last executing test programs: 2.676215771s ago: executing program 3 (id=13282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad63, 0x9, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r3, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) 2.413052931s ago: executing program 3 (id=13288): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x7, 0x7}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @local, 0x5}, 0x1c) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x20021) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088c1}, 0x40008810) 2.267110439s ago: executing program 3 (id=13290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000002400)="800000800000210ee7decd7a00", 0xd, 0x200000c1, &(0x7f00000001c0)={0x11, 0x1, r3, 0x1, 0x3}, 0x14) 1.98214525s ago: executing program 3 (id=13297): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) read(r0, &(0x7f0000000180)=""/118, 0x76) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000014001901000000000000000000001100fa"], 0x28}}, 0x0) 1.389477501s ago: executing program 4 (id=13308): r0 = socket(0x10, 0x5, 0x2) write(r0, &(0x7f0000000000)="1c000013003b9b0400"/28, 0x1c) 1.255596627s ago: executing program 4 (id=13310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01001f0909741122c4a20900000008000300", @ANYRES32=r3, @ANYBLOB="08005080040006000800370000000000110007004c8094b22772a7480d3c06ae9500000004000a00080009002cc28bd40500080003000000"], 0x54}, 0x1, 0x0, 0x0, 0x4002}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x28c, 0x26, 0x3, 0x70bd28, 0x25dfdbfe, {0xc}, [@typed={0x8, 0x145, 0x0, 0x0, @uid=r5}, @generic="c8f25cafb76ee02d1190147c867cc5c4f38e9b2384e285a18f902554f1e7d7a7aca6defb217b10eb8737de221664dfee7a216837233ff6dafd53245919fd8985ecd1c1ec667f67f5f5c296ff62890a36a1705fac2b327d52c3898c47cf6e08321147a06caa5b39c67cf91bb76a62a2530de7190da2f8c8d6b39027", @nested={0x1ef, 0x12d, 0x0, 0x1, [@nested={0x4, 0xf0}, @generic="3a42faf621ec1ea3a520792fb5b5779fd58bc51e1c245a9e05557108aaa4ce5ba12206638b902782021616831c5b73daf2dc5906cb87c20ef004d7d514a22cc6db239c2a1b6481ba664e69773c74b33c3be140f6b95647dfadaa6f656c4c338d7323a75cd7d190aa29525c2fd8246b6ec4344b191f64d618fd059f20b7a2e0640c2deeae9fbac028bc68f4adf29ff1dcffad3c81e5909760a6c2e9df4d8b5da6465d1f4586cd6c326bcf91997bee677216237e64d076e033e47860b23b6751ceb7", @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@local}, @typed={0xe7, 0xac, 0x0, 0x0, @binary="97dbb93bda19da91b3b0cd44f535f438ac9ddf270b2ed2eb5b55c69bdc85ca24e3abd11c9e2801bd659c6176620299c4d7f1a826ace35cf4588d0cb732b0a7af5d62ea00c2bfad8e99b6a2ba7e68493f938ae79a17dacf3b6cdb54ef3f08f192f5b8dc1f2321cdd21a02f3a1a29019a5b56047688140ea79ca2d7d6eed58aea2fdce63a5995d5a5243c13dd7dfad453553144b3dc7e533f025316c34a287cb8f0871e14c1daef54a28737fdf4eb38c4f30f03f4e038c6cfb2cc8087f5f5ef0f56c80326167e2e0f42903c25ce51cf9de66f51ed9828d5e9881f9781f0614915ff7ce0a"}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0xdb}, @generic="94daf812b6ee59fe334a2b6c88d47fb260e781f7d6b32fc1b9cc2d14164f117dcea22c960a0f", @nested={0x4, 0xc4}]}, @generic='Wl$']}, 0x28c}, 0x1, 0x0, 0x0, 0x10}, 0x11) 1.239437641s ago: executing program 4 (id=13311): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5}]}}}]}, 0x4c}}, 0x0) 1.118861218s ago: executing program 4 (id=13315): r0 = socket(0x28, 0x1, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10008044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x17c, 0x31, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffe37a}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x41}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.091102787s ago: executing program 2 (id=13316): socket(0x2c, 0x3, 0x4) (async) r0 = socket(0x2c, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000400)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25030000000500e60006000000ecd6cab5bd6eb58b34998a44fede7fce249208a49af61aa1edd9ab0e404aed80de58db3066255cdb7082c765748fa57acf493f0f90ffd23bfc19788132db1c8768de3d08a71c5c29ad663a6312b495112d54fffd7d86abde17f32d2ff38447312e641aefad9bfd26dd5d1605a566af"], 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4000) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25030000000500e60006000000ecd6cab5bd6eb58b34998a44fede7fce249208a49af61aa1edd9ab0e404aed80de58db3066255cdb7082c765748fa57acf493f0f90ffd23bfc19788132db1c8768de3d08a71c5c29ad663a6312b495112d54fffd7d86abde17f32d2ff38447312e641aefad9bfd26dd5d1605a566af"], 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4000) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r16], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r17, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4002}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4002}, 0x0) 1.06620854s ago: executing program 4 (id=13317): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f00000011c0)=""/133, 0x85, 0x0, &(0x7f0000001280)=""/121, 0x79}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc4, &(0x7f00000010c0)=""/196, 0x0, 0xe4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f0000001380)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, @in6={0xa, 0x4e23, 0xc0000, @mcast2, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r5, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r7, &(0x7f0000000000)="b892d60d79265b0555f218d2", 0xc) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c00010000000000000000001400030020"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2a0100, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r5) setsockopt$inet6_tcp_TLS_RX(r6, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000001040)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x7, 0xd, 0x4, 0x0, 0x7, 0x800006}) 1.023409837s ago: executing program 3 (id=13319): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 963.750647ms ago: executing program 0 (id=13320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 905.651903ms ago: executing program 0 (id=13321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000340)=0xdbe7, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x118, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x41, 0x8, "8b346e009ceda896173a0361890a108a59f0348ae725df1b467685a01cf11f129ac6be0f087f42d67050a704e922e0fb150c39c08cfa031adabda04b60"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x90, 0x8, "e78c175bbed9e2846b44f8efdb3f4213e1b15ae4a75718e28229d324cfeb471bd5aea7366756f7d33c398d52e01569ea335dfeed202c05bd12f4f3287f5ee5e156736ccaafff5ea5077db61ebb79d03bfbb30de7d5e9cc0c0b9dd6c809784211ab39452e7143fe3cb6723dfcee99ea99e3ae23b2c7a62de6e7e997289c55f7a9d5fc80110d5e08e9a98cb51e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x160}, 0x1, 0x0, 0x0, 0x40004}, 0x8011) 878.996432ms ago: executing program 1 (id=13322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800034b0003000000"], 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48041}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='{,,\x00', 0x436800, &(0x7f0000000300)={@_ha_fsid={[0x8, 0x73d]}, {0x346, 0x3, 0x1, 0x81}}, 0x6, &(0x7f0000000340), &(0x7f0000000380)=0x6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd8, r7, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfd3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4f28}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x11}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x61}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xac6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffbd1}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4c8094b22772a7480d3c06ae95"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1797c7f9d48bc22c}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4002}, 0x0) 795.138202ms ago: executing program 0 (id=13323): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x20) sendmmsg$inet6(r1, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x1, 0x8044) 780.598987ms ago: executing program 0 (id=13324): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x4, 0xffff, 0x0, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x8, 0x0, 0x0, 0xf}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x0, @in6=@empty, 0x40000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x40000000, @loopback}, 0x1c) 748.190355ms ago: executing program 1 (id=13325): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0x8}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x800) close(0x3) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000440)) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)=ANY=[@ANYBLOB="434ed44f", @ANYRES16=r7, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990009000000740000000800a0009e090000080026008009000008009f0000000000"], 0x40}}, 0x20000000) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async, rerun: 64) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x38, r11, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x8003, @bearer=@l2={'eth', 0x3a, 'batadv_slave_0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 679.000783ms ago: executing program 2 (id=13326): r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x41d808}]}}]}, 0x3c}}, 0x20040054) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) 678.704879ms ago: executing program 0 (id=13327): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x21000000}, 0x0) 644.573656ms ago: executing program 0 (id=13328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x255fdbbf, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x24}}, 0x8800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 569.105894ms ago: executing program 1 (id=13329): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 495.513663ms ago: executing program 1 (id=13330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad63, 0x9, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r3, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) 399.124487ms ago: executing program 2 (id=13331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 363.319536ms ago: executing program 2 (id=13332): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$kcm(0x29, 0x1309c784059cca65, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40400) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000280)={0x4, 0x81, 0x8}, 0xc) 308.014292ms ago: executing program 1 (id=13333): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) 234.762272ms ago: executing program 2 (id=13334): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 183.767783ms ago: executing program 1 (id=13335): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000010c0)=""/237, 0xed}, {&(0x7f00000011c0)=""/168, 0xa8}, {&(0x7f0000001280)=""/41, 0x29}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002700)=""/36, 0x24}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000002440)=""/247, 0xf7}, {&(0x7f0000002540)=""/210, 0xd2}], 0x8}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 91.664052ms ago: executing program 4 (id=13336): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) bind$tipc(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000003c0)={0x42}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0xfffffffc, 'fo\x00', 0x30, 0x102, 0x80}, 0x2c) 86.650671ms ago: executing program 3 (id=13337): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r5, @ANYBLOB="00000000003d4796bb72f5ea3e00010062726964676500000c0002800800020003000000f0ed078419c9cdd5b93c916270f1b2c0e55ca6d09f1d6adb11d9033d2ddddb2d5318d9fc356700f9d8f8067aa18ef0a92020cc4b56b24fced8df2440ae60f7141e5aedb9d5e018b616ab8109da2a987cb4a901c0a12526f5beca8c8165882e1d1d177074586c4d9394ba8b6bfa7c33ff2ca24bcd05112368fea7abcba44e29b41ec73b3a96be51d583"], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3c}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x58}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r13, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000001c0)=0x8, 0x4) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) socket$kcm(0x29, 0x5, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) 0s ago: executing program 2 (id=13338): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x3f000000}, 0x0) kernel console output (not intermixed with test programs): .257998][T14174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.271787][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.359440][T14174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.499615][T14174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.510120][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.556986][T14174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.801116][T14368] team0: Device ip6gre1 is of different type [ 1122.899709][T14360] syzkaller0: entered promiscuous mode [ 1122.905258][T14360] syzkaller0: entered allmulticast mode [ 1123.019492][ T7982] hsr_slave_0: left promiscuous mode [ 1123.026013][ T7982] 0·: left promiscuous mode [ 1123.035502][ T7982] veth0_macvtap: left allmulticast mode [ 1123.042321][ T7982] veth1_macvtap: left promiscuous mode [ 1123.049361][ T7982] veth0_macvtap: left promiscuous mode [ 1123.055365][ T7982] veth1_vlan: left promiscuous mode [ 1123.061471][ T7982] veth0_vlan: left promiscuous mode [ 1123.072880][T14376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1123.080269][T14376] IPv6: NLM_F_CREATE should be set when creating new route [ 1123.087573][T14376] IPv6: NLM_F_CREATE should be set when creating new route [ 1123.694981][ T7982] team0 (unregistering): Port device team_slave_1 removed [ 1123.726963][ T7982] team0 (unregistering): Port device team_slave_0 removed [ 1123.873234][T14174] hsr_slave_0: entered promiscuous mode [ 1123.882983][T14174] hsr_slave_1: entered promiscuous mode [ 1123.889601][ T51] Bluetooth: hci0: command tx timeout [ 1123.979861][T14386] tipc: Enabling of bearer rejected, failed to enable media [ 1124.158728][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11884'. [ 1124.180698][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11884'. [ 1124.191795][T14400] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11883'. [ 1124.485542][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11882'. [ 1124.657796][T14420] netlink: 'syz.3.11888': attribute type 11 has an invalid length. [ 1124.994885][T14445] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11890'. [ 1125.230128][ T7982] IPVS: stop unused estimator thread 0... [ 1125.284520][T14457] netlink: 'syz.3.11895': attribute type 1 has an invalid length. [ 1125.416638][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11896'. [ 1125.426064][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11896'. [ 1125.487790][T14460] geneve4: entered promiscuous mode [ 1125.503397][T14460] geneve4: entered allmulticast mode [ 1125.516684][ T7960] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.542907][ T7960] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.668833][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11900'. [ 1125.770724][ T7960] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.815902][ T7960] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.967817][ T51] Bluetooth: hci0: command tx timeout [ 1126.035767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1126.043914][ C0] lec:lec_tx_timeout: lec0 [ 1126.055492][T14174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1126.065191][T14489] netlink: 'syz.3.11903': attribute type 1 has an invalid length. [ 1126.080631][T14491] netlink: 'syz.0.11904': attribute type 17 has an invalid length. [ 1126.145385][T14174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1126.162091][T14174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1126.178187][T14174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1126.542598][T14174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.642694][T14174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.697283][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.704479][ T7969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.777753][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.784951][ T7969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.873650][T14544] nbd: illegal input index -983040 [ 1127.036425][T14552] netlink: 'syz.4.11917': attribute type 21 has an invalid length. [ 1127.064335][T14552] __nla_validate_parse: 24 callbacks suppressed [ 1127.064356][T14552] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11917'. [ 1127.125182][T14552] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11917'. [ 1127.155951][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11919'. [ 1127.315574][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11921'. [ 1127.444645][T14576] Cannot find del_set index 49151 as target [ 1127.625154][T14174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.869870][T14174] veth0_vlan: entered promiscuous mode [ 1127.932002][T14174] veth1_vlan: entered promiscuous mode [ 1128.015168][T14601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11929'. [ 1128.091243][T14174] veth0_macvtap: entered promiscuous mode [ 1128.158623][T14174] veth1_macvtap: entered promiscuous mode [ 1128.186818][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11929'. [ 1128.220764][T14174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.245062][T14606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11929'. [ 1128.281075][T14174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.354232][ T7978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.382718][ T7978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.420668][ T7978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.458797][ T7978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.671015][ T7969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.698598][ T7969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.754372][T14635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11936'. [ 1128.777869][T14635] netlink: 'syz.3.11936': attribute type 10 has an invalid length. [ 1128.787954][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.802871][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.192929][T14662] syzkaller0: entered promiscuous mode [ 1129.205899][T14662] syzkaller0: entered allmulticast mode [ 1129.570833][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1129.596326][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1129.605281][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1129.614933][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.622968][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1129.654962][T14682] xt_limit: Overflow, try lower: 271964/0 [ 1129.830234][T14691] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11948'. [ 1130.042440][T14681] vxcan1 speed is unknown, defaulting to 1000 [ 1130.116471][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11951'. [ 1130.142957][T14702] netlink: 'syz.4.11950': attribute type 1 has an invalid length. [ 1130.373731][T14705] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1130.417914][T14702] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1130.541120][T14681] lo speed is unknown, defaulting to 1000 [ 1131.069055][T14681] chnl_net:caif_netlink_parms(): no params data found [ 1131.145568][T14745] nbd: nbd1 already in use [ 1131.160066][T14745] block nbd1: NBD_DISCONNECT [ 1131.177770][T14745] block nbd1: Send disconnect failed -32 [ 1131.202324][T14745] block nbd1: shutting down sockets [ 1131.320277][ T7978] team0: left allmulticast mode [ 1131.332155][ T7978] team_slave_1: left allmulticast mode [ 1131.338861][ T7978] team0: left promiscuous mode [ 1131.343845][ T7978] team_slave_1: left promiscuous mode [ 1131.357436][ T7978] bridge0: port 2(team0) entered disabled state [ 1131.371751][ T7978] bridge_slave_0: left allmulticast mode [ 1131.383817][ T7978] bridge_slave_0: left promiscuous mode [ 1131.397841][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.727481][ T51] Bluetooth: hci4: command tx timeout [ 1131.832564][ T7978] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1131.870099][ T7978] dvmrp6 (unregistering): left allmulticast mode [ 1131.969633][ T7978] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1131.985793][ T7978] bridge1 (unregistering): left promiscuous mode [ 1132.312727][ T7978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.322705][ T7978] bond_slave_0: left allmulticast mode [ 1132.330733][ T7978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.340674][ T7978] bond_slave_1: left allmulticast mode [ 1132.348380][ T7978] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1132.358620][ T7978] bridge_slave_1: left allmulticast mode [ 1132.364830][ T7978] bond0 (unregistering): Released all slaves [ 1132.377894][ T7978] bond1 (unregistering): Released all slaves [ 1132.394502][ T7978] bond2 (unregistering): (slave veth3): Releasing active interface [ 1132.404642][ T7978] bond2 (unregistering): Released all slaves [ 1132.422856][ T7978] bond3 (unregistering): Released all slaves [ 1132.449387][ T7978] bond4 (unregistering): Released all slaves [ 1132.468577][ T7978] bond5 (unregistering): Released all slaves [ 1132.484552][ T7978] bond6 (unregistering): Released all slaves [ 1132.517403][ T7978] bond7 (unregistering): Released all slaves [ 1132.540518][ T7978] bond8 (unregistering): Released all slaves [ 1132.557779][ T7978] bond9 (unregistering): (slave lo): Releasing backup interface [ 1132.574258][ T7978] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1132.590544][ T7978] bond9 (unregistering): Released all slaves [ 1132.614553][ T7978] bond10 (unregistering): Released all slaves [ 1132.631142][ T7978] bond11 (unregistering): Released all slaves [ 1132.652240][ T7978] bond12 (unregistering): Released all slaves [ 1132.683175][ T7978] bond13 (unregistering): Released all slaves [ 1132.704421][ T7978] bond14 (unregistering): Released all slaves [ 1132.728124][ T7978] bond15 (unregistering): Released all slaves [ 1132.744006][ T7978] bond16 (unregistering): Released all slaves [ 1132.811052][ T5886] lo speed is unknown, defaulting to 1000 [ 1132.838526][ T5886] syz0: Port: 1 Link DOWN [ 1132.977567][T14681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.015780][T14681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.023114][T14681] bridge_slave_0: entered allmulticast mode [ 1133.062589][T14681] bridge_slave_0: entered promiscuous mode [ 1133.080547][T14681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.124754][T14681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.132591][T14681] bridge_slave_1: entered allmulticast mode [ 1133.168515][T14797] netlink: 'syz.2.11968': attribute type 1 has an invalid length. [ 1133.177456][T14681] bridge_slave_1: entered promiscuous mode [ 1133.185123][T14797] netlink: 'syz.2.11968': attribute type 1 has an invalid length. [ 1133.203880][ T7978] tipc: Left network mode [ 1133.436878][T14681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.472341][T14681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.726520][T14681] team0: Port device team_slave_0 added [ 1133.741843][T14815] netlink: 'syz.2.11976': attribute type 21 has an invalid length. [ 1133.757304][T14681] team0: Port device team_slave_1 added [ 1133.763267][T14815] __nla_validate_parse: 3 callbacks suppressed [ 1133.763284][T14815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11976'. [ 1133.813233][ T51] Bluetooth: hci4: command tx timeout [ 1133.836917][T14817] netlink: 'syz.2.11976': attribute type 21 has an invalid length. [ 1133.904219][T14817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11976'. [ 1134.048877][T14681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.074142][T14681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.143754][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11983'. [ 1134.153518][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11983'. [ 1134.176201][T14681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.305316][T14681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.319979][T14681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.349341][T14681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.583220][T14851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11990'. [ 1134.693769][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11990'. [ 1134.706476][T14681] hsr_slave_0: entered promiscuous mode [ 1134.713502][T14681] hsr_slave_1: entered promiscuous mode [ 1134.727012][T14681] debugfs: 'hsr0' already exists in 'hsr' [ 1134.749123][T14681] Cannot create hsr debugfs directory [ 1134.764884][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11993'. [ 1134.844480][T14857] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1134.977561][T14862] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11994'. [ 1135.187394][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11999'. [ 1135.339404][T14877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.440532][T14879] macvlan2: entered promiscuous mode [ 1135.457365][T14879] macvlan2: entered allmulticast mode [ 1135.468850][T14879] bond0: entered allmulticast mode [ 1135.475358][T14879] bond0: entered promiscuous mode [ 1135.487384][T14879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1135.497256][T14879] team0: Port device macvlan2 added [ 1135.621848][ T7978] hsr_slave_0: left promiscuous mode [ 1135.641640][ T7978] hsr_slave_1: left promiscuous mode [ 1135.649559][ T7978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.664682][ T7978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.887669][ T51] Bluetooth: hci4: command tx timeout [ 1136.059435][ T7978] team0 (unregistering): Port device team_slave_1 removed [ 1136.289782][T14897] bond0: Error: Cannot enslave bond to itself. [ 1136.300004][T14901] netlink: 'syz.1.12005': attribute type 1 has an invalid length. [ 1136.325324][T14901] netlink: 'syz.1.12005': attribute type 1 has an invalid length. [ 1136.366622][T14901] netlink: 'syz.1.12005': attribute type 8 has an invalid length. [ 1136.449300][T14907] IPv6: sit2: Disabled Multicast RS [ 1136.464786][T14907] sit2: entered allmulticast mode [ 1136.704421][T14681] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.759085][T14681] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.878820][T14941] bond0: entered promiscuous mode [ 1136.884025][T14941] bond_slave_0: entered promiscuous mode [ 1136.927532][T14941] bond_slave_1: entered promiscuous mode [ 1137.082201][T14681] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.126669][T14681] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.156066][T14956] netlink: 'syz.2.12013': attribute type 10 has an invalid length. [ 1137.238955][T14681] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.256797][T14681] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.314634][ T7978] IPVS: stop unused estimator thread 0... [ 1137.391651][T14681] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.426320][T14681] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.747343][T14949] Bluetooth: MGMT ver 1.23 [ 1137.932312][T14681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1137.966612][ T51] Bluetooth: hci4: command tx timeout [ 1138.012937][T14681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1138.061888][T14681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1138.120819][T14681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1138.374970][T14681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.442573][T14681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.490814][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.498183][ T7983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.563568][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.570856][ T7982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.623511][T15027] veth0_to_bridge: entered promiscuous mode [ 1138.748506][T15029] veth0_to_bridge: left promiscuous mode [ 1139.164516][T15055] block nbd1: not configured, cannot reconfigure [ 1139.274919][T14681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.352645][T15060] syzkaller0: entered promiscuous mode [ 1139.360064][T15060] syzkaller0: entered allmulticast mode [ 1139.590292][T14681] veth0_vlan: entered promiscuous mode [ 1139.631452][T14681] veth1_vlan: entered promiscuous mode [ 1139.859847][T14681] veth0_macvtap: entered promiscuous mode [ 1139.890935][T14681] veth1_macvtap: entered promiscuous mode [ 1139.995991][T14681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.032683][T14681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.092033][T15103] __nla_validate_parse: 7 callbacks suppressed [ 1140.092051][T15103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12051'. [ 1140.130825][ T7963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.144565][ T7963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.202842][ T7963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.276046][ T7963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.363376][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12053'. [ 1140.424415][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12053'. [ 1140.486315][T15121] Unsupported ieee802154 address type: 0 [ 1140.684680][T15130] openvswitch: netlink: IP tunnel dst address not specified [ 1140.878271][ T7963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.906254][ T7963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.020359][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.045752][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.142078][T15139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1141.334533][ T7983] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.365788][ T7983] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.381440][T15161] netlink: 'syz.3.12063': attribute type 10 has an invalid length. [ 1141.430312][T15161] team0: Device veth1_macvtap failed to register rx_handler [ 1141.452792][ T7983] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.508316][ T7983] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.555567][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12057'. [ 1141.800468][T15188] IPv6: NLM_F_CREATE should be specified when creating new route [ 1142.041502][T15195] netlink: 'syz.1.12071': attribute type 12 has an invalid length. [ 1142.099505][T15205] netlink: 'syz.1.12071': attribute type 12 has an invalid length. [ 1142.288113][T15213] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1142.311923][T15213] bond1 (unregistering): Released all slaves [ 1142.449829][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12079'. [ 1142.450461][ T7969] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 1142.591378][T15229] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1142.664571][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12081'. [ 1142.682489][T15238] netlink: 'syz.0.12083': attribute type 1 has an invalid length. [ 1142.690935][T15238] netlink: 760 bytes leftover after parsing attributes in process `syz.0.12083'. [ 1142.720967][T15236] gre1: entered promiscuous mode [ 1142.763689][T15236] gre1: entered allmulticast mode [ 1142.835043][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12086'. [ 1142.845294][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12086'. [ 1142.854924][T15249] netlink: 'syz.0.12086': attribute type 15 has an invalid length. [ 1142.870378][T15236] gre1: entered promiscuous mode [ 1142.875501][T15236] gre1: entered allmulticast mode [ 1142.924965][ T7983] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 1142.942145][T15236] gre1: entered promiscuous mode [ 1142.947368][T15236] gre1: entered allmulticast mode [ 1142.959446][ T7983] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 1142.961526][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12086'. [ 1142.990689][ T7983] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 1143.012099][T15249] netlink: 'syz.0.12086': attribute type 15 has an invalid length. [ 1143.100497][T15236] gre1: entered promiscuous mode [ 1143.105524][T15236] gre1: entered allmulticast mode [ 1143.112182][T15257] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1143.127237][ T7983] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 1143.158636][T15257] netlink: 'syz.4.12088': attribute type 1 has an invalid length. [ 1143.228646][T15260] netlink: 'syz.0.12090': attribute type 4 has an invalid length. [ 1143.243575][T15257] bond8: entered promiscuous mode [ 1143.249523][T15257] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1143.264510][T15236] gre1: entered promiscuous mode [ 1143.273774][T15236] gre1: entered allmulticast mode [ 1143.293608][T15265] x_tables: duplicate underflow at hook 2 [ 1143.351645][T15257] bond8: (slave bridge4): making interface the new active one [ 1143.359365][T15257] bridge4: entered promiscuous mode [ 1143.379004][T15257] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 1143.399880][T15236] gre1: entered promiscuous mode [ 1143.408606][T15236] gre1: entered allmulticast mode [ 1143.552958][T15274] netlink: 'syz.4.12093': attribute type 1 has an invalid length. [ 1143.576237][T15274] netlink: 'syz.4.12093': attribute type 4 has an invalid length. [ 1143.668601][T15279] sctp: [Deprecated]: syz.1.12095 (pid 15279) Use of int in maxseg socket option. [ 1143.668601][T15279] Use struct sctp_assoc_value instead [ 1143.731143][T15286] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1143.742130][T15286] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1144.997117][T15360] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 1145.365224][T15370] __nla_validate_parse: 19 callbacks suppressed [ 1145.365247][T15370] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12129'. [ 1145.426657][T15371] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12129'. [ 1145.464611][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1145.475237][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1145.483762][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1145.492515][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1145.502433][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1145.570024][T15375] vxcan1 speed is unknown, defaulting to 1000 [ 1145.886040][T15384] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12135'. [ 1145.914256][T15384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12135'. [ 1146.145117][T15389] xt_hashlimit: size too large, truncated to 1048576 [ 1146.330722][ T7963] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.385512][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12140'. [ 1146.413023][T15409] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12141'. [ 1146.521537][ T7963] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.605050][ T7963] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.654075][T15427] validate_nla: 2 callbacks suppressed [ 1146.654097][T15427] netlink: 'syz.2.12145': attribute type 16 has an invalid length. [ 1146.658946][T15375] chnl_net:caif_netlink_parms(): no params data found [ 1146.662839][T15427] netlink: 'syz.2.12145': attribute type 17 has an invalid length. [ 1146.741882][T15427] bond0: left promiscuous mode [ 1146.748511][T15427] bond_slave_0: left promiscuous mode [ 1146.755437][T15427] bond_slave_1: left promiscuous mode [ 1146.778141][T15427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1146.806003][ T7963] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.821392][T15430] tunl0: entered promiscuous mode [ 1146.827293][T15430] netlink: 'syz.4.12147': attribute type 3 has an invalid length. [ 1146.835141][T15430] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12147'. [ 1147.104861][T15375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.112427][T15375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.119969][T15375] bridge_slave_0: entered allmulticast mode [ 1147.128038][T15375] bridge_slave_0: entered promiscuous mode [ 1147.174694][T15375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.188645][T15375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.202583][T15375] bridge_slave_1: entered allmulticast mode [ 1147.211486][T15375] bridge_slave_1: entered promiscuous mode [ 1147.237435][T15458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.334912][T15462] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12156'. [ 1147.399762][T15375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.441001][T15375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.450853][ T7963] bridge_slave_1: left allmulticast mode [ 1147.466248][ T7963] bridge_slave_1: left promiscuous mode [ 1147.485663][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.531210][ T7963] bridge_slave_0: left promiscuous mode [ 1147.551553][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.566830][ T5827] Bluetooth: hci1: command tx timeout [ 1147.872181][ T7963] erspan0 (unregistering): left promiscuous mode [ 1147.899438][ T7963] gretap0 (unregistering): left promiscuous mode [ 1147.937444][ T7963] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1148.024990][ T7963] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1148.291147][ T7963] bond1 (unregistering): Released all slaves [ 1148.311480][ T7963] bond2 (unregistering): (slave vcan0): Releasing backup interface [ 1148.320205][ T7963] vcan0: left promiscuous mode [ 1148.327220][ T7963] bond2 (unregistering): Released all slaves [ 1148.351933][ T7963] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 1148.360544][ T7963] vcan1: left promiscuous mode [ 1148.368402][ T7963] bond3 (unregistering): Released all slaves [ 1148.386256][ T7963] bond4 (unregistering): Released all slaves [ 1148.402655][ T7963] bond5 (unregistering): (slave lo): Releasing backup interface [ 1148.412299][ T7963] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1148.425214][ T7963] bond5 (unregistering): Released all slaves [ 1148.448899][ T7963] bond6 (unregistering): Released all slaves [ 1148.465015][ T7963] bond7 (unregistering): Released all slaves [ 1148.484577][ T7963] bond0 (unregistering): left allmulticast mode [ 1148.491257][ T7963] bond0 (unregistering): left promiscuous mode [ 1148.500791][ T7963] team0: Port device macvlan2 removed [ 1148.511616][ T7963] bond0 (unregistering): Released all slaves [ 1148.612382][T15375] team0: Port device team_slave_0 added [ 1148.623137][ T7963] : left promiscuous mode [ 1148.659404][T15375] team0: Port device team_slave_1 added [ 1148.692379][ T7963] : left promiscuous mode [ 1148.727694][T15375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.734793][T15375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.764476][T15375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.779078][T15375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.786156][T15375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.814840][T15375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.830050][ T7963] tipc: Left network mode [ 1148.933176][T15375] hsr_slave_0: entered promiscuous mode [ 1148.940275][T15375] hsr_slave_1: entered promiscuous mode [ 1148.951872][T15375] debugfs: 'hsr0' already exists in 'hsr' [ 1148.958107][T15375] Cannot create hsr debugfs directory [ 1149.645729][ T5827] Bluetooth: hci1: command tx timeout [ 1149.669211][ T7963] hsr_slave_0: left promiscuous mode [ 1149.677869][ T7963] hsr_slave_1: left promiscuous mode [ 1149.718942][ T7963] team0 (unregistering): Port device batadv1 removed [ 1149.888951][ T7963] team0 (unregistering): Port device team_slave_1 removed [ 1149.905055][ T7963] team0 (unregistering): Port device team_slave_0 removed [ 1150.107521][T15375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1150.128270][T15375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1150.141906][T15375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1150.153740][T15375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1150.329202][T15375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.338658][ T7963] IPVS: stop unused estimator thread 0... [ 1150.369089][T15375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.389315][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.396552][ T7983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.419233][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.426462][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.709825][T15375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.772912][T15375] veth0_vlan: entered promiscuous mode [ 1150.791375][T15375] veth1_vlan: entered promiscuous mode [ 1150.839438][T15375] veth0_macvtap: entered promiscuous mode [ 1150.852748][T15375] veth1_macvtap: entered promiscuous mode [ 1150.880473][T15375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.910097][T15375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.937554][ T7983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.958049][ T7983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.998745][ T7983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.032654][ T7983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.092755][ T7983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.116131][ T7983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.171556][ T7978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.182950][ T7978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.290780][T15550] netlink: 'syz.1.12128': attribute type 1 has an invalid length. [ 1151.299111][T15550] netlink: 'syz.1.12128': attribute type 2 has an invalid length. [ 1151.728268][ T5827] Bluetooth: hci1: command tx timeout [ 1153.805980][ T5827] Bluetooth: hci1: command tx timeout [ 1172.054185][T15557] tipc: Started in network mode [ 1172.059607][T15557] tipc: Node identity 3e1daa7fbd6e, cluster identity 4711 [ 1172.069836][T15557] tipc: Enabled bearer , priority 0 [ 1172.087419][T15557] tipc: Resetting bearer [ 1172.204488][T15554] tipc: Disabling bearer [ 1172.437674][T15582] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1172.599356][T15598] delete_channel: no stack [ 1172.933085][T15613] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1172.969320][T15613] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1173.034518][T15613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12181'. [ 1173.342483][T15631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.465722][T15636] syzkaller0: entered promiscuous mode [ 1173.471268][T15636] syzkaller0: entered allmulticast mode [ 1173.519364][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12191'. [ 1174.212002][T15687] netlink: 'syz.1.12201': attribute type 1 has an invalid length. [ 1174.221308][T15687] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12201'. [ 1174.561233][T15718] netlink: 'syz.0.12210': attribute type 4 has an invalid length. [ 1174.956938][T15748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12218'. [ 1175.007894][T15750] syzkaller0: entered promiscuous mode [ 1175.020795][T15750] syzkaller0: entered allmulticast mode [ 1175.057059][T15750] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12219'. [ 1175.147950][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12218'. [ 1175.158951][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12221'. [ 1175.951318][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1175.962750][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1175.977999][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1175.995537][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1176.007756][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1176.168691][T15794] vxcan1 speed is unknown, defaulting to 1000 [ 1176.345833][T15811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12233'. [ 1176.434628][T15815] netlink: 'syz.0.12233': attribute type 25 has an invalid length. [ 1176.528819][T15812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.737705][T15822] tipc: Enabled bearer , priority 0 [ 1176.767513][T15822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12236'. [ 1176.822273][T13829] lec:lec_start_xmit: lec0:No lecd attached [ 1176.829454][T15831] syzkaller0: entered promiscuous mode [ 1176.834980][T15831] syzkaller0: entered allmulticast mode [ 1176.881121][T15822] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1176.986945][T15822] tipc: Resetting bearer [ 1177.040446][T15821] tipc: Resetting bearer [ 1177.099334][T15821] tipc: Disabling bearer [ 1177.309406][T15860] "syz.0.12246" (15860) uses obsolete ecb(arc4) skcipher [ 1177.500736][T15876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12251'. [ 1177.658812][T15794] chnl_net:caif_netlink_parms(): no params data found [ 1177.943965][T15794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.952784][T15794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.960939][T15794] bridge_slave_0: entered allmulticast mode [ 1177.970257][T15794] bridge_slave_0: entered promiscuous mode [ 1178.006495][T15794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.013781][T15794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.037541][T15794] bridge_slave_1: entered allmulticast mode [ 1178.046619][ T5827] Bluetooth: hci5: command tx timeout [ 1178.061373][T15794] bridge_slave_1: entered promiscuous mode [ 1178.118069][T15794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.158410][T15794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.341722][T15794] team0: Port device team_slave_0 added [ 1178.362191][T15794] team0: Port device team_slave_1 added [ 1178.406450][T15928] netlink: 'syz.1.12264': attribute type 10 has an invalid length. [ 1178.449472][T15928] team0: Device veth1_macvtap failed to register rx_handler [ 1178.470783][T15935] netlink: 'syz.0.12267': attribute type 1 has an invalid length. [ 1178.509959][T15935] bond2: entered promiscuous mode [ 1178.516961][T15935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1178.525411][T15794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.537962][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.577835][T15794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.614820][T15941] bond2: (slave bridge2): making interface the new active one [ 1178.624759][T15941] bridge2: entered promiscuous mode [ 1178.631967][T15941] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1178.656774][T15935] netlink: 'syz.0.12267': attribute type 25 has an invalid length. [ 1178.666322][T15935] __nla_validate_parse: 1 callbacks suppressed [ 1178.666341][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1178.692795][T15794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.715655][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.744142][T15794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.780680][ T7969] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1178.790228][ T7969] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1178.800302][ T7969] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1178.809642][ T7969] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1178.980775][T15794] hsr_slave_0: entered promiscuous mode [ 1178.992458][T15794] hsr_slave_1: entered promiscuous mode [ 1179.010729][T15794] debugfs: 'hsr0' already exists in 'hsr' [ 1179.022544][T15794] Cannot create hsr debugfs directory [ 1179.186331][T15961] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12272'. [ 1179.223223][T15963] netlink: 'syz.1.12273': attribute type 1 has an invalid length. [ 1179.249019][T15963] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12273'. [ 1179.277628][T15963] netlink: 658 bytes leftover after parsing attributes in process `syz.1.12273'. [ 1179.289793][T15963] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12273'. [ 1179.394095][T15965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1179.454245][T15970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12276'. [ 1179.634460][T15794] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1179.663349][T15794] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.700073][T15978] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12278'. [ 1179.781380][T15794] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1179.808487][T15794] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.840059][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12279'. [ 1179.889883][T15794] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1179.902129][T15794] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.971441][T15986] x_tables: duplicate underflow at hook 3 [ 1180.009545][T15794] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1180.030590][T15794] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.127368][ T5827] Bluetooth: hci5: command tx timeout [ 1180.224367][T16005] netlink: 'syz.1.12288': attribute type 1 has an invalid length. [ 1180.274340][T16005] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1180.420666][T16016] netlink: 'syz.1.12290': attribute type 13 has an invalid length. [ 1180.432484][T16009] bond1: option all_slaves_active: invalid value (249) [ 1180.478577][T16009] bond1 (unregistering): Released all slaves [ 1180.625049][T16016] veth0_macvtap: left promiscuous mode [ 1180.683353][T16016] macvtap0: entered allmulticast mode [ 1180.712663][T16016] macvtap0: refused to change device tx_queue_len [ 1180.783634][T16034] xt_NFQUEUE: number of total queues is 0 [ 1180.828507][T16037] netlink: 'syz.2.12294': attribute type 5 has an invalid length. [ 1180.888658][T16032] tap0: tun_chr_ioctl cmd 1074025678 [ 1180.894028][T16032] tap0: group set to 0 [ 1180.978667][T15794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1181.010066][T15794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1181.031600][T15794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1181.065100][T15794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1181.284676][T15794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.321617][T15794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.331118][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12304'. [ 1181.349196][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.356364][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12304'. [ 1181.356635][ T7960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.377020][T16067] netlink: 'syz.4.12304': attribute type 14 has an invalid length. [ 1181.396257][T16067] netlink: 'syz.4.12304': attribute type 13 has an invalid length. [ 1181.413834][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.421048][ T7983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.620607][T16071] netlink: 'syz.2.12305': attribute type 1 has an invalid length. [ 1181.656402][T16071] netlink: 'syz.2.12305': attribute type 1 has an invalid length. [ 1181.667182][T16082] netlink: 'syz.0.12308': attribute type 4 has an invalid length. [ 1181.683413][T16082] netlink: 'syz.0.12308': attribute type 1 has an invalid length. [ 1181.872905][T15794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.885641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1181.893783][ C0] lec:lec_tx_timeout: lec0 [ 1182.005931][T15794] veth0_vlan: entered promiscuous mode [ 1182.054236][T15794] veth1_vlan: entered promiscuous mode [ 1182.108757][T15794] veth0_macvtap: entered promiscuous mode [ 1182.167798][T15794] veth1_macvtap: entered promiscuous mode [ 1182.205966][ T5827] Bluetooth: hci5: command tx timeout [ 1182.220373][T16109] syzkaller0: entered promiscuous mode [ 1182.233153][T16109] syzkaller0: entered allmulticast mode [ 1182.285234][T16112] netlink: zone id is out of range [ 1182.293804][T16112] netlink: zone id is out of range [ 1182.305192][T16112] netlink: zone id is out of range [ 1182.315062][T16112] netlink: zone id is out of range [ 1182.320534][T16112] netlink: zone id is out of range [ 1182.326201][T16112] netlink: zone id is out of range [ 1182.331422][T16112] netlink: zone id is out of range [ 1182.337124][T16112] netlink: set zone limit has 4 unknown bytes [ 1182.362749][T15794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.382312][T15794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.417792][ T7969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.435802][ T7969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.444590][ T7969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.483332][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1182.493469][ T7969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.498877][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 1182.670597][ T7983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.697902][ T7983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.759940][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.775054][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.393519][T16156] bond1: entered promiscuous mode [ 1183.399396][T16156] bond1: entered allmulticast mode [ 1183.405411][T16156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1183.513413][T16150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.521239][T16150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.643312][T16150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.660352][T16150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.872992][ T7969] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.914102][ T7969] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 1183.927251][ T7969] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.940143][ T7969] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1183.953276][ T7969] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1183.974691][ T7969] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.067210][ T7969] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.090402][ T7969] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1184.116943][ T7969] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.134685][T16180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1184.148646][ T7969] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.160908][T16182] FAULT_INJECTION: forcing a failure. [ 1184.160908][T16182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.169955][ T7969] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1184.192005][ T7969] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.224185][T16182] CPU: 0 UID: 0 PID: 16182 Comm: syz.1.12338 Not tainted syzkaller #0 PREEMPT(full) [ 1184.224215][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1184.224230][T16182] Call Trace: [ 1184.224239][T16182] [ 1184.224249][T16182] dump_stack_lvl+0xe8/0x150 [ 1184.224282][T16182] should_fail_ex+0x412/0x560 [ 1184.224318][T16182] _copy_from_user+0x2d/0xb0 [ 1184.224342][T16182] ___sys_sendmsg+0x1c6/0x360 [ 1184.224369][T16182] ? __lock_acquire+0x6b5/0x2cf0 [ 1184.224397][T16182] ? __pfx____sys_sendmsg+0x10/0x10 [ 1184.224469][T16182] ? __fget_files+0x2a/0x420 [ 1184.224490][T16182] ? __fget_files+0x3a0/0x420 [ 1184.224519][T16182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1184.224547][T16182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1184.224583][T16182] ? __pfx_ksys_write+0x10/0x10 [ 1184.224620][T16182] do_syscall_64+0x14d/0xf80 [ 1184.224647][T16182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.224666][T16182] ? trace_irq_disable+0x37/0x100 [ 1184.224690][T16182] ? clear_bhb_loop+0x40/0x90 [ 1184.224716][T16182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.224736][T16182] RIP: 0033:0x7f78e6d9c629 [ 1184.224755][T16182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.224773][T16182] RSP: 002b:00007f78e7cce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1184.224795][T16182] RAX: ffffffffffffffda RBX: 00007f78e7015fa0 RCX: 00007f78e6d9c629 [ 1184.224811][T16182] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1184.224824][T16182] RBP: 00007f78e7cce090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.224836][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.224849][T16182] R13: 00007f78e7016038 R14: 00007f78e7015fa0 R15: 00007ffd95b4d5b8 [ 1184.224883][T16182] [ 1184.463558][ T5827] Bluetooth: hci5: command tx timeout [ 1184.671834][T16193] validate_nla: 2 callbacks suppressed [ 1184.671855][T16193] netlink: 'syz.0.12339': attribute type 3 has an invalid length. [ 1184.701868][T16201] xt_socket: unknown flags 0x50 [ 1184.714125][T16200] vlan2: entered allmulticast mode [ 1184.934999][T16215] __nla_validate_parse: 8 callbacks suppressed [ 1184.935020][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12346'. [ 1185.183353][T16230] FAULT_INJECTION: forcing a failure. [ 1185.183353][T16230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.199859][T16230] CPU: 1 UID: 0 PID: 16230 Comm: syz.4.12350 Not tainted syzkaller #0 PREEMPT(full) [ 1185.199889][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1185.199902][T16230] Call Trace: [ 1185.199911][T16230] [ 1185.199920][T16230] dump_stack_lvl+0xe8/0x150 [ 1185.199954][T16230] should_fail_ex+0x412/0x560 [ 1185.199989][T16230] _copy_from_user+0x2d/0xb0 [ 1185.200013][T16230] __copy_msghdr+0x3c5/0x5b0 [ 1185.200039][T16230] ___sys_sendmsg+0x213/0x360 [ 1185.200061][T16230] ? __lock_acquire+0x6b5/0x2cf0 [ 1185.200083][T16230] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.200134][T16230] ? __fget_files+0x2a/0x420 [ 1185.200151][T16230] ? __fget_files+0x3a0/0x420 [ 1185.200176][T16230] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1185.200200][T16230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1185.200231][T16230] ? __pfx_ksys_write+0x10/0x10 [ 1185.200261][T16230] do_syscall_64+0x14d/0xf80 [ 1185.200284][T16230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.200301][T16230] ? trace_irq_disable+0x37/0x100 [ 1185.200321][T16230] ? clear_bhb_loop+0x40/0x90 [ 1185.200341][T16230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.200358][T16230] RIP: 0033:0x7fc8def9c629 [ 1185.200374][T16230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.200389][T16230] RSP: 002b:00007fc8dff19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.200408][T16230] RAX: ffffffffffffffda RBX: 00007fc8df215fa0 RCX: 00007fc8def9c629 [ 1185.200421][T16230] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1185.200439][T16230] RBP: 00007fc8dff19090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.200450][T16230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.200461][T16230] R13: 00007fc8df216038 R14: 00007fc8df215fa0 R15: 00007ffcc16ede88 [ 1185.200489][T16230] [ 1185.241097][T16232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12351'. [ 1185.540357][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12354'. [ 1185.844157][T16261] x_tables: duplicate underflow at hook 1 [ 1185.993154][T16264] netlink: 'syz.1.12363': attribute type 178 has an invalid length. [ 1186.008215][T16268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12364'. [ 1186.041283][T16268] bridge0: entered promiscuous mode [ 1186.062798][T16268] macsec1: entered promiscuous mode [ 1186.073772][T16268] macsec1: entered allmulticast mode [ 1186.083096][T16268] bridge0: entered allmulticast mode [ 1186.095929][T16268] bridge0: port 3(macsec1) entered blocking state [ 1186.102938][T16268] bridge0: port 3(macsec1) entered disabled state [ 1186.114404][T16268] bridge0: left allmulticast mode [ 1186.120111][T16268] bridge0: left promiscuous mode [ 1186.556989][T16287] netlink: 'syz.0.12371': attribute type 1 has an invalid length. [ 1186.590126][T16289] netlink: 'syz.1.12372': attribute type 1 has an invalid length. [ 1186.609351][T16289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12372'. [ 1186.650994][T16287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1186.728298][T16297] bond3: (slave geneve2): making interface the new active one [ 1186.752710][T16297] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1186.772348][ T7960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.782215][ T7960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.806637][ T7982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.839933][ T7982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.946092][T16307] FAULT_INJECTION: forcing a failure. [ 1186.946092][T16307] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.962577][T16307] CPU: 0 UID: 0 PID: 16307 Comm: syz.4.12376 Not tainted syzkaller #0 PREEMPT(full) [ 1186.962607][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1186.962620][T16307] Call Trace: [ 1186.962629][T16307] [ 1186.962639][T16307] dump_stack_lvl+0xe8/0x150 [ 1186.962672][T16307] should_fail_ex+0x412/0x560 [ 1186.962709][T16307] should_failslab+0xa8/0x100 [ 1186.962739][T16307] ? dst_alloc+0x105/0x170 [ 1186.962769][T16307] kmem_cache_alloc_noprof+0x87/0x650 [ 1186.962806][T16307] dst_alloc+0x105/0x170 [ 1186.962840][T16307] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 1186.962878][T16307] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1186.962906][T16307] ip_route_output_key_hash+0x18d/0x2a0 [ 1186.962932][T16307] ? ns_capable+0x89/0xe0 [ 1186.962957][T16307] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1186.963002][T16307] ip_route_output_flow+0x2a/0x150 [ 1186.963025][T16307] ? security_sk_classify_flow+0x6d/0x150 [ 1186.963054][T16307] udp_sendmsg+0x154a/0x22f0 [ 1186.963101][T16307] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1186.963132][T16307] ? __pfx_udp_sendmsg+0x10/0x10 [ 1186.963158][T16307] ? tomoyo_write_log2+0x250/0x910 [ 1186.963198][T16307] ? tomoyo_supervisor+0x4cb/0x1570 [ 1186.963246][T16307] ? get_random_u32+0x497/0x8b0 [ 1186.963269][T16307] ? lockdep_hardirqs_on+0x7a/0x110 [ 1186.963295][T16307] ? get_random_u32+0x13a/0x8b0 [ 1186.963316][T16307] ? get_random_u32+0x4ce/0x8b0 [ 1186.963349][T16307] udpv6_sendmsg+0xd1c/0x2560 [ 1186.963386][T16307] ? __lock_acquire+0x6b5/0x2cf0 [ 1186.963422][T16307] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1186.963458][T16307] ? ip6_datagram_release_cb+0x7c/0x550 [ 1186.963507][T16307] ? inet_send_prepare+0x1b9/0x270 [ 1186.963541][T16307] ? inet_send_prepare+0x1b9/0x270 [ 1186.963567][T16307] ? __local_bh_enable_ip+0xd0/0x130 [ 1186.963591][T16307] ? inet_send_prepare+0x1b9/0x270 [ 1186.963625][T16307] ? inet6_sendmsg+0xe4/0x120 [ 1186.963647][T16307] ____sys_sendmsg+0x62c/0xad0 [ 1186.963685][T16307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1186.963722][T16307] ? import_iovec+0x73/0xa0 [ 1186.963749][T16307] ___sys_sendmsg+0x2a5/0x360 [ 1186.963775][T16307] ? __lock_acquire+0x6b5/0x2cf0 [ 1186.963802][T16307] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.963869][T16307] ? __fget_files+0x2a/0x420 [ 1186.963889][T16307] ? __fget_files+0x3a0/0x420 [ 1186.963921][T16307] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1186.963951][T16307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1186.963990][T16307] ? __pfx_ksys_write+0x10/0x10 [ 1186.964029][T16307] do_syscall_64+0x14d/0xf80 [ 1186.964055][T16307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.964075][T16307] ? trace_irq_disable+0x37/0x100 [ 1186.964099][T16307] ? clear_bhb_loop+0x40/0x90 [ 1186.964124][T16307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.964145][T16307] RIP: 0033:0x7fc8def9c629 [ 1186.964164][T16307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.964181][T16307] RSP: 002b:00007fc8dff19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.964201][T16307] RAX: ffffffffffffffda RBX: 00007fc8df215fa0 RCX: 00007fc8def9c629 [ 1186.964217][T16307] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1186.964231][T16307] RBP: 00007fc8dff19090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.964244][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.964257][T16307] R13: 00007fc8df216038 R14: 00007fc8df215fa0 R15: 00007ffcc16ede88 [ 1186.964293][T16307] [ 1187.626122][T16325] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12382'. [ 1187.636655][T16325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12382'. [ 1187.682493][T16323] batadv1: entered allmulticast mode [ 1187.885628][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5380 ms [ 1187.893740][ C0] lec:lec_tx_timeout: lec0 [ 1187.912264][T16357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12388'. [ 1188.040730][T16366] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1188.146478][T16370] xt_hashlimit: size too large, truncated to 1048576 [ 1188.179122][T16372] netlink: 'syz.4.12393': attribute type 4 has an invalid length. [ 1188.571987][T16392] netlink: 'syz.2.12399': attribute type 11 has an invalid length. [ 1188.600466][T16392] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.12399'. [ 1188.754134][T16399] netlink: 'syz.3.12400': attribute type 21 has an invalid length. [ 1188.763180][T16399] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12400'. [ 1188.977467][T16418] net_ratelimit: 1 callbacks suppressed [ 1188.977489][T16418] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1188.989753][T16418] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1188.996383][T16418] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1189.002912][T16418] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1189.009476][T16418] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1189.015993][T16418] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1189.022504][T16418] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1189.029059][T16418] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1189.035620][T16418] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1189.042153][T16418] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1189.171241][T16428] netlink: 'syz.4.12410': attribute type 19 has an invalid length. [ 1189.224364][T16428] netlink: 'syz.4.12410': attribute type 19 has an invalid length. [ 1189.525077][T16445] xt_TCPMSS: Only works on TCP SYN packets [ 1189.820320][T16466] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1189.843650][T16464] netlink: 'syz.1.12422': attribute type 3 has an invalid length. [ 1189.853120][T16466] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1189.877160][T16466] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1189.910174][T16476] netlink: 'syz.4.12423': attribute type 21 has an invalid length. [ 1189.971897][T16476] __nla_validate_parse: 7 callbacks suppressed [ 1189.971920][T16476] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12423'. [ 1190.350876][T16501] dvmrp6: entered allmulticast mode [ 1190.382580][T16507] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12434'. [ 1190.648033][T16519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12440'. [ 1190.670427][T16519] netlink: 43 bytes leftover after parsing attributes in process `syz.0.12440'. [ 1190.708051][T16519] netlink: 'syz.0.12440': attribute type 6 has an invalid length. [ 1190.718760][T16525] netlink: 'syz.2.12441': attribute type 21 has an invalid length. [ 1190.727321][T16526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12440'. [ 1190.746026][T16525] IPv6: NLM_F_CREATE should be specified when creating new route [ 1190.747903][T16519] netlink: 'syz.0.12440': attribute type 5 has an invalid length. [ 1190.771168][T16528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12444'. [ 1190.789778][T16519] netlink: 43 bytes leftover after parsing attributes in process `syz.0.12440'. [ 1190.842156][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12445'. [ 1190.913579][T16535] geneve2: entered promiscuous mode [ 1190.969911][T16540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12448'. [ 1190.984321][T16540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12448'. [ 1191.011940][T16540] gretap0: entered promiscuous mode [ 1191.024973][T16540] gretap0: left promiscuous mode [ 1191.198896][T16553] xt_hashlimit: size too large, truncated to 1048576 [ 1191.655509][T16567] vxcan1 speed is unknown, defaulting to 1000 [ 1192.480360][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1192.493786][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1192.502963][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1192.522061][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1192.534703][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1192.850451][T16610] team0: Port device team_slave_0 removed [ 1192.893768][T16628] netlink: 'syz.3.12476': attribute type 1 has an invalid length. [ 1192.992946][T16628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1193.206713][T16628] bond1: (slave gretap1): making interface the new active one [ 1193.217224][T16628] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1193.274044][T16611] vxcan1 speed is unknown, defaulting to 1000 [ 1193.454360][T16648] netlink: 'syz.1.12481': attribute type 2 has an invalid length. [ 1193.468489][T16648] netlink: 'syz.1.12481': attribute type 1 has an invalid length. [ 1193.479617][T16648] netlink: 'syz.1.12481': attribute type 1 has an invalid length. [ 1193.769163][ T7963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.930116][T16664] ipt_ECN: cannot use operation on non-tcp rule [ 1194.107532][ T7963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.257731][T16684] netlink: 'syz.3.12493': attribute type 15 has an invalid length. [ 1194.334337][ T7963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.409834][ T7960] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1194.419671][ T7960] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1194.470526][ T7960] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1194.492822][ T7960] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1194.608051][ T51] Bluetooth: hci2: command tx timeout [ 1194.653819][ T7963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1195.097972][T16611] chnl_net:caif_netlink_parms(): no params data found [ 1195.184348][T16733] bridge_slave_0: left allmulticast mode [ 1195.224143][T16733] bridge_slave_0: left promiscuous mode [ 1195.237929][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.241976][T16738] netlink: 'syz.1.12509': attribute type 11 has an invalid length. [ 1195.258720][T16738] __nla_validate_parse: 16 callbacks suppressed [ 1195.258737][T16738] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.12509'. [ 1195.292635][T16733] bridge_slave_1: left allmulticast mode [ 1195.305728][T16733] bridge_slave_1: left promiscuous mode [ 1195.312044][T16733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.344987][T16733] bond0: (slave bond_slave_0): Releasing backup interface [ 1195.383971][T16733] bond0: (slave bond_slave_1): Releasing backup interface [ 1195.408795][T16733] team0: Port device team_slave_0 removed [ 1195.426713][T16733] team0: Port device team_slave_1 removed [ 1195.433680][T16733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.442917][T16733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.461026][T16753] net_ratelimit: 15 callbacks suppressed [ 1195.461049][T16753] openvswitch: netlink: Missing valid actions attribute. [ 1195.475592][T16753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.488164][T16733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.497739][T16733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.683127][T16733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1195.824125][T16748] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1195.881241][T16754] syzkaller0: entered promiscuous mode [ 1195.910728][ T1969] IPVS: starting estimator thread 0... [ 1195.922082][T16754] syzkaller0: entered allmulticast mode [ 1196.017066][T16769] IPVS: using max 29 ests per chain, 69600 per kthread [ 1196.170918][T16781] validate_nla: 1 callbacks suppressed [ 1196.170940][T16781] netlink: 'syz.1.12516': attribute type 13 has an invalid length. [ 1196.308288][T16789] netlink: 'syz.0.12518': attribute type 1 has an invalid length. [ 1196.478806][ T7963] bond4 (unregistering): (slave erspan1): Releasing active interface [ 1196.493989][ T7963] erspan1 (unregistering): left promiscuous mode [ 1196.686721][ T51] Bluetooth: hci2: command tx timeout [ 1196.822891][ T7963] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 1196.832231][ T7963] bridge4 (unregistering): left promiscuous mode [ 1196.870909][ T7963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.881236][ T7963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.891542][ T7963] bond0 (unregistering): Released all slaves [ 1196.902561][ T7963] bond1 (unregistering): Released all slaves [ 1196.921115][ T7963] bond2 (unregistering): Released all slaves [ 1196.941613][ T7963] bond3 (unregistering): Released all slaves [ 1196.965136][ T7963] bond4 (unregistering): Released all slaves [ 1196.981155][ T7963] bond5 (unregistering): Released all slaves [ 1196.996470][ T7963] bond6 (unregistering): Released all slaves [ 1197.014404][ T7963] bond7 (unregistering): (slave veth5): Releasing active interface [ 1197.024347][ T7963] bond7 (unregistering): Released all slaves [ 1197.050915][ T7963] bond8 (unregistering): Released all slaves [ 1198.767742][ T51] Bluetooth: hci2: command tx timeout [ 1198.920056][T16789] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1198.981217][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.037376][ T7963] 9: left promiscuous mode [ 1199.115341][T16814] syzkaller0: entered promiscuous mode [ 1199.134602][T16814] syzkaller0: entered allmulticast mode [ 1199.214798][ T7963] tipc: Disabling bearer [ 1199.227898][ T7963] tipc: Left network mode [ 1199.392843][T16611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.400732][T16611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.422319][T16611] bridge_slave_0: entered allmulticast mode [ 1199.430774][T16611] bridge_slave_0: entered promiscuous mode [ 1199.496389][T16611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.513114][T16611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.536614][T16611] bridge_slave_1: entered allmulticast mode [ 1199.552494][T16611] bridge_slave_1: entered promiscuous mode [ 1199.683345][T16844] netlink: 'syz.1.12528': attribute type 3 has an invalid length. [ 1199.732472][T16611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.745756][T16844] netlink: 'syz.1.12528': attribute type 1 has an invalid length. [ 1199.783795][T16844] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1199.845117][T16611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.116618][T16611] team0: Port device team_slave_0 added [ 1200.164942][T16611] team0: Port device team_slave_1 added [ 1200.273930][T16872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12534'. [ 1200.302235][T16611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.313849][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.361355][T16611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.478627][T16611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.531547][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.592868][T16611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.666269][T16888] lo: entered promiscuous mode [ 1200.684308][T16888] tunl0: entered promiscuous mode [ 1200.708072][T16888] gre0: entered promiscuous mode [ 1200.742317][T16888] gretap0: entered promiscuous mode [ 1200.772199][T16888] erspan0: entered promiscuous mode [ 1200.794199][T16888] ip_vti0: entered promiscuous mode [ 1200.813243][T16886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1200.846205][ T51] Bluetooth: hci2: command tx timeout [ 1200.941629][ T7963] hsr_slave_0: left promiscuous mode [ 1200.948251][ T7963] hsr_slave_1: left promiscuous mode [ 1200.955293][ T7963] veth1_vlan: left allmulticast mode [ 1201.002322][ T7963] pim6reg527 (unregistering): left allmulticast mode [ 1201.076783][ T7963] pimreg3 (unregistering): left allmulticast mode [ 1201.284682][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12547'. [ 1201.295241][T16918] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12547'. [ 1201.372813][T16920] netlink: 'syz.1.12548': attribute type 11 has an invalid length. [ 1201.391446][ T7963] team0 (unregistering): Port device team_slave_1 removed [ 1201.408627][ T7963] team0 (unregistering): Port device team_slave_0 removed [ 1201.529233][ T7963] vcan0 (unregistering): left allmulticast mode [ 1201.609238][T16611] hsr_slave_0: entered promiscuous mode [ 1201.630013][T16611] hsr_slave_1: entered promiscuous mode [ 1201.657863][T16611] debugfs: 'hsr0' already exists in 'hsr' [ 1201.663662][T16611] Cannot create hsr debugfs directory [ 1201.718678][T16927] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 1201.985952][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12555'. [ 1202.106071][T16945] netlink: 'syz.3.12556': attribute type 1 has an invalid length. [ 1202.186257][T16945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1202.401932][ T7963] IPVS: stop unused estimator thread 0... [ 1202.638007][T16974] openvswitch: netlink: Flow actions attr not present in new flow. [ 1202.697362][T16976] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1202.866939][T16982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12567'. [ 1203.154171][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12572'. [ 1203.176429][T16998] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12572'. [ 1203.247583][T17005] tipc: Started in network mode [ 1203.252513][T17005] tipc: Node identity , cluster identity 4711 [ 1203.305254][T17005] tipc: Failed to set node id, please configure manually [ 1203.346330][T17005] tipc: Enabling of bearer rejected, failed to enable media [ 1203.363998][T16611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1203.400784][T16996] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 1203.411822][T16996] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 1203.420885][T16611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1203.458264][T16611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1203.478535][T16611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1203.745079][T16611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.757989][T17033] netlink: 165 bytes leftover after parsing attributes in process `syz.3.12580'. [ 1203.780063][T17034] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1203.831615][T16611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.870170][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.877417][ T7978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.972709][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.979957][ T7978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.078034][T17045] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.12583'. [ 1204.103417][T17046] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12582'. [ 1204.784329][T16611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.310200][T17109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1205.377687][T17109] lo: Caught tx_queue_len zero misconfig [ 1205.659222][T16611] veth0_vlan: entered promiscuous mode [ 1205.688252][T16611] veth1_vlan: entered promiscuous mode [ 1205.812566][T16611] veth0_macvtap: entered promiscuous mode [ 1205.840120][T16611] veth1_macvtap: entered promiscuous mode [ 1205.907180][T16611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1205.943579][T16611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1205.979206][ T7960] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.004883][ T7960] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.030353][ T7960] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.055364][T17147] __nla_validate_parse: 4 callbacks suppressed [ 1206.055384][T17147] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12606'. [ 1206.076873][ T7960] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.226430][ T7960] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1206.242276][ T7960] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1206.275105][ T7969] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1206.313921][ T7969] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1206.408884][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.438486][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.482580][T17161] dvmrp0: entered allmulticast mode [ 1206.562057][ T7978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.599312][ T7978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.646580][T17170] netlink: 'syz.2.12611': attribute type 1 has an invalid length. [ 1206.772522][T17170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1206.814502][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1206.942083][T17176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1206.963695][T17176] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1206.997205][T17176] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1207.015418][T17192] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12617'. [ 1207.093300][T17170] veth3: entered promiscuous mode [ 1207.102315][T17170] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1207.135063][T17177] vlan0: entered allmulticast mode [ 1207.144763][T17177] bond2: entered allmulticast mode [ 1207.610649][T17230] FAULT_INJECTION: forcing a failure. [ 1207.610649][T17230] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.635489][T17230] CPU: 0 UID: 0 PID: 17230 Comm: syz.2.12623 Not tainted syzkaller #0 PREEMPT(full) [ 1207.635519][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1207.635533][T17230] Call Trace: [ 1207.635542][T17230] [ 1207.635551][T17230] dump_stack_lvl+0xe8/0x150 [ 1207.635590][T17230] should_fail_ex+0x412/0x560 [ 1207.635626][T17230] should_failslab+0xa8/0x100 [ 1207.635656][T17230] ? skb_clone+0x212/0x3a0 [ 1207.635683][T17230] kmem_cache_alloc_noprof+0x87/0x650 [ 1207.635709][T17230] ? __netlink_lookup+0xc6/0x8b0 [ 1207.635738][T17230] skb_clone+0x212/0x3a0 [ 1207.635769][T17230] __netlink_deliver_tap+0x404/0x850 [ 1207.635805][T17230] ? netlink_deliver_tap+0x2e/0x1b0 [ 1207.635829][T17230] netlink_deliver_tap+0x19c/0x1b0 [ 1207.635852][T17230] netlink_unicast+0x7e3/0x9b0 [ 1207.635894][T17230] ? __pfx_netlink_unicast+0x10/0x10 [ 1207.635929][T17230] ? netlink_sendmsg+0x650/0xb40 [ 1207.635949][T17230] ? skb_put+0x11b/0x210 [ 1207.635979][T17230] netlink_sendmsg+0x813/0xb40 [ 1207.636012][T17230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.636038][T17230] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1207.636070][T17230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1207.636103][T17230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.636124][T17230] ____sys_sendmsg+0xa68/0xad0 [ 1207.636151][T17230] ? __might_fault+0xaf/0x130 [ 1207.636183][T17230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.636221][T17230] ? import_iovec+0x73/0xa0 [ 1207.636248][T17230] ___sys_sendmsg+0x2a5/0x360 [ 1207.636274][T17230] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.636302][T17230] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.636377][T17230] ? __fget_files+0x2a/0x420 [ 1207.636398][T17230] ? __fget_files+0x3a0/0x420 [ 1207.636431][T17230] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1207.636461][T17230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1207.636499][T17230] ? __pfx_ksys_write+0x10/0x10 [ 1207.636538][T17230] do_syscall_64+0x14d/0xf80 [ 1207.636565][T17230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.636586][T17230] ? trace_irq_disable+0x37/0x100 [ 1207.636611][T17230] ? clear_bhb_loop+0x40/0x90 [ 1207.636637][T17230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.636658][T17230] RIP: 0033:0x7f93d199c629 [ 1207.636677][T17230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.636694][T17230] RSP: 002b:00007f93d2783028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.636717][T17230] RAX: ffffffffffffffda RBX: 00007f93d1c15fa0 RCX: 00007f93d199c629 [ 1207.636732][T17230] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1207.636746][T17230] RBP: 00007f93d2783090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.636760][T17230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.636771][T17230] R13: 00007f93d1c16038 R14: 00007f93d1c15fa0 R15: 00007ffe8f71b018 [ 1207.636801][T17230] [ 1208.167508][T17244] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12625'. [ 1208.201005][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12628'. [ 1208.235984][T17245] netlink: 'syz.2.12629': attribute type 1 has an invalid length. [ 1208.264057][T17244] syzkaller1: entered promiscuous mode [ 1208.270606][T17244] syzkaller1: entered allmulticast mode [ 1208.290828][T17245] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12629'. [ 1208.306494][T17244] syzkaller1: left promiscuous mode [ 1208.311763][T17244] syzkaller1: left allmulticast mode [ 1208.336748][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12629'. [ 1208.406284][T17256] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 1208.472519][T17258] netlink: 'syz.4.12631': attribute type 28 has an invalid length. [ 1208.481706][T17258] netlink: 'syz.4.12631': attribute type 3 has an invalid length. [ 1208.497731][T17258] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12631'. [ 1208.675980][T17272] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12634'. [ 1208.711659][T17270] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12634'. [ 1208.986547][T17281] ip6tnl0: Caught tx_queue_len zero misconfig [ 1209.523389][T17313] lo: entered promiscuous mode [ 1209.546429][T17313] netlink: 'syz.3.12645': attribute type 2 has an invalid length. [ 1209.554506][T17313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1209.729864][T17332] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1210.095470][T17352] netlink: 'syz.1.12659': attribute type 4 has an invalid length. [ 1210.145083][T17358] Cannot find add_set index 1 as target [ 1210.159803][T17356] pimreg: entered allmulticast mode [ 1210.178913][T17359] netlink: 'syz.4.12661': attribute type 3 has an invalid length. [ 1210.316036][T17369] x_tables: duplicate underflow at hook 1 [ 1210.473738][T17378] netlink: 'syz.3.12670': attribute type 4 has an invalid length. [ 1210.672067][T17391] syzkaller0: entered promiscuous mode [ 1210.677891][T17391] syzkaller0: entered allmulticast mode [ 1210.724911][ T7978] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.750777][ T7978] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.774764][ T7978] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.789078][ T7978] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.268760][T17422] __nla_validate_parse: 13 callbacks suppressed [ 1211.268780][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12681'. [ 1213.072925][T17442] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12690'. [ 1213.610567][T17473] tc_dump_action: action bad kind [ 1213.626798][T17474] FAULT_INJECTION: forcing a failure. [ 1213.626798][T17474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.645491][T17474] CPU: 0 UID: 0 PID: 17474 Comm: syz.4.12697 Not tainted syzkaller #0 PREEMPT(full) [ 1213.645520][T17474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1213.645535][T17474] Call Trace: [ 1213.645544][T17474] [ 1213.645554][T17474] dump_stack_lvl+0xe8/0x150 [ 1213.645591][T17474] should_fail_ex+0x412/0x560 [ 1213.645627][T17474] _copy_from_user+0x2d/0xb0 [ 1213.645650][T17474] kstrtouint_from_user+0xd6/0x180 [ 1213.645682][T17474] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1213.645729][T17474] proc_fail_nth_write+0x8e/0x210 [ 1213.645757][T17474] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1213.645789][T17474] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1213.645819][T17474] vfs_write+0x29a/0xb90 [ 1213.645855][T17474] ? __pfx_vfs_write+0x10/0x10 [ 1213.645884][T17474] ? __fget_files+0x2a/0x420 [ 1213.645911][T17474] ? __fget_files+0x3a0/0x420 [ 1213.645930][T17474] ? __fget_files+0x2a/0x420 [ 1213.645962][T17474] ksys_write+0x150/0x270 [ 1213.645992][T17474] ? __pfx_ksys_write+0x10/0x10 [ 1213.646032][T17474] do_syscall_64+0x14d/0xf80 [ 1213.646060][T17474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.646081][T17474] ? trace_irq_disable+0x37/0x100 [ 1213.646105][T17474] ? clear_bhb_loop+0x40/0x90 [ 1213.646132][T17474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.646153][T17474] RIP: 0033:0x7f18aa15cece [ 1213.646173][T17474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1213.646192][T17474] RSP: 002b:00007f18aafa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1213.646215][T17474] RAX: ffffffffffffffda RBX: 00007f18aafa86c0 RCX: 00007f18aa15cece [ 1213.646231][T17474] RDX: 0000000000000001 RSI: 00007f18aafa80a0 RDI: 0000000000000005 [ 1213.646245][T17474] RBP: 00007f18aafa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.646259][T17474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1213.646272][T17474] R13: 00007f18aa416128 R14: 00007f18aa416090 R15: 00007ffc286734b8 [ 1213.646309][T17474] [ 1216.413172][T17459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1216.596478][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12706'. [ 1216.622804][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12705'. [ 1216.670134][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12705'. [ 1216.694524][T17504] netlink: 'syz.4.12707': attribute type 11 has an invalid length. [ 1216.704206][T17504] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12707'. [ 1216.770872][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12707'. [ 1217.177594][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12720'. [ 1217.195005][T17531] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1217.205814][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12720'. [ 1217.233174][T17531] netlink: 'syz.1.12719': attribute type 21 has an invalid length. [ 1217.338073][T17538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12723'. [ 1217.352432][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12723'. [ 1217.555789][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12729'. [ 1217.700268][T17551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.708043][T17551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.820255][T17551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.842376][T17551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.138594][ T7970] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1218.156988][ T7970] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1218.206327][ T7970] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.222498][T17571] syzkaller0: entered promiscuous mode [ 1218.237494][T17571] syzkaller0: entered allmulticast mode [ 1218.257796][ T7970] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1218.275721][ T7970] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1218.284749][ T7970] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.340841][ T7970] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1218.359986][ T7970] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1218.385854][ T7970] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.425332][T17582] netlink: 'syz.3.12735': attribute type 21 has an invalid length. [ 1218.448595][T17576] vlan2: entered allmulticast mode [ 1218.457607][T17576] gretap0: entered allmulticast mode [ 1218.463245][T17576] bridge0: port 3(vlan2) entered blocking state [ 1218.470361][T17576] bridge0: port 3(vlan2) entered disabled state [ 1218.483365][T17576] vlan2: entered promiscuous mode [ 1218.494391][T17576] gretap0: entered promiscuous mode [ 1218.502800][T17585] syz.3.12735: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1218.518705][T17585] CPU: 1 UID: 0 PID: 17585 Comm: syz.3.12735 Not tainted syzkaller #0 PREEMPT(full) [ 1218.518736][T17585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1218.518750][T17585] Call Trace: [ 1218.518760][T17585] [ 1218.518771][T17585] dump_stack_lvl+0xe8/0x150 [ 1218.518806][T17585] warn_alloc+0x249/0x340 [ 1218.518839][T17585] ? stack_trace_save+0xa9/0x100 [ 1218.518883][T17585] ? __pfx_warn_alloc+0x10/0x10 [ 1218.518921][T17585] ? kasan_save_track+0x4f/0x80 [ 1218.518947][T17585] ? kasan_save_track+0x3e/0x80 [ 1218.518973][T17585] ? __kasan_kmalloc+0x93/0xb0 [ 1218.518999][T17585] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1218.519026][T17585] ? xskq_create+0x56/0x170 [ 1218.519050][T17585] ? xsk_setsockopt+0x54c/0x990 [ 1218.519070][T17585] ? do_sock_setsockopt+0x17c/0x1b0 [ 1218.519095][T17585] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1218.519119][T17585] ? do_syscall_64+0x14d/0xf80 [ 1218.519152][T17585] __vmalloc_node_range_noprof+0x132/0x1730 [ 1218.519217][T17585] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1218.519253][T17585] ? __kasan_kmalloc+0x93/0xb0 [ 1218.519289][T17585] vmalloc_user_noprof+0xad/0xe0 [ 1218.519317][T17585] ? xskq_create+0xbf/0x170 [ 1218.519343][T17585] xskq_create+0xbf/0x170 [ 1218.519371][T17585] xsk_init_queue+0xad/0x110 [ 1218.519397][T17585] xsk_setsockopt+0x54c/0x990 [ 1218.519424][T17585] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1218.519448][T17585] ? __pfx_aa_sk_perm+0x10/0x10 [ 1218.519480][T17585] ? aa_sock_opt_perm+0xff/0x1a0 [ 1218.519514][T17585] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1218.519543][T17585] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1218.519568][T17585] do_sock_setsockopt+0x17c/0x1b0 [ 1218.519600][T17585] __x64_sys_setsockopt+0x13d/0x1b0 [ 1218.519632][T17585] do_syscall_64+0x14d/0xf80 [ 1218.519660][T17585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.519681][T17585] ? trace_irq_disable+0x37/0x100 [ 1218.519705][T17585] ? clear_bhb_loop+0x40/0x90 [ 1218.519732][T17585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.519752][T17585] RIP: 0033:0x7f843d79c629 [ 1218.519773][T17585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.519792][T17585] RSP: 002b:00007f843b9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1218.519816][T17585] RAX: ffffffffffffffda RBX: 00007f843da16180 RCX: 00007f843d79c629 [ 1218.519832][T17585] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 1218.519846][T17585] RBP: 00007f843d832b39 R08: 0000000000000004 R09: 0000000000000000 [ 1218.519860][T17585] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.519881][T17585] R13: 00007f843da16218 R14: 00007f843da16180 R15: 00007ffc758b99d8 [ 1218.519917][T17585] [ 1218.519928][T17585] Mem-Info: [ 1218.788303][T17588] netlink: 'syz.3.12735': attribute type 5 has an invalid length. [ 1218.805109][T17585] active_anon:12014 inactive_anon:0 isolated_anon:0 [ 1218.805109][T17585] active_file:2569 inactive_file:41269 isolated_file:0 [ 1218.805109][T17585] unevictable:768 dirty:126 writeback:0 [ 1218.805109][T17585] slab_reclaimable:13185 slab_unreclaimable:119708 [ 1218.805109][T17585] mapped:30785 shmem:1387 pagetables:3466 [ 1218.805109][T17585] sec_pagetables:0 bounce:0 [ 1218.805109][T17585] kernel_misc_reclaimable:0 [ 1218.805109][T17585] free:1279119 free_pcp:24310 free_cma:0 [ 1218.851730][ T7970] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1218.864444][T17585] Node 0 active_anon:48040kB inactive_anon:0kB active_file:10276kB inactive_file:164868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49484kB dirty:448kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15572kB pagetables:13712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1218.905160][ T7970] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1218.932496][T17585] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73728kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1218.957573][ T7970] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.977229][T17585] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1219.011292][T17585] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1219.035108][T17585] Node 0 DMA32 free:1388736kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48084kB inactive_anon:0kB active_file:10276kB inactive_file:164868kB unevictable:1536kB writepending:452kB zspages:0kB present:3129332kB managed:2554008kB mlocked:0kB bounce:0kB free_pcp:36928kB local_pcp:21312kB free_cma:0kB [ 1219.089494][T17585] lowmem_reserve[]: 0 0 0 0 0 [ 1219.091377][T17590] syzkaller0: entered promiscuous mode [ 1219.094625][T17585] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1219.102477][T17590] syzkaller0: entered allmulticast mode [ 1219.140097][T17585] lowmem_reserve[]: 0 0 0 0 0 [ 1219.183085][T17585] Node 1 Normal free:3716608kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60328kB local_pcp:28016kB free_cma:0kB [ 1219.256581][T17585] lowmem_reserve[]: 0 0 0 0 0 [ 1219.265522][T17585] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 1219.343820][T17585] Node 0 DMA32: 11366*4kB (UME) 9447*8kB (UME) 6375*16kB (UME) 790*32kB (UME) 399*64kB (UME) 894*128kB (UME) 776*256kB (UME) 472*512kB (UME) 353*1024kB (UME) 87*2048kB (U) 5*4096kB (U) = 1388736kB [ 1219.380278][T17585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1219.395020][T17585] Node 1 Normal: 4*4kB (U) 4*8kB (UM) 17*16kB (UME) 16*32kB (UME) 13*64kB (UME) 13*128kB (UME) 7*256kB (UM) 9*512kB (UME) 2*1024kB (UM) 5*2048kB (UE) 902*4096kB (M) = 3716608kB [ 1219.413953][T17585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.424352][T17585] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1219.467479][T17585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1219.505993][T17585] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1219.515470][T17585] 45206 total pagecache pages [ 1219.526258][T17585] 0 pages in swap cache [ 1219.530473][T17585] Free swap = 124996kB [ 1219.541254][T17585] Total swap = 124996kB [ 1219.547656][T17585] 2097051 pages RAM [ 1219.551900][T17585] 0 pages HighMem/MovableOnly [ 1219.558173][T17585] 426703 pages reserved [ 1219.562535][T17585] 0 pages cma reserved [ 1219.686321][T17615] syzkaller0: entered promiscuous mode [ 1219.716866][T17615] syzkaller0: entered allmulticast mode [ 1219.827899][T17625] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 1219.993252][T17631] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1220.098796][T17637] vxcan1 speed is unknown, defaulting to 1000 [ 1220.448160][T17656] syzkaller1: entered promiscuous mode [ 1220.461895][T17656] syzkaller1: entered allmulticast mode [ 1220.634535][T17665] tipc: Started in network mode [ 1220.645926][T17665] tipc: Node identity ac14140f, cluster identity 4711 [ 1220.660637][T17665] tipc: New replicast peer: 255.255.255.255 [ 1220.674649][T17665] tipc: Enabled bearer , priority 10 [ 1221.014347][T17673] bond2: entered promiscuous mode [ 1221.036851][T17673] bond2: entered allmulticast mode [ 1221.075917][T17673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1221.113187][T17688] syzkaller0: entered promiscuous mode [ 1221.128541][T17688] syzkaller0: entered allmulticast mode [ 1221.786464][ T5893] tipc: Node number set to 2886997007 [ 1221.906251][T17734] tipc: Started in network mode [ 1221.919001][T17734] tipc: Node identity faa51056ebca, cluster identity 4711 [ 1221.936095][T17734] tipc: Enabled bearer , priority 0 [ 1221.975464][T17735] syzkaller0: entered promiscuous mode [ 1221.986555][T17735] syzkaller0: entered allmulticast mode [ 1222.027703][T17738] __nla_validate_parse: 10 callbacks suppressed [ 1222.027726][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12776'. [ 1222.065130][T17738] netlink: 50 bytes leftover after parsing attributes in process `syz.3.12776'. [ 1222.088696][T17738] netlink: 50 bytes leftover after parsing attributes in process `syz.3.12776'. [ 1222.124183][T17735] tipc: Resetting bearer [ 1222.177463][T17735] tipc: Disabling bearer [ 1222.392504][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12780'. [ 1222.486815][T17760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12782'. [ 1222.580410][T17765] syzkaller0: entered promiscuous mode [ 1222.597445][T17765] syzkaller0: entered allmulticast mode [ 1223.156482][T17798] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.12792'. [ 1223.257304][T17800] netlink: 'syz.2.12794': attribute type 1 has an invalid length. [ 1223.338895][T17800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1223.349139][T17809] netlink: 'syz.3.12796': attribute type 39 has an invalid length. [ 1223.439227][T17800] netlink: 'syz.2.12794': attribute type 1 has an invalid length. [ 1223.493770][T17800] netlink: 'syz.2.12794': attribute type 2 has an invalid length. [ 1223.511070][T17808] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1223.522079][T17796] vxcan1 speed is unknown, defaulting to 1000 [ 1223.626531][T17810] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1223.736539][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12800'. [ 1224.048474][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12802'. [ 1224.122636][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12802'. [ 1224.145401][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12802'. [ 1224.244143][T17836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1224.253154][T17829] syzkaller0: entered promiscuous mode [ 1224.259044][T17829] syzkaller0: entered allmulticast mode [ 1224.774229][T17874] hsr_slave_0 (unregistering): left promiscuous mode [ 1224.882243][T17871] syzkaller0: entered promiscuous mode [ 1224.911034][T17871] syzkaller0: entered allmulticast mode [ 1225.091722][T17897] netlink: 'syz.3.12812': attribute type 11 has an invalid length. [ 1225.113718][T17895] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1225.295447][T17903] No such timeout policy "syz0" [ 1225.675494][T17931] netlink: 'syz.0.12826': attribute type 16 has an invalid length. [ 1225.684123][T17931] netlink: 'syz.0.12826': attribute type 17 has an invalid length. [ 1225.734778][T17932] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1225.832041][ T7966] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.855760][ T7966] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.887494][ T7966] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.915667][ T7966] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.142939][T17955] syzkaller0: entered promiscuous mode [ 1226.153093][T17955] syzkaller0: entered allmulticast mode [ 1226.824775][T17999] syzkaller0: entered promiscuous mode [ 1226.838196][T17999] syzkaller0: entered allmulticast mode [ 1240.846172][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1241.437054][T13829] lec:lec_start_xmit: lec0:No lecd attached [ 1243.889263][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1246.925705][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 1246.933870][ C0] lec:lec_tx_timeout: lec0 [ 1246.939716][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1249.207649][T18015] tipc: Started in network mode [ 1249.212726][T18015] tipc: Node identity d237f8f20926, cluster identity 4711 [ 1249.222258][T18015] tipc: Enabled bearer , priority 0 [ 1249.237085][T18015] syzkaller0: entered promiscuous mode [ 1249.255742][T18015] syzkaller0: entered allmulticast mode [ 1249.269038][T18015] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1249.381643][T18015] tipc: Resetting bearer [ 1249.381935][T18027] __nla_validate_parse: 12 callbacks suppressed [ 1249.381999][T18027] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12858'. [ 1249.405335][T18025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12856'. [ 1249.417189][T18025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12856'. [ 1249.429103][T18013] tipc: Resetting bearer [ 1249.510813][T18013] tipc: Disabling bearer [ 1249.539384][T18028] netlink: 'syz.0.12858': attribute type 4 has an invalid length. [ 1249.805351][T18037] syzkaller0: entered promiscuous mode [ 1249.823576][T18037] syzkaller0: entered allmulticast mode [ 1249.830556][T18041] openvswitch: netlink: Message has 8 unknown bytes. [ 1249.848705][T18041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.056388][T18044] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1250.062569][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12867'. [ 1250.076217][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12867'. [ 1250.087979][T18044] syzkaller0: entered promiscuous mode [ 1250.094108][T18044] syzkaller0: entered allmulticast mode [ 1250.457521][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12873'. [ 1250.503429][T18073] netlink: 'syz.0.12873': attribute type 12 has an invalid length. [ 1250.529669][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12873'. [ 1250.586099][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12878'. [ 1250.602406][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12873'. [ 1250.632368][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12873'. [ 1250.817486][T18099] netlink: 'syz.0.12882': attribute type 1 has an invalid length. [ 1250.834429][T18100] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1251.476640][T18135] netlink: 'syz.0.12894': attribute type 15 has an invalid length. [ 1251.530399][ T7972] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1251.539560][T18135] netlink: 'syz.0.12894': attribute type 15 has an invalid length. [ 1251.575821][ T7972] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1251.589147][ T7972] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1251.619383][ T7972] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1251.696141][T18109] lec:lec_atm_close: lec0: Shut down! [ 1251.826627][T18149] netlink: 'syz.0.12898': attribute type 2 has an invalid length. [ 1251.936267][T18154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1251.990063][T18159] syzkaller1: entered promiscuous mode [ 1252.021528][T18159] syzkaller1: entered allmulticast mode [ 1252.080954][T18172] nbd: must specify an index to disconnect [ 1252.319973][T18185] syzkaller0: entered promiscuous mode [ 1252.326557][T18185] syzkaller0: entered allmulticast mode [ 1252.339764][T18183] syzkaller0: entered promiscuous mode [ 1252.346485][T18183] syzkaller0: entered allmulticast mode [ 1252.737519][ T7972] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.767064][ T7972] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.860922][ T7972] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.874546][ T7972] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.943236][T18221] netlink: 'syz.0.12923': attribute type 10 has an invalid length. [ 1252.955038][T18221] netlink: 'syz.0.12923': attribute type 10 has an invalid length. [ 1252.977343][T18216] tipc: Enabling of bearer rejected, failed to enable media [ 1252.996025][T18215] tipc: Enabling of bearer rejected, failed to enable media [ 1253.077785][T18229] netlink: 'syz.2.12925': attribute type 1 has an invalid length. [ 1253.124888][T18229] bond4: entered promiscuous mode [ 1253.156849][T18229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1253.179669][T18235] xt_hashlimit: size too large, truncated to 1048576 [ 1253.213921][T18238] bond4: (slave bridge1): making interface the new active one [ 1253.224279][T18238] bridge1: entered promiscuous mode [ 1253.234459][T18238] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1253.476990][T18247] syzkaller0: entered promiscuous mode [ 1253.496567][T18247] syzkaller0: entered allmulticast mode [ 1253.829914][T18252] bond1: entered promiscuous mode [ 1253.857619][T18252] bond1: entered allmulticast mode [ 1253.871210][T18252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1253.953496][T18266] netlink: 'syz.0.12934': attribute type 2 has an invalid length. [ 1254.481435][T18286] IPVS: Unknown mcast interface: pim6reg1 [ 1254.922443][T18307] netlink: 'syz.4.12949': attribute type 1 has an invalid length. [ 1255.098605][T18315] netlink: 'syz.1.12952': attribute type 1 has an invalid length. [ 1255.375801][ T30] audit: type=1800 audit(1771353007.763:6): pid=18325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12954" name="memory.events" dev="tmpfs" ino=841 res=0 errno=0 [ 1255.698435][T18340] syzkaller0: entered promiscuous mode [ 1255.704031][T18340] syzkaller0: entered allmulticast mode [ 1256.051480][T18362] netlink: 'syz.3.12968': attribute type 1 has an invalid length. [ 1256.075887][T18366] __nla_validate_parse: 8 callbacks suppressed [ 1256.075908][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12969'. [ 1256.116583][T18372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12966'. [ 1256.127978][T18362] bond2: entered promiscuous mode [ 1256.141905][ T1969] IPVS: starting estimator thread 0... [ 1256.152379][T18362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1256.160901][T18370] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12964'. [ 1256.181486][T18366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12969'. [ 1256.212709][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1256.220632][T18374] bond2: (slave bridge3): making interface the new active one [ 1256.246544][T18373] IPVS: using max 29 ests per chain, 69600 per kthread [ 1256.282556][T18374] bridge3: entered promiscuous mode [ 1256.321521][T18374] bridge3: left promiscuous mode [ 1256.409814][T18384] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.12971'. [ 1256.584676][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12975'. [ 1256.664412][T18400] syzkaller0: entered promiscuous mode [ 1256.678901][T18400] syzkaller0: entered allmulticast mode [ 1256.800722][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12980'. [ 1256.925684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 1256.933794][ C0] lec:lec_tx_timeout: lec0 [ 1257.090337][T18433] tipc: Started in network mode [ 1257.096018][T18433] tipc: Node identity ac14140f, cluster identity 4711 [ 1257.103279][T18433] tipc: New replicast peer: 255.255.255.255 [ 1257.111560][T18433] tipc: Enabled bearer , priority 10 [ 1257.790635][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12991'. [ 1257.911130][T18448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12991'. [ 1257.970168][T18458] syzkaller0: entered promiscuous mode [ 1257.976791][T18458] syzkaller0: entered allmulticast mode [ 1258.105287][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12995'. [ 1258.116878][ T6015] tipc: Node number set to 2886997007 [ 1258.245921][T18475] syzkaller0: entered promiscuous mode [ 1258.251471][T18475] syzkaller0: entered allmulticast mode [ 1258.301376][T18480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.794125][T18504] 8021q: VLANs not supported on ip6tnl0 [ 1258.810134][T18503] syzkaller0: entered promiscuous mode [ 1258.832486][T18503] syzkaller0: entered allmulticast mode [ 1258.914284][T18511] netlink: 'syz.3.13010': attribute type 2 has an invalid length. [ 1259.552054][T18545] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1259.682285][T18551] syzkaller0: entered promiscuous mode [ 1259.688468][T18551] syzkaller0: entered allmulticast mode [ 1259.855113][T18560] nbd: socks must be embedded in a SOCK_ITEM attr [ 1259.897691][T18563] tipc: MTU too low for tipc bearer [ 1260.006660][T18569] sctp: [Deprecated]: syz.1.13033 (pid 18569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1260.006660][T18569] Use struct sctp_sack_info instead [ 1260.538931][T18590] vxcan1 speed is unknown, defaulting to 1000 [ 1260.594629][T18601] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1261.042828][T18620] syz_tun: entered promiscuous mode [ 1261.066672][T18620] erspan0: entered promiscuous mode [ 1261.235800][T18628] __nla_validate_parse: 12 callbacks suppressed [ 1261.235823][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13055'. [ 1261.282981][T18628] tipc: Enabling of bearer rejected, failed to enable media [ 1261.326354][ T1974] IPVS: starting estimator thread 0... [ 1261.417381][T18635] IPVS: using max 30 ests per chain, 72000 per kthread [ 1261.714721][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1261.762308][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1261.847104][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1262.113117][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13068'. [ 1262.151583][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13068'. [ 1262.186098][T18670] netlink: 272 bytes leftover after parsing attributes in process `syz.1.13069'. [ 1262.203594][T18664] vxcan1 speed is unknown, defaulting to 1000 [ 1262.631506][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13075'. [ 1262.808636][T18688] netlink: 360 bytes leftover after parsing attributes in process `syz.0.13077'. [ 1262.967579][T18696] tipc: Enabled bearer , priority 0 [ 1262.975391][T18696] syzkaller0: entered promiscuous mode [ 1262.981786][T18696] syzkaller0: entered allmulticast mode [ 1263.016175][T18651] infiniband syz1: set active [ 1263.020995][T18651] infiniband syz1: added batadv0 [ 1263.048920][T18651] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1263.054059][T18696] tipc: Resetting bearer [ 1263.071728][T18651] infiniband syz1: Couldn't open port 1 [ 1263.132702][ T6015] batadv0 speed is unknown, defaulting to 1000 [ 1263.141592][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13083'. [ 1263.152035][T18695] tipc: Resetting bearer [ 1263.162848][T18651] RDS/IB: syz1: added [ 1263.178677][T18651] smc: adding ib device syz1 with port count 1 [ 1263.185350][T18651] smc: ib device syz1 port 1 has no pnetid [ 1263.204973][T18695] tipc: Disabling bearer [ 1263.240485][T18660] lo: left promiscuous mode [ 1263.281125][T18660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.290442][T18660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.315880][T18660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1263.338937][ T6015] batadv0 speed is unknown, defaulting to 1000 [ 1263.384929][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1263.872780][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1263.997849][T18725] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1264.029948][T18729] block nbd0: not configured, cannot reconfigure [ 1264.278008][T18738] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1264.431205][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1264.558437][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13102'. [ 1264.791472][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1265.095129][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1265.341445][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13111'. [ 1265.352142][T18774] bridge_slave_0: left allmulticast mode [ 1265.358839][T18774] bridge_slave_0: left promiscuous mode [ 1265.364905][T18774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.375897][T18774] bridge_slave_1: left allmulticast mode [ 1265.381680][T18774] bridge_slave_1: left promiscuous mode [ 1265.388072][T18774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.409162][T18774] bond0: (slave bond_slave_0): Releasing backup interface [ 1265.422384][T18774] bond0: (slave bond_slave_1): Releasing backup interface [ 1265.434244][T18774] team0: Port device team_slave_1 removed [ 1265.441824][T18774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.450100][T18774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.459406][T18774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1265.476534][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1265.684467][T18781] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1265.923350][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1266.384623][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1266.512541][T18815] batadv_slave_1: entered promiscuous mode [ 1266.520739][T18814] batadv_slave_1: left promiscuous mode [ 1266.835951][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1266.924340][T18837] netlink: 'syz.0.13142': attribute type 1 has an invalid length. [ 1266.936178][T18837] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13142'. [ 1266.948850][T18837] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13142'. [ 1266.996825][T18837] netlink: 'syz.0.13142': attribute type 1 has an invalid length. [ 1267.027411][T18837] netlink: 634 bytes leftover after parsing attributes in process `syz.0.13142'. [ 1267.282295][T18651] batadv0 speed is unknown, defaulting to 1000 [ 1267.484333][T18855] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13152'. [ 1267.656896][T18862] batadv2: entered promiscuous mode [ 1267.663072][T18862] batadv2: entered allmulticast mode [ 1267.707771][T18862] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1267.749238][T18723] vxcan1 speed is unknown, defaulting to 1000 [ 1267.978378][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13158'. [ 1268.459776][T18885] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1269.220855][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13170'. [ 1269.332719][T18912] vxcan1 speed is unknown, defaulting to 1000 [ 1269.428307][T18921] tipc: Cannot configure node identity twice [ 1269.468428][T18923] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1530049446/1530049448 [ 1269.517359][T18923] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1530049446/1530049447 [ 1269.573660][T18923] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1530049446/1530049448 [ 1269.620920][T18930] netlink: 'syz.1.13179': attribute type 4 has an invalid length. [ 1269.635749][T18923] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1530049446/1530049447 [ 1269.767565][T18912] batadv0 speed is unknown, defaulting to 1000 [ 1269.999003][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1270.844470][T18948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13183'. [ 1270.882389][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13188'. [ 1270.888526][T18948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13183'. [ 1271.000443][T18956] pimreg: entered allmulticast mode [ 1271.412960][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1271.418063][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1271.757982][T18974] udevd[18974]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1271.805187][T18974] udevd[18974]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1272.001529][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ef7c00: rx timeout, send abort [ 1272.010842][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ef7c00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 1272.057220][T18996] __nla_validate_parse: 1 callbacks suppressed [ 1272.057243][T18996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13203'. [ 1272.364013][T19009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.371814][T19009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.658659][T19009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.702634][T19009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.834087][T19009] bond1: left promiscuous mode [ 1272.840833][T19009] bond1: left allmulticast mode [ 1272.863207][ T1974] batadv0 speed is unknown, defaulting to 1000 [ 1272.870544][T14513] batadv0 speed is unknown, defaulting to 1000 [ 1272.877495][ T1974] syz1: Port: 1 Link DOWN [ 1272.966372][T19031] syzkaller0: entered promiscuous mode [ 1272.971928][T19031] syzkaller0: entered allmulticast mode [ 1272.979700][ T7972] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.989499][ T7972] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.998586][ T7972] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.009021][ T7972] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.286890][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ef6400: rx timeout, send abort [ 1273.295928][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ef6400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 1273.819941][T19073] netlink: 'syz.4.13219': attribute type 4 has an invalid length. [ 1275.092888][ T7972] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.102019][ T7972] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.111215][ T7972] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.120626][ T7972] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.131446][T19045] tipc: Enabled bearer , priority 0 [ 1275.139333][T19048] syzkaller0: entered promiscuous mode [ 1275.144845][T19048] syzkaller0: entered allmulticast mode [ 1275.203594][T19054] tipc: Resetting bearer [ 1275.220892][T19044] tipc: Resetting bearer [ 1275.286929][T19044] tipc: Disabling bearer [ 1275.772760][T19104] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1275.871094][T19111] syzkaller0: entered promiscuous mode [ 1275.884559][T19111] syzkaller0: entered allmulticast mode [ 1276.088169][T19122] netlink: 'syz.2.13233': attribute type 4 has an invalid length. [ 1276.550888][T19136] syzkaller0: entered promiscuous mode [ 1276.560171][T19136] syzkaller0: entered allmulticast mode [ 1276.589755][ T5886] IPVS: starting estimator thread 0... [ 1276.677441][T19152] IPVS: using max 25 ests per chain, 60000 per kthread [ 1279.080632][T19191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13248'. [ 1279.132838][T19206] tipc: Enabling of bearer rejected, failed to enable media [ 1279.186369][T19218] netlink: 'syz.0.13255': attribute type 58 has an invalid length. [ 1279.198329][T19218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13255'. [ 1279.360131][T19226] syzkaller0: entered promiscuous mode [ 1279.381398][T19226] syzkaller0: entered allmulticast mode [ 1279.529280][T19237] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13261'. [ 1279.559973][T19236] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13261'. [ 1279.690631][T19248] tipc: Enabled bearer , priority 0 [ 1279.710107][T19248] syzkaller0: entered promiscuous mode [ 1279.718115][T19248] syzkaller0: entered allmulticast mode [ 1279.726844][T19251] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1279.737911][T19251] syzkaller0: entered promiscuous mode [ 1279.743436][T19251] syzkaller0: entered allmulticast mode [ 1279.805317][T19248] tipc: Resetting bearer [ 1279.843185][T19246] tipc: Resetting bearer [ 1279.867199][T19246] tipc: Disabling bearer [ 1279.888866][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13269'. [ 1279.909108][T19254] syzkaller0: entered promiscuous mode [ 1279.916417][T19254] syzkaller0: entered allmulticast mode [ 1280.004788][T19258] syzkaller0: entered promiscuous mode [ 1280.014054][T19258] syzkaller0: entered allmulticast mode [ 1280.052680][T19269] netlink: 'syz.2.13272': attribute type 1 has an invalid length. [ 1280.060837][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13272'. [ 1280.071617][T19269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13272'. [ 1280.214595][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13274'. [ 1280.229494][T19275] syzkaller0: entered promiscuous mode [ 1280.235912][T19275] syzkaller0: entered allmulticast mode [ 1280.522541][T19291] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1280.532752][T19291] syzkaller0: entered promiscuous mode [ 1280.542944][T19291] syzkaller0: entered allmulticast mode [ 1280.652877][T19301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.674381][T19296] tipc: Enabled bearer , priority 0 [ 1280.729681][T19302] syzkaller0: entered promiscuous mode [ 1280.735237][T19302] syzkaller0: entered allmulticast mode [ 1280.776559][T19296] tipc: Resetting bearer [ 1280.833777][T19295] tipc: Resetting bearer [ 1280.885839][T19295] tipc: Disabling bearer [ 1280.907776][T19311] syzkaller0: entered promiscuous mode [ 1280.913319][T19311] syzkaller0: entered allmulticast mode [ 1280.958761][T19313] syzkaller0: entered promiscuous mode [ 1280.964318][T19313] syzkaller0: entered allmulticast mode [ 1281.097255][T19321] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13294'. [ 1281.266102][T19334] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1281.293139][T19334] syzkaller0: entered promiscuous mode [ 1281.326742][T19334] syzkaller0: entered allmulticast mode [ 1281.398049][T19341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.409215][T19341] netlink: 'syz.4.13301': attribute type 26 has an invalid length. [ 1281.417895][T19341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13301'. [ 1281.530492][T19348] tipc: Enabled bearer , priority 0 [ 1281.539211][T19348] syzkaller0: entered promiscuous mode [ 1281.544854][T19348] syzkaller0: entered allmulticast mode [ 1281.558919][T19348] tipc: Resetting bearer [ 1281.583194][T19346] tipc: Resetting bearer [ 1281.628116][T19346] tipc: Disabling bearer [ 1282.027210][T19374] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1282.195368][T19387] netlink: 'syz.4.13317': attribute type 1 has an invalid length. [ 1282.250052][T19387] netlink: 'syz.4.13317': attribute type 3 has an invalid length. [ 1282.322298][T19380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1282.723663][T19426] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1283.128504][T19446] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 1283.140468][T19446] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 1283.148924][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.3.13337 Not tainted syzkaller #0 PREEMPT(full) [ 1283.158424][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1283.168518][T19446] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 1283.175422][T19446] Code: c3 31 ff 89 c6 e8 16 9b c7 f7 85 db 74 5b e8 cd 96 c7 f7 eb 05 e8 c6 96 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 1283.195146][T19446] RSP: 0018:ffffc9000d51f5e0 EFLAGS: 00010202 [ 1283.201264][T19446] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff8880ac2d5ac0 [ 1283.209272][T19446] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1283.217286][T19446] RBP: 0000000080000000 R08: ffff8880ac2d5ac0 R09: 0000000000000003 [ 1283.225303][T19446] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 1283.233311][T19446] R13: 0000000000000000 R14: ffff88806bd74a58 R15: ffffffffffffffff [ 1283.241322][T19446] FS: 00007f843b9ee6c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1283.250300][T19446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1283.256937][T19446] CR2: 00007f843d671fc0 CR3: 0000000044cd8000 CR4: 00000000003526f0 [ 1283.264951][T19446] Call Trace: [ 1283.268280][T19446] [ 1283.271250][T19446] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1283.276928][T19446] ip_route_output_key_hash+0x18d/0x2a0 [ 1283.282529][T19446] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1283.288641][T19446] ? crng_fast_key_erasure+0x196/0x270 [ 1283.294150][T19446] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1283.300002][T19446] ip_route_output_flow+0x2a/0x150 [ 1283.305195][T19446] sctp_v4_get_dst+0x3f8/0x12b0 [ 1283.310130][T19446] ? crng_make_state+0x2c5/0x600 [ 1283.315106][T19446] ? lockdep_hardirqs_on+0x7a/0x110 [ 1283.320350][T19446] ? crng_make_state+0x36a/0x600 [ 1283.325337][T19446] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 1283.330664][T19446] ? _get_random_bytes+0x1e7/0x260 [ 1283.335826][T19446] ? dst_release+0x72/0x1b0 [ 1283.340376][T19446] sctp_transport_route+0x118/0x2f0 [ 1283.345609][T19446] sctp_assoc_add_peer+0x650/0x13b0 [ 1283.350861][T19446] sctp_connect_new_asoc+0x329/0x6b0 [ 1283.356192][T19446] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1283.362045][T19446] ? sctp_get_af_specific+0x29/0x80 [ 1283.367293][T19446] ? sctp_inet6_send_verify+0x80/0x300 [ 1283.372793][T19446] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1283.378646][T19446] __sctp_connect+0x5cb/0xdc0 [ 1283.383375][T19446] ? __pfx___sctp_connect+0x10/0x10 [ 1283.388616][T19446] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1283.394472][T19446] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1283.400322][T19446] sctp_getsockopt_connectx3+0x227/0x360 [ 1283.405997][T19446] ? lock_sock_nested+0x6a/0x100 [ 1283.410978][T19446] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1283.417185][T19446] ? __local_bh_enable_ip+0xd0/0x130 [ 1283.422511][T19446] sctp_getsockopt+0x984/0xb90 [ 1283.427304][T19446] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1283.433224][T19446] do_sock_getsockopt+0x2d3/0x3f0 [ 1283.438276][T19446] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1283.443840][T19446] ? __fget_files+0x3a0/0x420 [ 1283.448543][T19446] ? __fget_files+0x2a/0x420 [ 1283.453174][T19446] __x64_sys_getsockopt+0x1a4/0x240 [ 1283.458414][T19446] do_syscall_64+0x14d/0xf80 [ 1283.463036][T19446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.469137][T19446] ? trace_irq_disable+0x37/0x100 [ 1283.474180][T19446] ? clear_bhb_loop+0x40/0x90 [ 1283.478882][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.484801][T19446] RIP: 0033:0x7f843d79c629 [ 1283.489231][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.508955][T19446] RSP: 002b:00007f843b9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1283.517439][T19446] RAX: ffffffffffffffda RBX: 00007f843da15fa0 RCX: 00007f843d79c629 [ 1283.525442][T19446] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 1283.533431][T19446] RBP: 00007f843d832b39 R08: 0000200000000080 R09: 0000000000000000 [ 1283.541433][T19446] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.549422][T19446] R13: 00007f843da16038 R14: 00007f843da15fa0 R15: 00007ffc758b99d8 [ 1283.557517][T19446] [ 1283.560566][T19446] Modules linked in: [ 1283.566631][T19446] ---[ end trace 0000000000000000 ]--- [ 1283.586162][T19446] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 1283.594120][T19446] Code: c3 31 ff 89 c6 e8 16 9b c7 f7 85 db 74 5b e8 cd 96 c7 f7 eb 05 e8 c6 96 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 1283.617880][T19446] RSP: 0018:ffffc9000d51f5e0 EFLAGS: 00010202 [ 1283.624013][T19446] RAX: 0000000000000007 RBX: 0000000000000039 RCX: ffff8880ac2d5ac0 [ 1283.654373][T19446] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1283.662670][T19446] RBP: 0000000080000000 R08: ffff8880ac2d5ac0 R09: 0000000000000003 [ 1283.671091][T19446] R10: 0000000000000005 R11: 0000000000000000 R12: dffffc0000000000 [ 1283.681852][T19446] R13: 0000000000000000 R14: ffff88806bd74a58 R15: ffffffffffffffff [ 1283.690983][T19446] FS: 00007f843b9ee6c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1283.700364][T19446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1283.708187][T19446] CR2: 00007f93d1be82f8 CR3: 0000000044cd8000 CR4: 00000000003526f0 [ 1283.716451][T19446] Kernel panic - not syncing: Fatal exception [ 1283.723160][T19446] Kernel Offset: disabled [ 1283.727500][T19446] Rebooting in 86400 seconds..