 250.656281][T11893] netlink: 'syz.4.1714': attribute type 11 has an invalid length. [ 250.664160][T11893] netlink: 'syz.4.1714': attribute type 11 has an invalid length. [ 250.736805][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.256275][T11913] vlan0 (unregistering): left promiscuous mode [ 251.311231][T11908] tipc: Enabled bearer , priority 0 [ 251.334409][T11911] syzkaller0: entered promiscuous mode [ 251.341597][T11911] syzkaller0: entered allmulticast mode [ 251.377451][T11922] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 251.398484][T11922] bond7 (unregistering): Released all slaves [ 251.518396][T11908] tipc: Resetting bearer [ 251.538645][T11907] tipc: Resetting bearer [ 251.557498][ T5826] Bluetooth: hci4: link tx timeout [ 251.563345][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.614525][T11907] tipc: Disabling bearer [ 251.640814][T11940] sctp: [Deprecated]: syz.0.1726 (pid 11940) Use of int in maxseg socket option. [ 251.640814][T11940] Use struct sctp_assoc_value instead [ 251.846056][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 251.935062][T11954] netlink: 'syz.4.1732': attribute type 5 has an invalid length. [ 251.942485][T11949] bond6: Invalid ad_actor_system MAC address. [ 251.985548][T11949] bond6: option ad_actor_system: invalid value (1) [ 252.007174][T11949] bond6 (unregistering): Released all slaves [ 252.018637][T11958] IPVS: length: 23 != 8 [ 252.142918][T11956] bond8 (unregistering): Released all slaves [ 252.378401][T11965] syzkaller1: entered promiscuous mode [ 252.384069][T11965] syzkaller1: entered allmulticast mode [ 252.505654][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 252.580136][T11984] __nla_validate_parse: 12 callbacks suppressed [ 252.580166][T11984] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1739'. [ 252.628831][T11994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.958004][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 253.144784][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 253.153986][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.204945][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 253.554965][T12042] netlink: 'syz.1.1753': attribute type 27 has an invalid length. [ 253.576004][T12042] netlink: 'syz.1.1753': attribute type 4 has an invalid length. [ 253.591816][T12042] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1753'. [ 253.626063][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 253.688589][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 253.709762][T12045] vxcan3: entered promiscuous mode [ 253.764847][T12045] vxcan3: entered allmulticast mode [ 253.792727][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 253.950940][T12059] IPVS: Unknown mcast interface: bridge_slave_1 [ 254.051548][T12064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1760'. [ 254.095985][ T1002] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 254.715931][T12099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1772'. [ 254.725008][T12099] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1772'. [ 254.793547][T12103] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.1774'. [ 254.836771][T12103] openvswitch: netlink: Flow key attr not present in new flow. [ 254.941915][T12108] xt_policy: too many policy elements [ 254.972531][T12115] Cannot find set identified by id 3 to match [ 255.086747][T12121] openvswitch: netlink: IPv6 tunnel dst address is zero [ 255.206054][ T44] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 255.648481][T12145] netlink: 'syz.4.1785': attribute type 58 has an invalid length. [ 255.901222][T12160] netlink: 'syz.3.1790': attribute type 33 has an invalid length. [ 255.998071][T12160] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 256.031155][T12160] bond6 (unregistering): Released all slaves [ 256.111516][T12169] delete_channel: no stack [ 256.326016][ T59] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 257.262021][T12227] syzkaller1: entered promiscuous mode [ 257.273285][T12227] syzkaller1: entered allmulticast mode [ 257.304441][T12233] veth0: entered promiscuous mode [ 257.335731][T12231] team0: Device vti0 is of different type [ 257.448272][ T3454] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! Connection to 10.128.0.60 closed by remote host. [ 258.558682][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 258.602109][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.619265][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.695880][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.706111][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.765019][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.776262][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.831497][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.841468][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.934113][ T12] bridge_slave_1: left allmulticast mode [ 258.940145][ T12] bridge_slave_1: left promiscuous mode [ 258.947769][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.959380][ T12] bridge_slave_0: left allmulticast mode [ 258.965037][ T12] bridge_slave_0: left promiscuous mode [ 258.970897][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.451069][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.464322][ T12] bond_slave_0: left promiscuous mode [ 259.472758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.483476][ T12] bond_slave_1: left promiscuous mode [ 259.490153][ T12] bond0 (unregistering): Released all slaves [ 259.574822][ T12] bond1 (unregistering): (slave veth5): Releasing backup interface [ 259.584978][ T12] bond1 (unregistering): Released all slaves [ 259.599328][ T12] bond2 (unregistering): Released all slaves [ 259.678842][ T44] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 259.693637][ T12] bond3 (unregistering): Released all slaves [ 259.773699][ T12] bond4 (unregistering): Released all slaves [ 259.853716][ T12] bond5 (unregistering): Released all slaves [ 259.868607][ T12] bond6 (unregistering): Released all slaves [ 259.951260][ T12] bond7 (unregistering): (slave veth9): Releasing active interface [ 259.960988][ T12] bond7 (unregistering): Released all slaves [ 260.068038][ T12] tipc: Left network mode [ 260.370786][ T12] hsr_slave_0: left promiscuous mode [ 260.383512][ T12] hsr_slave_1: left promiscuous mode [ 260.400846][ T12] veth0_macvtap: left allmulticast mode [ 260.406970][ T12] veth1_macvtap: left promiscuous mode [ 260.412662][ T12] veth0_macvtap: left promiscuous mode [ 260.419317][ T12] veth1_vlan: left promiscuous mode [ 260.424810][ T12] veth0_vlan: left promiscuous mode [ 260.795629][ T2909] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.903433][ T12] team0 (unregistering): Port device team_slave_1 removed [ 260.939057][ T12] team0 (unregistering): Port device team_slave_0 removed [ 261.490638][ T12] IPVS: stop unused estimator thread 0... [ 261.670360][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.680964][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.743639][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.753494][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.812964][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.822925][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.871381][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.881219][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.896524][ T44] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 261.987565][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.997616][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.063036][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.073705][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.121693][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.131617][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.172311][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.182237][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.285123][ T12] batadv2: left allmulticast mode [ 262.290406][ T12] batadv2: left promiscuous mode [ 262.296114][ T12] bridge0: port 2(batadv2) entered disabled state [ 262.304569][ T12] bridge_slave_0: left allmulticast mode [ 262.310671][ T12] bridge_slave_0: left promiscuous mode [ 262.316548][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.597523][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 262.618406][ T12] bond3 (unregistering): (slave gretap2): Releasing active interface [ 262.660662][ T12] dvmrp2 (unregistering): left allmulticast mode [ 262.839394][ T12] º (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.850541][ T12] º (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.862266][ T12] º (unregistering): (slave wlan1): Releasing backup interface [ 262.870902][ T12] º (unregistering): Released all slaves [ 262.956514][ T12] bond1 (unregistering): Released all slaves [ 262.970786][ T12] bond2 (unregistering): Released all slaves [ 262.997813][ T12] bond0 (unregistering): Released all slaves [ 263.085176][ T12] bond3 (unregistering): Released all slaves [ 263.099375][ T12] bond4 (unregistering): Released all slaves [ 263.113314][ T12] bond5 (unregistering): Released all slaves [ 263.184180][ T12] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 263.888799][ T12] bond0 (unregistering): Released all slaves [ 263.973113][ T12] bond1 (unregistering): Released all slaves [ 264.066618][ T12] bond2 (unregistering): Released all slaves [ 264.151211][ T12] bond3 (unregistering): Released all slaves [ 264.236128][ T12] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 264.246009][ T12] bond4 (unregistering): Released all slaves [ 264.330117][ T12] bond5 (unregistering): Released all slaves [ 264.414749][ T12] bond6 (unregistering): Released all slaves [ 264.618652][ T12] tipc: Left network mode [ 264.637718][ T12] tipc: Left network mode [ 265.188767][ T12] hsr_slave_0: left promiscuous mode [ 265.194979][ T12] hsr_slave_1: left promiscuous mode [ 265.201260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.210293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.218923][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.226603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.241518][ T12] hsr_slave_0: left promiscuous mode [ 265.248392][ T12] hsr_slave_1: left promiscuous mode [ 265.271769][ T12] veth1_macvtap: left promiscuous mode [ 265.277497][ T12] veth0_macvtap: left promiscuous mode [ 265.283093][ T12] veth1_vlan: left promiscuous mode [ 265.288567][ T12] veth0_vlan: left promiscuous mode [ 265.295589][ T12] veth1_macvtap: left promiscuous mode [ 265.301439][ T12] veth1_vlan: left promiscuous mode [ 265.306934][ T12] veth0_vlan: left promiscuous mode [ 265.789584][ T12] team0 (unregistering): Port device team_slave_1 removed [ 265.823568][ T12] team0 (unregistering): Port device team_slave_0 removed [ 267.542579][ T12] IPVS: stop unused estimator thread 0... [ 267.550765][ T12] IPVS: stop unused estimator thread 0... [ 267.611068][ T12] ------------[ cut here ]------------ [ 267.616750][ T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 267.626193][ T12] Modules linked in: [ 267.630355][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 267.639745][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.650126][ T12] Workqueue: netns cleanup_net [ 267.654944][ T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 267.660550][ T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8b a9 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b9 56 19 f8 e8 74 ff d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 ff d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 267.680487][ T12] RSP: 0018:ffffc90000117878 EFLAGS: 00010293 [ 267.686633][ T12] RAX: ffffffff89eb1bfc RBX: ffff88807f6b8000 RCX: ffff88801ce8dac0 [ 267.694612][ T12] RDX: 0000000000000000 RSI: ffffffff8d9c68e1 RDI: ffff88801ce8dac0 [ 267.702621][ T12] RBP: ffffc90000117990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 267.710730][ T12] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 267.718820][ T12] R13: 1ffff92000022f3c R14: ffff88807f6b94c0 R15: dffffc0000000000 [ 267.726823][ T12] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 267.735790][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.742395][ T12] CR2: 000056282e8d1660 CR3: 000000007f4ba000 CR4: 00000000003526f0 [ 267.750406][ T12] Call Trace: [ 267.753824][ T12] [ 267.756845][ T12] xfrm_net_exit+0x2d/0x70 [ 267.761287][ T12] ops_undo_list+0x49a/0x990 [ 267.765918][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 267.771041][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 267.776272][ T12] cleanup_net+0x4d8/0x820 [ 267.780698][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 267.785701][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.790947][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 267.796747][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 267.802507][ T12] process_scheduled_works+0xade/0x17b0 [ 267.808112][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.814116][ T12] worker_thread+0x8a0/0xda0 [ 267.818782][ T12] kthread+0x711/0x8a0 [ 267.822865][ T12] ? __pfx_worker_thread+0x10/0x10 [ 267.828009][ T12] ? __pfx_kthread+0x10/0x10 [ 267.832608][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.837836][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.843044][ T12] ? __pfx_kthread+0x10/0x10 [ 267.847652][ T12] ret_from_fork+0x4b9/0x870 [ 267.852256][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 267.857539][ T12] ? __switch_to_asm+0x39/0x70