last executing test programs: 6.381850167s ago: executing program 1 (id=4983): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', r3, 0x700, 0x80, 0x8, 0xffffff89, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @local}}}}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x89b0, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x100004}) ioctl$sock_netdev_private(r4, 0x89f3, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xfffe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r12, 0xc01, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x9, 0x21, 0x5, 0x8, 0x5, 0x5, 0x1, 0x0, [{0x8, 0x1, 0x5, 0xa}, {0x8, 0x7, 0x1, 0x3}, {0x4, 0x9105, 0x1, 0x7fffffff}, {0xffff, 0x8, 0x80000001, 0x6}, {0x0, 0x6838, 0x3ff, 0x9}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.872213424s ago: executing program 1 (id=4989): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f04ebbeed, 0x8031, r2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00", 0x20) vmsplice(r0, &(0x7f0000001700)=[{&(0x7f0000000600)}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r10, 0x5, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) connect$unix(r9, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) 1.96280146s ago: executing program 4 (id=5015): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x78, 0x7fff, 0x5}) epoll_wait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0x7) 1.865384071s ago: executing program 2 (id=5017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7001fedbdf2530000000180001801400020076657468315f746f5f626f6e640000000800060002"], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) write(r1, &(0x7f0000000000)="c34a8b2bdd9aad1191a001e71a1f5a348870348330b27d042bfb2561bbafa3f52efaabb21a9d8eb5f2e6225fe9dfe8db664fffcbcfa15eba6d58ad3af9ad8acfdab0c923c1100ac3fce0cc20059ba9550a8c2474ac80d04da85d185be539d5b968653ded1d5854dda8e5a18787007ac8414ea0a3b663e78e8c0f4c84adbe4fb6dbd3c1c054fc9aa6a45e799aaa1a7ff6af65734baf1b882c60c9a112496f9514dc88c4b37e35464a692cb5a50b3257a7323ce2fc302b0ad0aafd9f0df63f0ff8d56b4824b979e2730421e3bf1fab4824e04581da48d8e24904f48b657305884a5317f89d1183bf80c14b1c4ecb560eb6076d2781", 0xf4) 1.72608629s ago: executing program 4 (id=5019): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600800a0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r7, &(0x7f0000000180)="f85115", 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r3, 0x29, 0xf9, 0x8, 0x6, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7800, 0xc, 0x3}}) connect$can_j1939(r6, &(0x7f0000000540)={0x1d, r8, 0x0, {0x2, 0x1, 0x4}, 0xfd}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r9, 0x25, 0x4, @void}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r11, 0x4, r11}, 0x5) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r4}, 0x18) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0xe, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x3a, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0x6, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001640)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001740)={r10, r12, 0x4, r13}, 0x10) 1.670484342s ago: executing program 2 (id=5021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000380)="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", 0x1000, 0x20048891, &(0x7f0000001380)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 1.603120507s ago: executing program 3 (id=5022): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa000000000000036000000080013002d03010000000000950000000000000069165e0000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf310000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44b6b498b98ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089da6d6a710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f50e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8d829906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a443c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87100900000000000000de8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e52a2a10f922cc2de27ac24483639c369b06ecc7ea4195898691cc9c414c599c33eac655d01d1c4f89c999fd7aaa5d0984c82128ad6a1fad9dd079e095aa8331fe3d2e2baed37d6c93d402dc67b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) 1.59955951s ago: executing program 2 (id=5023): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.507142116s ago: executing program 0 (id=5024): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) r2 = socket(0x37, 0x80000, 0x9000000) ioctl$SIOCNRDECOBS(r2, 0x89e2) 1.260361173s ago: executing program 3 (id=5025): r0 = socket$netlink(0x10, 0x3, 0x14) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd606410a60030000100000000000000000000ffff0a010100fe8000000000000000000000000000aa0104000000000000c910fc02000000000000000000080000000000000088000000000000000000000000000100000000"], 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRES32=r3], 0x12) r4 = socket(0x8, 0x80000, 0x7) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x5, 0x5679, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x7}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r8, @ANYBLOB="890404401bbaf4708e3aa9736974000800002300000000", @ANYRES32=r8, @ANYBLOB], 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 1.156194494s ago: executing program 4 (id=5026): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000440)={0x14, r5, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000100)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x3, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x73, r3, r8}, {0x4, 0x0, 0x6, 0x9, 0x9, 0x80000001, 0x3d, 0x72d8}, {0xfffffffffffffffa, 0x7, 0x3, 0xaf}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@private0, 0x3507, 0x3, 0x0, 0x5, 0xfffffffc, 0x7, 0xffffffff}}, 0xe8) 1.063203128s ago: executing program 0 (id=5027): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630a0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 978.781613ms ago: executing program 3 (id=5028): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xceda, 0xa468}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r0, @in={{0x2, 0x4e24, @local}}, 0x80000000, 0x6, 0x89, 0x401, 0x4, 0x6, 0x9c}, &(0x7f0000000140)=0x9c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r0, 0xb9c}, 0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0x0, 0x100000001, 0x5}) sendto$rose(r3, &(0x7f0000000200)="b1e12827dffde9822605172189bdfc15b6bfbfd7", 0x14, 0x0, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000280)={0x5, 0x0, 0x2, 0x8f37, r1}, &(0x7f00000002c0)=0x10) (async) setsockopt(r3, 0xf, 0xbb, &(0x7f0000000300)="b52e6c86114929ceb847faf43e672a82e689a989da20d436c5db3233a27abc8af8e7b15bcbc2f1bc1841afd1083a1988eae30b7071f1b84fec4e11f85f237987e0dcca6dc140400336216e771d032a806f9a4c8d5a2f997d65356e2751b8307c6fd989df1082d6b756bf5c996235b01bebf47224d656e028c2b0a6d60238e021e00ad93149f7ea510288df4b5eb3a8cc1114c7fb6072ff7bf64109e272e46ed786287b1432776bf8", 0xa8) (async) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000003c0)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x200, 0x6, 0xffff, 0x6, 0x40, 0x932, 0xdf}, &(0x7f00000004c0)=0x9c) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000500)={r1, 0xcd, "b30bb5d10f072d1ace2f25296820fa341670fbe7f819b2ea3b825cc49109c0eb5e4caa813075b752a9587ecc31a34bf917a97cc6fa5ffc55f61ca11f313da0d759436955ae8982e2b4ffd95f8a106046ae5ed7b3d8db8b2169d9aec7fadffa18ca1048545c28106575509c8a1f7daf7f9d0e6af0c1763cb42c3d0e093ac6b8a987ca0b007a4d3c89fc65404f1b9512965aad5d3822d9497e91d38b3c74e1389d9c56ea5f44c19549ae6c2d4ebb4631c9a6aa9aea0a429cc0b95d5b0e9fefb18ad3dbde121579ba6d003b3acb63"}, &(0x7f0000000600)=0xd5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000640)={r5, @in={{0x2, 0x4e23, @private=0xa010102}}, 0xfff9, 0x5}, 0x90) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3fb, 0x0, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44080}, 0x4081) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={r4, @in6={{0xa, 0x4e24, 0x43000000, @mcast2, 0x9}}, 0x1000, 0x5}, 0x90) (async) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000008c0)=0x1, &(0x7f0000000900)=0x4) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000940)=0xe000, 0x4) (async) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000980)='vcan0\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) getsockopt$MRT(r3, 0x0, 0xce, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async, rerun: 64) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000ac0), &(0x7f0000000b00)=0x40) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd8, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffff801}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x30}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4050) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000e40)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x11, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@generic={0x8, 0x4, 0x9, 0x9, 0x3e}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x9, 0x5, 0x2, 0x40, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000e00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', r10, 0x25, r3, 0x8, &(0x7f0000000e80)={0xa, 0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ec0)=[{0x4, 0x2, 0x5, 0x7}], 0x10, 0x80000001}, 0x94) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000fc0)={'syzkaller1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) getsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000001000), &(0x7f0000001040)=0x4) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/80, 0x50}, {&(0x7f0000001100)=""/96, 0x60}], 0x2, &(0x7f00000011c0)=""/163, 0xa3}}, {{&(0x7f0000001280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/147, 0x93}], 0x1, &(0x7f0000001400)=""/87, 0x57}, 0xb}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001480)=""/174, 0xae}, {&(0x7f0000001540)=""/227, 0xe3}, {&(0x7f0000001640)=""/106, 0x6a}, {&(0x7f00000016c0)=""/112, 0x70}, {&(0x7f0000001740)=""/68, 0x44}, {&(0x7f00000017c0)=""/220, 0xdc}], 0x6, &(0x7f0000001940)=""/108, 0x6c}, 0x4}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/145, 0x91}], 0x2}, 0x7fff}, {{&(0x7f0000002ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000002b40)=""/22, 0x16}, {&(0x7f0000002b80)=""/149, 0x95}, {&(0x7f0000002c40)=""/152, 0x98}, {&(0x7f0000002d00)=""/189, 0xbd}, {&(0x7f0000002dc0)=""/179, 0xb3}, {&(0x7f0000002e80)=""/237, 0xed}, {&(0x7f0000002f80)=""/156, 0x9c}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x8, &(0x7f00000040c0)=""/80, 0x50}, 0x3}, {{&(0x7f0000004140)=@tipc, 0x80, &(0x7f0000004580)=[{&(0x7f00000041c0)=""/103, 0x67}, {&(0x7f0000004240)=""/3, 0x3}, {&(0x7f0000004280)=""/198, 0xc6}, {&(0x7f0000004380)=""/215, 0xd7}, {&(0x7f0000004480)=""/237, 0xed}], 0x5, &(0x7f0000004600)=""/176, 0xb0}, 0x3}, {{&(0x7f00000046c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004740)=""/103, 0x67}, {&(0x7f00000047c0)=""/192, 0xc0}, {&(0x7f0000004880)=""/11, 0xb}], 0x3, &(0x7f0000004900)=""/130, 0x82}, 0xfff}], 0x7, 0x40020100, &(0x7f0000004bc0)) 895.879521ms ago: executing program 3 (id=5029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) pipe(&(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 774.82974ms ago: executing program 0 (id=5030): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) ioctl(r0, 0x7, &(0x7f0000000040)="4fdfa44cdadf9b0f67e893896818a76c90b3cc1904f5df17ee0c7f7155256c22d3ab95d7dfde9f5ea86e68d18d19ed3fd8783208035e185e238ea67361946ff9603791ca72f0dfe29da001c21d432e2a0a4a9c126172af70460dd7d2da06bfc9849544755f482f351f2d8936eb03288f57c5d7ac58b610783073741592047295d168ea19c5a6f06f6adf389381d33eaf98004311678df56b10b919ba18da966c28cdaf929b9220fd14274b74d7f9ac9b84b1f54a5beb5e1bdeb252b2d0c2c1ce4555146636fd5d077d6189a116996cb558c8b4d314d61674f184263f4b4ca893b5ed139ec3ef1d0b6a97fa9f1e3bf9eee20e1a271d018c12ac") 773.578659ms ago: executing program 1 (id=5031): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x7) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="ce62454afae4148d300000001000010000000000", @ANYRES32=0x0, @ANYBLOB="e4ffffffffffffff080004000006000008001b000000dc05"], 0x30}}, 0x800) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async) close(0x3) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4a, &(0x7f0000000ac0)={0xff00, 0x0}, 0x8) (async, rerun: 32) write(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="34901ad2", @ANYRES16=r6, @ANYBLOB="010000affc21dc000000100000001800018014000200776c616e300000000000000000000800080006"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 634.037257ms ago: executing program 2 (id=5032): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6077fd480051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281", 0x58}], 0x1, 0x0, 0x0, 0x4004844}], 0x1, 0x48840) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x78) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000004c0)=0x5) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) poll(&(0x7f0000001140)=[{r5, 0x702}], 0x1, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48a41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500010700000000002f9078ac1e0001e0000001000086dd00f39078a102000034cb6dcdd2bc08508f3e2edd0d265b8bc0497d01ee697d19758303462c8c7aea2c"], 0x119) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 596.204253ms ago: executing program 1 (id=5033): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x11f42) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050003000000585e6ad18c13202b08000300", @ANYRES32=r6], 0x28}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81002080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff5e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0600"/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000040000000000000000000df000000009500000000000000"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r1) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) (async) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x11f42) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050003000000585e6ad18c13202b08000300", @ANYRES32=r6], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81002080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff5e) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0600"/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000040000000000000000000df000000009500000000000000"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 463.187797ms ago: executing program 0 (id=5034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = accept$ax25(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r5, &(0x7f0000002e00)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84}], 0x10}}], 0x2, 0x40000050) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20040130) setsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000140)=0x7, 0x4) 462.166983ms ago: executing program 4 (id=5035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4c}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x3f, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8) sendmmsg(r0, &(0x7f0000004180)=[{{&(0x7f0000000280)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="d0f81d0e2609b7412db7de0878cf62143538dd085b7ce0c50010b66b0a7c7be2536626ec9817aaff108298eaac82cc2855bca11f497f32bd7880ad43720c27ca5064202b8e62897f0daa61624b75d695ca4d9fb90b5fb15d4f11d378e52ebca512e1c9cd618c79821c53fb8d311da564e4e299818b72", 0x76}], 0x2, &(0x7f00000015c0)=[{0x88, 0x10e, 0x6, "c44ef7bcf5a6230bdcc90540e038cec6a6a65191a6c91dc07aa8d40143c899c25ef53f06cb59ecb2a4deba38dbc161835fb97ffeb9175cf7e6ea2bafb61a562bc19566f90d47c878d6c1cfbe7a0dfdc232e1e148dc8cdd18c9ae1c459876b81e71937c920fb142af00382d3929e27e87554a"}, {0x80, 0x108, 0xb, "cf95c965e5d286d7df7be9c769d46ab3ce94cd15c9937564f515245e9e6988a884bcfd7f4a15eeba83c56344f329494aa20e08cc463e8c16ebb8df8d8cc5efd9c785ad2559137a71c7da21e67cc032c060c65c7e455ef2797565fd26c7f2b4c5720550791867c01773711fc5641b12"}, {0xc8, 0x1, 0x6, "51c9f2153d10169678ee693c7646a495efff9a1c44a45dd3ffd2d32894f5cc4ac1562f34e45b1c0598eb0749924609ec0301cfbcbfed72fea4cb789b71e6b72ab30a02993c28a983ceeef1d9f5f4dfb02e0618af4fa92d018f54dccd1f72a2ed2b3068721a66dfcf944eb73ee45b7b1c68d092dd636e6e9dfe941110552f68a9b5fd614ab1a597ab5f158a59594ce9d7f4c8f3dfcd86dc2752f91d70112d5acd45f43ded02a722f33d875965ae10b88fc123b718"}], 0x1d0}}, {{&(0x7f00000017c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001840)="7347fcb6d51d5af60f9429db24509903306e084ea14b4fd2d64454c089791b8cf949f2912add6fec6636878caa577eddcd88dc28eca37b60cd5add67d0cedf7c9b40466e799d7f9ad450f9bd71739efe4bbe3e92ccb8b5c26d9bfaefc652d8610cc1e694097dfe8e355ca8a29f2dac0dcb06c9aea8bbbea34bb9a6e157dd65e82f8c61d1ce3bcc0558f21e8d39b2b8e527a7fd210a420559602bfc0404a739cdb21eb0f12fa0c5dd4b99c2c596adcaf436a8535334a5763aa049e4ad783c9710a594202b0731fcf3d318dcaf1b1a4d93b7992573071a0b1994881270a8e0bedff3a395e7dd08e9e75f167e59f6d2a406c3fc6810a5e5261f69a2423beed1", 0xfe}, {&(0x7f0000001940)="fcb1bd66d15685b501fcfe6ffb90b32bac71df355c73a5b8e36e0ab45b6fb9927c14781e3714b4b8a8ca2b9f0462e2f6cdb4a65fbfab84b5faabeb81bf7cdc7c", 0x40}, {&(0x7f0000001980)="aca9a0faabe24897ea9632246fc489901088a64ce013dc0fa92a532b8a11ad18595265da1b81156bb6a173bedeccf4a6f5d0da7cd3944f2117052bd2d4beba8f21ae0c38bbb279be55c9fc2a4d4b9fd764d0f972ff05e2f9428b7baafb65b713b783306e96d771a19af3a7d4eaf7c20dc42f739906df8e8f0f5804f9281a036f58cd917e", 0x84}, {&(0x7f0000001a40)}], 0x4, &(0x7f0000001ac0)=[{0x1010, 0x107, 0x7, "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"}, {0x98, 0x103, 0xef4d, "3ca7c62b8b246bcf208cfa73e8c3783d2503f3122281f0383272a992dccc0d9b06e8bca91e6e675d7894997cbc78e756f544560dedbe48eafdd582c6af6b775f71a03a2d7803e365d5079793304d2b1d3d38143be50b68f3b24407210a5dbbeba8a81f557e7b3a310fa5009a07fecb32e5bfc0a09ee753b523ff5a8fa562c8b68174a3594133"}], 0x10a8}}, {{&(0x7f0000002b80)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002c00)="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", 0xfe}, {&(0x7f0000002d00)="a8f5818492db010ff0f70ae1d97cb9f96208f534a8a13beecef24c1dc8a901dffe126c8c40e4492c7ecb628b6f7cf54b16c4f74abb0b304f3b62e3717f2807d197c2371bf76fd77cc54a5b1e7a6977868432", 0x52}], 0x2, &(0x7f0000002dc0)=[{0x60, 0x116, 0x8, "2197e5a66936609495b67d6a5909be07fa050809062f2e1ee0c75ade3e721d93ca355387f5aa6ed6733f1c4e86ab6b56858490dc8c08c61a7fa1a4422211899454eb21d4b38b48d9d18a1e"}, {0xa0, 0x103, 0x0, "b689bb0b40d8a194d80bd315e59337a7ed9b0cbca1433a5d153e87158447c2213e3742a57ceb2a0939c42588cef9f05418e1a50363189daf75f783188cb7b435a5ad19b73d992de690c9626f0e830c426ca07cc1a4066084186d28af8c15b4e0071f4c280b45c6e5e5adaba70f163f065d27967711a19b44e433eea31306933faf7b113d8b022a56cfab"}, {0x50, 0x10d, 0x40, "b2b3769611d679cdc1f003419ee01d75b779253fd7d11d1e86e21f0730aa931d62e174aa7453116e0417edabf47c632b89cb0dc163eb89ea6dad841b"}, {0x110, 0xfe, 0xb3e, "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"}, {0x60, 0x107, 0x7, "eb52e5f3a7f1953ff73f76b92f4c4933a2ba039b7f8874e2d1d1bf8829a96f5a6437357cf245f2e18c179be64de6f08967e5915cf93d5a9c464523fe7100feb0f06a4898c03f988a0e96f762d0"}, {0x1010, 0x108, 0x7, "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"}, {0xd0, 0x114, 0x7, "588957709c074f5a42fb562f0ee1c4df2f3c2336ff5646e462968a2969e1ed4527c4da0dd7dc6901889c23af2e52d2a2a4ca4af9f6776f18dfc75bc2a3fd5cec77d68604e6ac6bb185a071e7e38a528a5069926bd0bfe3193a141c0a3170fbc58b8f6ef57b70b093df40fbb4e429df784f8e8d8ff822efe4af2d61639e5e1f76dd32a2d8a71c7934abdc3df928a5b2b8ef5ccff2617b456c90661e213e8e8cfaa852f21ec81487618d3c8aa07cf45a6f267ca87ed00c9266441bcd"}], 0x13a0}}], 0x3, 0x800) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 461.583191ms ago: executing program 3 (id=5036): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x36, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140002"], 0x48}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000000100)={r12, 0x2, 0x6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x700, 0x8, 0x8, 0x4, {{0x37, 0x4, 0x1, 0x9, 0xdc, 0x68, 0x0, 0x5, 0x2f, 0x0, @local, @private=0xa010101, {[@cipso={0x86, 0xf, 0x0, [{0x7, 0x9, "afbd2da11e83d1"}]}, @timestamp_prespec={0x44, 0x2c, 0x9f, 0x3, 0xa, [{@rand_addr=0x64010102, 0x5}, {@initdev={0xac, 0x1e, 0xfe, 0x0}, 0xffffff58}, {@rand_addr=0x64010101, 0x80000001}, {@remote, 0xfffffffc}, {@multicast2, 0x2}]}, @rr={0x7, 0x13, 0x25, [@private=0xa010101, @rand_addr=0x64010102, @local, @rand_addr=0x64010102]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x9, [{@broadcast, 0x8}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @ssrr={0x89, 0x1b, 0x48, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @local, @loopback, @local]}, @lsrr={0x83, 0x1b, 0x9, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @empty, @remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x1, 0x8, "f52120793ad9"}, {0x7, 0x5, "a3cdee"}]}, @lsrr={0x83, 0xf, 0x79, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2d2c575a5b26bfbe}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xec, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r14, @ANYBLOB="019804c4e6b654b68a67d68c98dd6cb05a3b00c99e05002000128008000100736974001400028008000300e0000001060008002b0000008ce3cab4f554914b603f30291cecbede06adee299f6a81394be9dd4d7f9abc982bd596290a63cc20df7a33316b2127"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r14, 0x1, 0x4, 0x6, @local}, 0x14) 355.553164ms ago: executing program 4 (id=5037): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 340.323105ms ago: executing program 1 (id=5038): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095", @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="ad2bf7522cd3cbc9884b8d702f90aa7454e6144069ca8b42b024e2f52379684eaa40368df3ebf2810f8329b3dc00ed72d98030f18902f74188c301de220e36a108e285c1cd872cd70580521f27b93a152a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x310, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x0, 0x0, 0x48e, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061135e0000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x4, @val=@tracing={0x0, 0x1}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r2, r2, 0x18, 0x2000, 0x0, @value=r6, @void, @void, @void, r5}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095", @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="ad2bf7522cd3cbc9884b8d702f90aa7454e6144069ca8b42b024e2f52379684eaa40368df3ebf2810f8329b3dc00ed72d98030f18902f74188c301de220e36a108e285c1cd872cd70580521f27b93a152a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x310, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x0, 0x0, 0x48e, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, 0x0, 0x25, 0x4, @val=@tracing={0x0, 0x1}}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r2, r2, 0x18, 0x2000, 0x0, @value=r6, @void, @void, @void, r5}, 0x20) (async) 255.116506ms ago: executing program 0 (id=5039): accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x80000) (async) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)) 234.225768ms ago: executing program 4 (id=5040): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002000000ff020000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000003000000000000000000000007000000000000000000000001"], 0x23c}}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000a80)={{r3}, 0x1, 0x3, 0x9}) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r6, 0x40047452, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f00000000c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 225.759827ms ago: executing program 2 (id=5041): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='/)\\\'[\xa6.\x00', 0x2, &(0x7f0000000040)={@align=0x1, {0xffff, 0x3, 0x6, 0x1}}, 0x100, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xffff0000}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x5c, "2c347c1f2d2b6a892a05651ad89192697e03bfb0b612dae1e8d70516b036cab2313e82c9926857966d9f7adbb885741404881b7d598561cc21800482d6376238d529ef6346ead71c5ffc5eab07b8c9d652e8e796c86c5eeffd94620e"}, &(0x7f00000001c0)=0x64) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1, 0x59, "f9758325e0a35ce0e731c5ec08d6977435860a2d1c0ae5c7486bb78ebd94f16edd85893683300a819be4ba24a024d3286c0189dc715b01cff2e4176345ad4d19ba5029399f912b2a52d972947a6468dc1ba2968f3112608bcd"}, &(0x7f0000000280)=0x61) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x40000) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={r2, 0xf6, "9eb3b46e8f750be6f75f1dc858811f7f812fc677906fea15673226d9033d23fcff80f43d7fd2ed65fc86146149910dee4e90e5509bce01ba224e42e65d63cf64aecea84f4b05ad8541680d71b24f5ecb2c76ab7b423aea692cef6d4ed0f7405561c4c171debbda30ce0b6fc93ed0b98b4a059b17987d5510ba3bfb706bb239fd4173a0660b331e55a816eddbebe75247f44ce0c217528e37ad720b4d6d79de3457fbe7f61286262f0755827958b95c6601c614c8fb7d98679e20e0ea8ff8eeea55c2324631b69b7047f32312024911b1d2230c0e40256b2a105eba9f09f549ace9a4b24ba26ecc30ec9f24cff33b055eaf686bb95df7"}, &(0x7f0000000540)=0xfe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000580)={r6, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000640)=0x84) (async) ppoll(&(0x7f0000000680)=[{r3}, {r0, 0x4130}, {r0, 0x20}, {r0, 0x8}, {r0, 0x1}, {r3, 0x9500}, {0xffffffffffffffff, 0x8413}, {r0, 0x220}], 0x8, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000700)={[0x38]}, 0x8) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000740)={r3}) setsockopt$inet_sctp6_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000780)=0x2841, 0x4) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r7, 0xf518, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000007c0)) (rerun: 64) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000800)={r1, 0xaa0, 0x9, 0x68db, 0x5, 0x36b1}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044}, 0xc0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000980)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async, rerun: 64) write(r0, &(0x7f0000000a40)="ba3a8625d3b1e1be5ee337797237de4ed9a9d16fab7d26883a17966325b014f116fdbde64ad3bed49bceed949363441982075a165645d280a7f2063b7627bc8b927e6b3e62be7c86bd76f67c7dc76e39adce639421ec1ef1", 0x58) (async, rerun: 64) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) write$cgroup_subtree(r0, &(0x7f0000000ac0)={[{0x2b, 'hugetlb'}, {0x2d, 'rdma'}, {0x2d, 'blkio'}, {0x2b, 'net'}, {0x2b, 'cpuset'}, {0x2b, 'devices'}, {0x2b, 'cpu'}]}, 0x31) (async) ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f0000000b00)=@null) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000b40)={0x1, [0x0]}, &(0x7f0000000b80)=0x8) read$alg(r7, &(0x7f0000000bc0)=""/159, 0x9f) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r3) (async) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000d00)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r10, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20008881) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000001240)={0x7fff, 0x3, 0xffff, 0x1, 0xfb, 0xd0, 0x7fff}, 0xc) 59.07505ms ago: executing program 0 (id=5042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702001b08000000b703000068030000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.664046ms ago: executing program 1 (id=5043): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f00000000c0)=""/144, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080), 0x0) sendmmsg$inet(r1, &(0x7f0000004c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000001600)="c7c0", 0x2}], 0x1, &(0x7f0000004ec0)=ANY=[], 0xa8}}], 0x2, 0x8014) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x4b, "8e322e27eea5fb0f0f359c17bff8febaa0c579cade7dab242df64e215e0e3eab6dd95ef0f397e46b3e1398207c254909d4898f58923d5100ea0b403ba81cb7713ca3cf702fd9d90238f46f"}, &(0x7f0000000280)=0x6f) 18.881975ms ago: executing program 2 (id=5044): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000000000141500000000000000000000000000000005000000030a00220000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a000000000000000000000080400000000000000000080000000000000000010000030000000044000500fc000000000000000000000000000001000004d23c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000004500)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/139, 0x8b}], 0x1}, 0x8}, {{&(0x7f00000005c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/59, 0x3b}], 0x3, &(0x7f0000004000)=""/58, 0x3a}, 0x846}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004040)=""/51, 0x33}, {&(0x7f0000004080)=""/143, 0x8f}, {&(0x7f0000004140)=""/114, 0x72}], 0x3, &(0x7f0000004200)=""/65, 0x41}, 0xfffffffc}, {{&(0x7f0000004280)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/196, 0xc4}], 0x2, &(0x7f00000044c0)=""/30, 0x1e}, 0x8}], 0x4, 0x2102, &(0x7f0000004600)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030000000000000001000000040007800c00080001000080000000000c000200ff7f000000000000f7669127a50f4937cc7288ecbc2dc6"], 0x30}}, 0x20000000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8071609e09d2f4657c2f2", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000640)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0}, 0x200440c1) getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000000000141500000000000000000000000000000005000000030a00220000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a000000000000000000000080400000000000000000080000000000000000010000030000000044000500fc000000000000000000000000000001000004d23c"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) recvmmsg(r1, &(0x7f0000004500)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/139, 0x8b}], 0x1}, 0x8}, {{&(0x7f00000005c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/59, 0x3b}], 0x3, &(0x7f0000004000)=""/58, 0x3a}, 0x846}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004040)=""/51, 0x33}, {&(0x7f0000004080)=""/143, 0x8f}, {&(0x7f0000004140)=""/114, 0x72}], 0x3, &(0x7f0000004200)=""/65, 0x41}, 0xfffffffc}, {{&(0x7f0000004280)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004300)=""/66, 0x42}, {&(0x7f0000004380)=""/196, 0xc4}], 0x2, &(0x7f00000044c0)=""/30, 0x1e}, 0x8}], 0x4, 0x2102, &(0x7f0000004600)={0x0, 0x3938700}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030000000000000001000000040007800c00080001000080000000000c000200ff7f000000000000f7669127a50f4937cc7288ecbc2dc6"], 0x30}}, 0x20000000) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000740)="d21f34b6b8071609e09d2f4657c2f2", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x0) (async) socket$kcm(0xa, 0x1, 0x106) (async) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000640)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0}, 0x200440c1) (async) getpid() (async) 0s ago: executing program 3 (id=5045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="8bb8580200006d817edab94be4f83f478ce4bb7cf977849c23963107d2b11ae6483ff01510cb1a0f8f61b30d1870c0fac70528f17b4eba9bf74788e4804cace9432c2954dce1cb9e8adba62752c2bfb5b1308b10478c7f350100000000000000efb74bf0f3a2f65409ed82819058ada8a94ab91c084c8401a779c1a15ef72a9e", @ANYRES16=r1, @ANYBLOB="050407bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="c000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038"], 0x258}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x304, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x401}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x68}}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x4, {0xa, 0x0, 0x1}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): _start_xmit: lec0:No lecd attached [ 431.054921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 431.062974][ C1] lec:lec_tx_timeout: lec0 [ 431.067625][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.912929][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3233'. [ 433.275767][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.291856][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.301684][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.315924][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.327731][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.722846][T18019] validate_nla: 2 callbacks suppressed [ 433.722864][T18019] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 433.760917][T18018] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 433.815802][ T5827] bond1: (slave syz_tun): Removing an active aggregator [ 433.828395][ T5827] bond1: (slave syz_tun): Releasing backup interface [ 433.943775][T18026] netlink: 'syz.4.3245': attribute type 10 has an invalid length. [ 434.045489][T18003] chnl_net:caif_netlink_parms(): no params data found [ 434.186375][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.197680][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.339250][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.356354][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.469287][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.497487][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.665544][ T145] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.675888][ T145] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.695719][T18003] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.704907][T18003] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.712505][T18003] bridge_slave_0: entered allmulticast mode [ 434.721729][T18003] bridge_slave_0: entered promiscuous mode [ 434.768510][T18026] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 434.783050][T18026] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 434.811259][T18026] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.822709][T18003] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.832867][T18026] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 434.845230][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.856951][T18026] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.877976][T18026] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 434.889986][T18003] bridge_slave_1: entered allmulticast mode [ 434.901258][T18003] bridge_slave_1: entered promiscuous mode [ 434.922507][T18026] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.933027][T18026] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 435.003294][T18026] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.012907][T18026] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 435.109316][T18003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.148867][T18003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.169424][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3258'. [ 435.318355][T18077] bond0: entered promiscuous mode [ 435.323538][T18077] bond_slave_0: entered promiscuous mode [ 435.330954][T18077] bond_slave_1: entered promiscuous mode [ 435.339465][T18077] batadv0: entered promiscuous mode [ 435.347916][T18077] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 435.373354][T18077] bond0: left promiscuous mode [ 435.378507][T18077] bond_slave_0: left promiscuous mode [ 435.384378][T18077] bond_slave_1: left promiscuous mode [ 435.392493][T18077] batadv0: left promiscuous mode [ 435.435438][T18003] team0: Port device team_slave_0 added [ 435.511948][T18003] team0: Port device team_slave_1 added [ 435.636153][T18003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.643353][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.675067][T18003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.718559][T18091] netlink: 'syz.4.3263': attribute type 11 has an invalid length. [ 435.730783][T18091] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3263'. [ 435.746370][T18003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.756855][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.761246][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3264'. [ 435.793015][T18003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.874117][T18099] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3266'. [ 435.918907][ T145] bridge0: port 3(batadv0) entered disabled state [ 435.919035][T18090] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3264'. [ 435.944663][ T145] bridge_slave_1: left allmulticast mode [ 435.973822][ T145] bridge_slave_1: left promiscuous mode [ 435.992437][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.020989][ T145] bridge_slave_0: left allmulticast mode [ 436.036372][ T145] bridge_slave_0: left promiscuous mode [ 436.051845][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.071343][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3266'. [ 436.084769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 436.092974][ C1] lec:lec_tx_timeout: lec0 [ 436.097669][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.106787][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 436.126651][T18105] nbd: must specify at least one socket [ 436.337296][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3270'. [ 436.351654][T18113] net_ratelimit: 1326 callbacks suppressed [ 436.351674][T18113] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 436.370444][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3270'. [ 437.801339][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.813811][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.827514][ T145] bond0 (unregistering): Released all slaves [ 437.839874][ T145] bond1 (unregistering): Released all slaves [ 437.857514][ T145] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 437.867557][ T145] veth0_to_bond: left promiscuous mode [ 437.875942][ T145] bond2 (unregistering): Released all slaves [ 437.899725][ T145] bond3 (unregistering): Released all slaves [ 437.915951][ T145] bond4 (unregistering): Released all slaves [ 438.199252][ T145] 9: left promiscuous mode [ 438.307528][T18003] hsr_slave_0: entered promiscuous mode [ 438.314662][T18003] hsr_slave_1: entered promiscuous mode [ 438.328001][T18003] debugfs: 'hsr0' already exists in 'hsr' [ 438.339826][T18003] Cannot create hsr debugfs directory [ 438.397084][T18145] __nla_validate_parse: 1 callbacks suppressed [ 438.397104][T18145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3279'. [ 438.484613][T18145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3279'. [ 438.533050][ T145] IPVS: stopping master sync thread 17558 ... [ 438.689895][T18156] IPVS: length: 239 != 24 [ 438.828822][T18161] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3281'. [ 439.257820][T18176] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3286'. [ 439.706445][T18195] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.723424][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3290'. [ 439.743012][T18185] syzkaller1: entered promiscuous mode [ 439.752309][T18185] syzkaller1: entered allmulticast mode [ 440.111170][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.121841][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.408202][T18215] bond1: Unable to set up delay as MII monitoring is disabled [ 440.426447][T18215] bond1 (unregistering): Released all slaves [ 440.554621][T18231] netlink: 'syz.4.3299': attribute type 39 has an invalid length. [ 440.873130][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.907384][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.937852][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.950227][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.968492][ T145] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 440.976460][ T145] batman_adv: batadv0: Removing interface: ipvlan2 [ 441.008957][ T145] veth0_macvtap: left allmulticast mode [ 441.015281][ T145] veth1_macvtap: left promiscuous mode [ 441.027154][ T145] veth1_vlan: left promiscuous mode [ 441.104742][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 441.112863][ C1] lec:lec_tx_timeout: lec0 [ 441.117862][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 441.150140][T18254] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3307'. [ 441.184040][T18254] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 441.198013][ T145] smc: removing net device team0 with user defined pnetid SYZ2 [ 441.278069][ T145] pim6reg527 (unregistering): left allmulticast mode [ 441.845234][T18003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.891651][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.910082][T18003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.933736][T18275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3312'. [ 441.956080][T18275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3312'. [ 441.968733][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.007698][T18277] xt_SECMARK: invalid mode: 9 [ 442.012715][T18003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.082876][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.104347][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3314'. [ 442.113009][T18275] erspan0: entered promiscuous mode [ 442.132605][T18275] erspan0: left promiscuous mode [ 442.149538][T18288] PKCS7: Unknown OID: [4] (bad) [ 442.155063][T18284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3314'. [ 442.165604][T18288] PKCS7: Only support pkcs7_signedData type [ 442.178420][T18003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.219758][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.321861][T18292] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.351928][T18292] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 442.372204][T18298] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 442.498946][ T145] IPVS: stop unused estimator thread 0... [ 442.749735][T18316] macvlan2: entered promiscuous mode [ 442.775554][T18316] macvlan2: entered allmulticast mode [ 442.810290][T18316] bond1: (slave macvlan2): Opening slave failed [ 442.981294][T18003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.021006][T18003] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.058993][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.066217][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.130785][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.138075][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.173844][T18331] syzkaller1: entered promiscuous mode [ 443.198364][T18331] syzkaller1: entered allmulticast mode [ 443.456312][T18350] netlink: 'syz.0.3327': attribute type 33 has an invalid length. [ 443.495938][T18350] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 443.509418][T18350] bond1 (unregistering): Released all slaves [ 443.890961][T18003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.009554][T18003] veth0_vlan: entered promiscuous mode [ 444.030460][T18003] veth1_vlan: entered promiscuous mode [ 444.102865][T18003] veth0_macvtap: entered promiscuous mode [ 444.132351][T18003] veth1_macvtap: entered promiscuous mode [ 444.158112][T18385] netlink: 'syz.1.3336': attribute type 1 has an invalid length. [ 444.162348][T18003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.233793][T18392] __nla_validate_parse: 2 callbacks suppressed [ 444.233812][T18392] netlink: 294 bytes leftover after parsing attributes in process `syz.0.3338'. [ 444.251762][T18392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.288440][T18003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.328733][T18390] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 444.341003][T18390] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 444.365891][T18390] bond2: (slave vxcan3): making interface the new active one [ 444.374509][T18390] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 444.414583][T18385] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 444.429509][T18385] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 444.552049][ T130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.575431][ T130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.591626][T18396] netlink: 'syz.0.3339': attribute type 3 has an invalid length. [ 444.615560][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.644134][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.658407][T18410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 444.837298][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.862489][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.920670][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.929833][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.113876][T18427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.188483][T18434] tc_dump_action: action bad kind [ 445.253481][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 445.487535][T18453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3352'. [ 445.594673][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 445.872708][T18470] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3360'. [ 446.124765][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 446.132874][ C1] lec:lec_tx_timeout: lec0 [ 446.137530][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 446.369439][T18503] tipc: Failed to remove unknown binding: 66,0,0/0:3101410908/3101410909 [ 446.398548][T18503] tipc: Failed to remove unknown binding: 66,0,0/0:3101410908/3101410909 [ 446.482833][T18507] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 446.734100][T18516] syzkaller0: entered promiscuous mode [ 446.740546][T18516] syzkaller0: entered allmulticast mode [ 446.752837][T18518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3371'. [ 446.777986][T18520] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 446.813155][T18521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3372'. [ 446.897710][T18527] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3375'. [ 447.043308][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3377'. [ 447.135831][T18534] bridge0: port 1(bridge_slave_0) entered learning state [ 447.316245][T18549] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 447.431163][T18512] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 447.975510][T18586] netlink: 'syz.3.3392': attribute type 29 has an invalid length. [ 448.542413][T18622] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 448.965381][T18634] Bluetooth: MGMT ver 1.23 [ 449.371110][T18641] __nla_validate_parse: 8 callbacks suppressed [ 449.371129][T18641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3409'. [ 449.817188][T18659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3414'. [ 450.068517][T18667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 450.175269][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3419'. [ 450.208750][T18673] netlink: 'syz.3.3420': attribute type 8 has an invalid length. [ 450.225098][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3419'. [ 450.396968][T18681] x_tables: duplicate underflow at hook 1 [ 450.427226][T18681] x_tables: duplicate underflow at hook 1 [ 450.445312][T18681] x_tables: duplicate underflow at hook 1 [ 450.474975][T18681] x_tables: duplicate underflow at hook 1 [ 450.490420][T18681] x_tables: duplicate underflow at hook 1 [ 450.518786][T18681] x_tables: duplicate underflow at hook 1 [ 450.560881][T18681] x_tables: duplicate underflow at hook 1 [ 450.582718][T18681] x_tables: duplicate underflow at hook 1 [ 450.599047][T18681] x_tables: duplicate underflow at hook 1 [ 450.610245][T18681] x_tables: duplicate underflow at hook 1 [ 450.799497][T18691] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3426'. [ 450.860978][T18696] netlink: 'syz.0.3429': attribute type 20 has an invalid length. [ 450.869437][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3429'. [ 450.872481][T18698] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3428'. [ 450.903107][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.923363][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.010680][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.038027][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.108800][T18703] netlink: 'syz.0.3430': attribute type 1 has an invalid length. [ 451.391185][T18714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3435'. [ 451.584498][T18727] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 451.587631][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3439'. [ 451.634038][T18727] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 451.682040][T18724] bond1: Invalid ad_actor_system MAC address. [ 451.689621][T18724] bond1: option ad_actor_system: invalid value (1) [ 451.702757][T18724] bond1 (unregistering): Released all slaves [ 452.189958][T18757] netlink: 'syz.0.3447': attribute type 3 has an invalid length. [ 452.233688][T18757] netlink: 'syz.0.3447': attribute type 2 has an invalid length. [ 452.274768][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6140 ms [ 452.282855][ C1] lec:lec_tx_timeout: lec0 [ 452.287868][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 453.087053][ T7124] IPVS: starting estimator thread 0... [ 453.121196][T18797] IPVS: Error connecting to the multicast addr [ 453.160810][T18796] IPVS: Error connecting to the multicast addr [ 453.205492][T18798] IPVS: using max 26 ests per chain, 62400 per kthread [ 454.092661][T18844] netlink: 'syz.4.3466': attribute type 1 has an invalid length. [ 455.968431][T18844] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 456.003526][T18830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.229405][T18862] __nla_validate_parse: 11 callbacks suppressed [ 456.229425][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3470'. [ 456.313778][T18862] hsr_slave_1 (unregistering): left promiscuous mode [ 456.350129][T18865] syzkaller0: entered allmulticast mode [ 456.642840][T18887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3479'. [ 456.930926][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'. [ 456.996813][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 457.018071][T18893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.173477][T18893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.282600][T18915] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 457.322289][T18911] ±ÿ: renamed from team_slave_1 (while UP) [ 457.330816][T18915] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 457.353305][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3490'. [ 457.387421][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3490'. [ 457.470470][T18893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.493460][T18924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3490'. [ 457.683874][T18893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.871933][T18936] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3494'. [ 457.937254][T18954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.024821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 458.032951][ C1] lec:lec_tx_timeout: lec0 [ 458.039382][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 458.147364][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 458.151885][T18958] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 458.168449][T14707] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.218737][T14707] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.248679][ T130] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.345675][T14707] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.363262][T18967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3503'. [ 458.416474][ T167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.738633][T18993] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 458.947602][T19000] syzkaller1: entered promiscuous mode [ 458.967256][T19000] syzkaller1: entered allmulticast mode [ 459.368752][T19020] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 459.381162][T19020] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 459.422894][T19021] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 459.436253][T19021] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 459.918870][T19047] IPv6: addrconf: prefix option has invalid lifetime [ 459.927733][T19047] IPv6: addrconf: prefix option has invalid lifetime [ 459.944668][ T5925] IPVS: starting estimator thread 0... [ 460.035794][T19039] : renamed from bond0 (while UP) [ 460.054844][T19048] IPVS: using max 26 ests per chain, 62400 per kthread [ 460.201284][T19059] netlink: 'syz.1.3528': attribute type 1 has an invalid length. [ 460.211624][T19060] netlink: 'syz.1.3528': attribute type 1 has an invalid length. [ 460.385134][T19059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.429886][T19063] vlan3: entered promiscuous mode [ 460.435758][T19063] bond3: entered promiscuous mode [ 460.441187][T19063] vlan3: entered allmulticast mode [ 460.447508][T19063] bond3: entered allmulticast mode [ 460.916415][T19091] netlink: 'syz.2.3536': attribute type 58 has an invalid length. [ 461.171505][T19105] Bluetooth: MGMT ver 1.23 [ 461.585808][T19130] netlink: 'syz.0.3552': attribute type 1 has an invalid length. [ 461.717459][T19130] bond4: entered promiscuous mode [ 461.723254][T19130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.768261][T19130] bond4: (slave bridge1): making interface the new active one [ 461.780054][T19130] bridge1: entered promiscuous mode [ 461.817487][T19130] bridge1: left promiscuous mode [ 461.968399][T19141] netlink: 'syz.2.3554': attribute type 1 has an invalid length. [ 462.034301][T19154] __nla_validate_parse: 12 callbacks suppressed [ 462.034322][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3559'. [ 462.084131][T19157] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3560'. [ 462.100278][T19160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3554'. [ 462.171036][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3559'. [ 462.273471][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 462.564626][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3568'. [ 462.605228][T19193] xt_check_table_hooks: 55 callbacks suppressed [ 462.605247][T19193] x_tables: duplicate underflow at hook 1 [ 462.688855][T19193] x_tables: duplicate underflow at hook 1 [ 462.705025][T19193] x_tables: duplicate underflow at hook 1 [ 462.732446][T19193] x_tables: duplicate underflow at hook 1 [ 462.761206][T19193] x_tables: duplicate underflow at hook 1 [ 462.786761][T19193] x_tables: duplicate underflow at hook 1 [ 462.802243][T19193] x_tables: duplicate underflow at hook 1 [ 462.815468][T19193] x_tables: duplicate underflow at hook 1 [ 462.821424][T19193] x_tables: duplicate underflow at hook 1 [ 462.829571][T19193] x_tables: duplicate underflow at hook 1 [ 463.054726][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 463.062871][ C1] lec:lec_tx_timeout: lec0 [ 463.068626][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.263898][T19226] ip6tnl1: entered allmulticast mode [ 463.312869][T19228] netlink: 'syz.3.3576': attribute type 1 has an invalid length. [ 463.321377][T19228] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3576'. [ 463.374511][T19230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3577'. [ 463.383830][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3577'. [ 463.398896][T19230] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3577'. [ 463.673035][T19243] netlink: 'syz.3.3579': attribute type 2 has an invalid length. [ 465.427471][T19178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.438083][T19207] netlink: 'syz.4.3572': attribute type 11 has an invalid length. [ 465.773781][T19264] macvlan0: entered promiscuous mode [ 466.035518][T19278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.045947][T19280] netlink: 'syz.1.3592': attribute type 21 has an invalid length. [ 466.060029][T19275] netlink: 'syz.0.3591': attribute type 29 has an invalid length. [ 466.072958][T19280] netlink: 'syz.1.3592': attribute type 6 has an invalid length. [ 466.113530][T19280] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 466.159517][T19281] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 466.174999][T19281] bond1 (unregistering): Released all slaves [ 466.600487][T19302] syzkaller0: entered promiscuous mode [ 466.618691][T19302] syzkaller0: entered allmulticast mode [ 467.152393][T19337] netlink: 'syz.4.3609': attribute type 32 has an invalid length. [ 467.163836][T19337] __nla_validate_parse: 21 callbacks suppressed [ 467.163854][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 467.223463][T19337] bond2: Setting coupled_control to off (0) [ 467.233855][T19342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3611'. [ 467.262218][T19343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3611'. [ 467.422079][T19346] bridge1: entered promiscuous mode [ 467.432343][T19346] bridge1: entered allmulticast mode [ 467.447984][T19346] team0: Port device bridge1 added [ 467.646704][T19372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.729297][T19375] netlink: 'syz.3.3622': attribute type 1 has an invalid length. [ 467.754900][T19375] netlink: 'syz.3.3622': attribute type 11 has an invalid length. [ 467.771334][T19376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3619'. [ 467.784001][T19375] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3622'. [ 467.833860][T19376] tipc: Invalid UDP bearer configuration [ 467.833917][T19376] tipc: Enabling of bearer rejected, failed to enable media [ 467.893705][T19383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3624'. [ 467.927221][T19387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3624'. [ 468.062732][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 468.074776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 468.082869][ C1] lec:lec_tx_timeout: lec0 [ 468.088046][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.184134][T19397] syzkaller0: entered promiscuous mode [ 468.208563][T19397] syzkaller0: entered allmulticast mode [ 468.781137][T19429] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 469.009189][T19442] netlink: 'syz.2.3641': attribute type 1 has an invalid length. [ 469.026860][T19442] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3641'. [ 469.039850][T19442] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3641'. [ 469.165969][T19442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.188958][T19445] netlink: 'syz.0.3642': attribute type 10 has an invalid length. [ 469.189448][T19448] netlink: 'syz.3.3643': attribute type 1 has an invalid length. [ 469.209355][T19445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.220348][T19445] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 469.233833][T19445] netlink: 'syz.0.3642': attribute type 10 has an invalid length. [ 469.257556][T19445] batadv0: entered promiscuous mode [ 469.263754][T19445] batadv0: entered allmulticast mode [ 469.271072][T19445] bond0: (slave batadv0): Releasing backup interface [ 469.281164][T19445] bridge0: port 3(batadv0) entered blocking state [ 469.288773][T19445] bridge0: port 3(batadv0) entered disabled state [ 469.317294][T19450] bond0: (slave bridge2): making interface the new active one [ 469.325896][T19450] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 469.369354][T19442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.395060][ T1165] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 469.404448][ T1165] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 469.462882][T19442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.581437][T19442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.796363][T19461] syzkaller0: entered promiscuous mode [ 469.804122][T19461] syzkaller0: entered allmulticast mode [ 469.862399][T19470] bond0: entered promiscuous mode [ 469.870942][T19470] bond_slave_0: entered promiscuous mode [ 469.884091][T19470] bond_slave_1: entered promiscuous mode [ 471.974279][ T167] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.131059][ T167] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.153283][ T167] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.172786][ T167] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.212548][T19492] __nla_validate_parse: 4 callbacks suppressed [ 472.212567][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3655'. [ 472.216844][T19497] macvlan0: entered promiscuous mode [ 472.334033][T19503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3657'. [ 472.395602][T19506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3659'. [ 472.413429][T19503] syzkaller0: entered promiscuous mode [ 472.420203][T19503] syzkaller0: entered allmulticast mode [ 472.767283][T19530] Cannot find add_set index 46338 as target [ 472.930439][T19533] syzkaller0: entered promiscuous mode [ 472.948028][T19533] syzkaller0: entered allmulticast mode [ 473.007630][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3669'. [ 473.094786][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 473.102878][ C1] lec:lec_tx_timeout: lec0 [ 473.108077][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.459485][T19576] IPVS: Error connecting to the multicast addr [ 473.528218][T19578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.658875][T19586] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3682'. [ 473.688756][T19586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3682'. [ 473.721186][T19586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'. [ 474.181259][T19602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3689'. [ 474.217525][T19602] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 474.549375][T19622] netlink: 'syz.4.3694': attribute type 32 has an invalid length. [ 474.582290][T19629] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 474.673334][T19638] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3694'. [ 474.698645][T19638] netlink: 'syz.4.3694': attribute type 19 has an invalid length. [ 474.717270][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'. [ 474.835527][ T139] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.863019][ T139] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.953198][T19649] netlink: 'syz.2.3700': attribute type 1 has an invalid length. [ 474.979341][ T139] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.994674][T19650] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 474.998001][T19649] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 475.036370][T19661] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.299238][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.329912][T19671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.340456][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.356912][T19674] netlink: 'syz.2.3704': attribute type 7 has an invalid length. [ 475.413567][T19673] bridge: RTM_NEWNEIGH with invalid ether address [ 475.429530][T19673] bridge: RTM_NEWNEIGH with invalid ether address [ 475.554973][T19686] netlink: 'syz.2.3708': attribute type 2 has an invalid length. [ 475.748852][T19703] netlink: 'syz.0.3713': attribute type 2 has an invalid length. [ 475.794246][T19703] 9: entered promiscuous mode [ 475.857098][T19708] netlink: 'syz.4.3716': attribute type 1 has an invalid length. [ 476.162725][ T167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.181896][ T167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.208471][ T167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.241852][ T167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.328784][T19737] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 476.480835][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.492638][T19737] bridge_slave_1: left allmulticast mode [ 476.502352][T19737] bridge_slave_1: left promiscuous mode [ 476.512330][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.527218][T19737] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 476.713175][T19756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.997525][T19781] netlink: 'syz.2.3734': attribute type 3 has an invalid length. [ 477.599876][T19815] netlink: 'syz.1.3746': attribute type 15 has an invalid length. [ 477.619063][T19815] __nla_validate_parse: 8 callbacks suppressed [ 477.619079][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 477.647015][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'. [ 477.690848][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 477.691965][ T167] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 477.717906][ T167] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 477.756476][ T167] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 477.783455][ T167] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 478.114791][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 478.122934][ C1] lec:lec_tx_timeout: lec0 [ 478.127589][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 478.291550][T19847] vlan2: entered promiscuous mode [ 478.301334][T19847] bridge0: entered promiscuous mode [ 478.527798][T19863] ip6gre1: entered allmulticast mode [ 478.595821][T19847] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3760'. [ 478.642032][T19847] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3760'. [ 478.682016][T19869] tc_dump_action: action bad kind [ 478.850364][T19877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3768'. [ 478.852761][T19876] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3767'. [ 478.995920][T19885] batman_adv: batadv0: Adding interface: netdevsim0 [ 479.005249][T19887] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.035235][T19885] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.041710][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3771'. [ 479.096354][T19885] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 479.213976][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3773'. [ 479.240624][T19891] syzkaller0: entered promiscuous mode [ 479.256527][T19891] syzkaller0: entered allmulticast mode [ 479.270759][T19894] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3774'. [ 479.297420][T19901] syzkaller0: entered promiscuous mode [ 479.313197][T19901] syzkaller0: entered allmulticast mode [ 479.337278][T19894] 0: reclassify loop, rule prio 0, protocol 800 [ 481.438475][T19925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.561496][T19927] validate_nla: 5 callbacks suppressed [ 481.561518][T19927] netlink: 'syz.2.3783': attribute type 39 has an invalid length. [ 481.614123][T19940] netlink: 'syz.1.3787': attribute type 2 has an invalid length. [ 481.837713][T19947] Unknown options in mask b7f2 [ 482.144880][T19973] netlink: 'syz.2.3796': attribute type 16 has an invalid length. [ 482.183783][T19973] netlink: 'syz.2.3796': attribute type 17 has an invalid length. [ 482.281765][T19972] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.301909][T19972] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.403697][T19973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.651779][T19996] bridge0: entered promiscuous mode [ 482.666518][T19996] macsec1: entered promiscuous mode [ 482.678876][T19999] __nla_validate_parse: 7 callbacks suppressed [ 482.678893][T19999] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3801'. [ 482.705415][T19996] macsec1: entered allmulticast mode [ 482.719665][T19996] bridge0: entered allmulticast mode [ 482.728370][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 482.739118][T19996] bridge0: port 3(macsec1) entered blocking state [ 482.761349][T19996] bridge0: port 3(macsec1) entered disabled state [ 482.781150][T19996] bridge0: left allmulticast mode [ 482.787558][T19996] bridge0: left promiscuous mode [ 483.097626][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3805'. [ 483.558863][T20052] veth0: entered promiscuous mode [ 483.602576][T20051] veth0: left promiscuous mode [ 483.662648][T20061] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3814'. [ 483.785374][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3815'. [ 483.944796][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 483.952881][ C1] lec:lec_tx_timeout: lec0 [ 483.957630][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.207725][T20092] FAULT_INJECTION: forcing a failure. [ 484.207725][T20092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.253117][T20092] CPU: 0 UID: 0 PID: 20092 Comm: syz.2.3819 Not tainted syzkaller #0 PREEMPT(full) [ 484.253147][T20092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 484.253165][T20092] Call Trace: [ 484.253172][T20092] [ 484.253179][T20092] dump_stack_lvl+0xe8/0x150 [ 484.253212][T20092] should_fail_ex+0x412/0x560 [ 484.253242][T20092] _copy_from_iter+0x1d3/0x1670 [ 484.253269][T20092] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 484.253294][T20092] ? __pfx_policy_nodemask+0x10/0x10 [ 484.253313][T20092] ? trace_kmalloc+0x2a/0xf0 [ 484.253338][T20092] ? __pfx__copy_from_iter+0x10/0x10 [ 484.253370][T20092] ? set_page_refcounted+0xa0/0x1e0 [ 484.253395][T20092] af_alg_sendmsg+0x1556/0x2510 [ 484.253436][T20092] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 484.253458][T20092] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.253479][T20092] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 484.253513][T20092] ? aa_sock_msg_perm+0xf1/0x1b0 [ 484.253548][T20092] ? skcipher_sendmsg+0x26/0xf0 [ 484.253574][T20092] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 484.253602][T20092] __sys_sendto+0x672/0x710 [ 484.253630][T20092] ? __pfx___sys_sendto+0x10/0x10 [ 484.253677][T20092] ? exc_page_fault+0x6a/0xc0 [ 484.253703][T20092] ? do_user_addr_fault+0xc6f/0x1340 [ 484.253731][T20092] __x64_sys_sendto+0xde/0x100 [ 484.253757][T20092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.253777][T20092] do_syscall_64+0x15f/0xf80 [ 484.253801][T20092] ? trace_irq_disable+0x3b/0x140 [ 484.253824][T20092] ? clear_bhb_loop+0x40/0x90 [ 484.253849][T20092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.253877][T20092] RIP: 0033:0x7f50c695d04e [ 484.253897][T20092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.253919][T20092] RSP: 002b:00007f50c77b1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.253943][T20092] RAX: ffffffffffffffda RBX: 00007f50c77b36c0 RCX: 00007f50c695d04e [ 484.253958][T20092] RDX: 0000000000000024 RSI: 00007f50c77b2000 RDI: 0000000000000004 [ 484.253972][T20092] RBP: 0000000000000000 R08: 00007f50c77b1f04 R09: 000000000000000c [ 484.253985][T20092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 484.253998][T20092] R13: 00007f50c77b1f58 R14: 00007f50c77b2000 R15: 0000000000000000 [ 484.254032][T20092] [ 484.695617][T20102] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 485.096128][T20129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3829'. [ 485.408748][T20107] netlink: 'syz.3.3823': attribute type 2 has an invalid length. [ 485.431489][T20107] tipc: Started in network mode [ 485.449855][T20107] tipc: Node identity 340008, cluster identity 5 [ 485.467720][T20107] tipc: Node number set to 3407880 [ 485.491494][T20127] netlink: 'syz.3.3823': attribute type 23 has an invalid length. [ 485.497719][T20142] FAULT_INJECTION: forcing a failure. [ 485.497719][T20142] name failslab, interval 1, probability 0, space 0, times 0 [ 485.513000][T20142] CPU: 0 UID: 0 PID: 20142 Comm: syz.4.3834 Not tainted syzkaller #0 PREEMPT(full) [ 485.513036][T20142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.513049][T20142] Call Trace: [ 485.513057][T20142] [ 485.513065][T20142] dump_stack_lvl+0xe8/0x150 [ 485.513100][T20142] should_fail_ex+0x412/0x560 [ 485.513133][T20142] should_failslab+0xa8/0x100 [ 485.513156][T20142] __kmalloc_noprof+0xe8/0x760 [ 485.513188][T20142] ? sock_kmalloc+0xd6/0x160 [ 485.513212][T20142] sock_kmalloc+0xd6/0x160 [ 485.513235][T20142] skcipher_recvmsg+0x517/0x1140 [ 485.513284][T20142] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 485.513314][T20142] ? aa_sock_msg_perm+0xf1/0x1b0 [ 485.513349][T20142] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 485.513378][T20142] ? security_socket_recvmsg+0x7e/0x2c0 [ 485.513410][T20142] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 485.513440][T20142] sock_recvmsg+0x172/0x1b0 [ 485.513467][T20142] __sys_recvfrom+0x240/0x3c0 [ 485.513508][T20142] ? __pfx___sys_recvfrom+0x10/0x10 [ 485.513562][T20142] ? exc_page_fault+0x6a/0xc0 [ 485.513590][T20142] ? do_user_addr_fault+0xc6f/0x1340 [ 485.513623][T20142] __x64_sys_recvfrom+0xde/0x100 [ 485.513652][T20142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.513674][T20142] do_syscall_64+0x15f/0xf80 [ 485.513697][T20142] ? trace_irq_disable+0x3b/0x140 [ 485.513718][T20142] ? clear_bhb_loop+0x40/0x90 [ 485.513743][T20142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.513762][T20142] RIP: 0033:0x7fe1df55d04e [ 485.513780][T20142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.513798][T20142] RSP: 002b:00007fe1dd7f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 485.513820][T20142] RAX: ffffffffffffffda RBX: 00007fe1dd7f66c0 RCX: 00007fe1df55d04e [ 485.513834][T20142] RDX: 0000000000001000 RSI: 00007fe1dd7f5000 RDI: 0000000000000004 [ 485.513848][T20142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.513859][T20142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 485.513871][T20142] R13: 00007fe1dd7f4f58 R14: 00007fe1dd7f5000 R15: 0000000000000000 [ 485.513902][T20142] [ 486.032811][T20156] netlink: zone id is out of range [ 486.043345][T20156] netlink: zone id is out of range [ 486.049528][T20156] netlink: zone id is out of range [ 486.060412][T20156] netlink: zone id is out of range [ 486.068108][T20156] netlink: zone id is out of range [ 486.078773][T20155] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3838'. [ 486.090501][T20156] netlink: zone id is out of range [ 486.100625][T20156] netlink: zone id is out of range [ 486.115181][T20156] netlink: zone id is out of range [ 486.125651][T20156] netlink: zone id is out of range [ 486.135775][T20156] netlink: zone id is out of range [ 486.151759][T20155] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3838'. [ 486.378106][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3844'. [ 486.540390][T20182] ieee802154 phy1 wpan1: encryption failed: -22 [ 486.576771][T20186] FAULT_INJECTION: forcing a failure. [ 486.576771][T20186] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 486.590903][T20186] CPU: 0 UID: 0 PID: 20186 Comm: syz.2.3848 Not tainted syzkaller #0 PREEMPT(full) [ 486.590931][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 486.590945][T20186] Call Trace: [ 486.590954][T20186] [ 486.590963][T20186] dump_stack_lvl+0xe8/0x150 [ 486.591001][T20186] should_fail_ex+0x412/0x560 [ 486.591038][T20186] prepare_alloc_pages+0x22a/0x650 [ 486.591070][T20186] __alloc_frozen_pages_noprof+0x12f/0x380 [ 486.591098][T20186] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.591127][T20186] ? __pfx_policy_nodemask+0x10/0x10 [ 486.591162][T20186] alloc_pages_mpol+0x232/0x4a0 [ 486.591192][T20186] vma_alloc_folio_noprof+0xea/0x210 [ 486.591219][T20186] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 486.591256][T20186] do_wp_page+0x1204/0x5a00 [ 486.591291][T20186] ? __lock_acquire+0x6b5/0x2cf0 [ 486.591343][T20186] ? __pfx_do_wp_page+0x10/0x10 [ 486.591367][T20186] ? do_raw_spin_lock+0x12b/0x2f0 [ 486.591394][T20186] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.591428][T20186] handle_mm_fault+0x1520/0x3310 [ 486.591473][T20186] ? handle_mm_fault+0xee/0x3310 [ 486.591510][T20186] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.591535][T20186] ? lock_vma_under_rcu+0x45a/0x500 [ 486.591596][T20186] do_user_addr_fault+0xa73/0x1340 [ 486.591636][T20186] ? rcu_is_watching+0x15/0xb0 [ 486.591668][T20186] ? trace_page_fault_user+0x84/0x1e0 [ 486.591701][T20186] exc_page_fault+0x6a/0xc0 [ 486.591729][T20186] asm_exc_page_fault+0x26/0x30 [ 486.591750][T20186] RIP: 0033:0x7f50c695c605 [ 486.591778][T20186] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 486.591796][T20186] RSP: 002b:00007f50c77b1de0 EFLAGS: 00010293 [ 486.591817][T20186] RAX: 0000000000000008 RBX: 00007f50c7747e20 RCX: 0000000000000000 [ 486.591831][T20186] RDX: 0000000000000000 RSI: 00007f50c6a4fd33 RDI: 00007f50c7747e20 [ 486.591846][T20186] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 486.591859][T20186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50c6a4fa4b [ 486.591873][T20186] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f50c6a4fd33 [ 486.591908][T20186] [ 486.592239][T20186] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 486.953264][T20188] netlink: 640 bytes leftover after parsing attributes in process `syz.3.3847'. [ 487.151030][T20197] bond0: ARP target 8.4.0.0 is already present [ 487.172483][T20197] bond0: option arp_ip_target: invalid value (1032) [ 487.512919][T20217] netlink: 'syz.2.3857': attribute type 3 has an invalid length. [ 487.560105][T20217] netlink: 'syz.2.3857': attribute type 1 has an invalid length. [ 488.122258][T20243] __nla_validate_parse: 7 callbacks suppressed [ 488.122278][T20243] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3867'. [ 488.206129][T20243] bond5 (unregistering): Released all slaves [ 488.326713][T20217] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 488.618320][T20277] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3874'. [ 488.664215][T20281] xt_check_table_hooks: 23 callbacks suppressed [ 488.664238][T20281] x_tables: unsorted entry at hook 2 [ 488.740865][T20280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3876'. [ 488.910542][T20298] netlink: 'syz.2.3882': attribute type 4 has an invalid length. [ 488.922841][T20298] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3882'. [ 488.949392][T20298] sctp: Trying to GSO but underlying device doesn't support it. [ 488.964720][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 488.980593][ C1] lec:lec_tx_timeout: lec0 [ 488.985489][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 489.062584][T20314] tls_set_device_offload: netdev not found [ 489.243580][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3888'. [ 489.273095][T20324] xt_nat: multiple ranges no longer supported [ 489.336683][T20324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 489.346585][T20326] netlink: 'syz.1.3889': attribute type 28 has an invalid length. [ 489.355539][T20326] netlink: 'syz.1.3889': attribute type 3 has an invalid length. [ 489.363430][T20326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3889'. [ 489.449941][T20329] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004 [ 489.470180][T20324] syzkaller0: entered promiscuous mode [ 489.476190][T20324] syzkaller0: entered allmulticast mode [ 489.490684][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 491.406248][T20326] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 491.407106][T20328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3889'. [ 491.456265][T20333] sit1: entered promiscuous mode [ 491.473889][T20333] sit1: entered allmulticast mode [ 491.646177][T20352] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3895'. [ 492.143403][T20373] bond5: Invalid ad_actor_system MAC address. [ 492.177404][T20373] bond5: option ad_actor_system: invalid value (1) [ 492.229383][T20373] bond5 (unregistering): Released all slaves [ 492.430457][T20390] netlink: 'syz.4.3908': attribute type 1 has an invalid length. [ 492.535244][T20402] netlink: 'syz.4.3908': attribute type 10 has an invalid length. [ 492.583533][T20402] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.626145][T20402] bridge_slave_1: left allmulticast mode [ 492.631838][T20402] bridge_slave_1: left promiscuous mode [ 492.644908][T20402] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.004721][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 494.012776][ C1] lec:lec_tx_timeout: lec0 [ 494.017463][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 495.184491][T20402] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 495.623735][T20450] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 495.648886][T20460] netlink: 'syz.0.3924': attribute type 3 has an invalid length. [ 496.278127][T20497] __nla_validate_parse: 5 callbacks suppressed [ 496.278147][T20497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3938'. [ 496.297265][T20497] syzkaller1: entered promiscuous mode [ 496.302898][T20497] syzkaller1: entered allmulticast mode [ 496.546984][T20519] FAULT_INJECTION: forcing a failure. [ 496.546984][T20519] name failslab, interval 1, probability 0, space 0, times 0 [ 496.553578][T20514] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3942'. [ 496.563270][T20519] CPU: 0 UID: 0 PID: 20519 Comm: syz.4.3945 Not tainted syzkaller #0 PREEMPT(full) [ 496.563345][T20519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.563385][T20519] Call Trace: [ 496.563409][T20519] [ 496.563432][T20519] dump_stack_lvl+0xe8/0x150 [ 496.563561][T20519] should_fail_ex+0x412/0x560 [ 496.563653][T20519] should_failslab+0xa8/0x100 [ 496.563716][T20519] ? vm_area_dup+0x2b/0x680 [ 496.563804][T20519] kmem_cache_alloc_noprof+0x87/0x650 [ 496.563911][T20519] vm_area_dup+0x2b/0x680 [ 496.564009][T20519] __split_vma+0x1dc/0xa40 [ 496.564091][T20519] ? mas_find+0xb0e/0xd30 [ 496.564186][T20519] ? __pfx___split_vma+0x10/0x10 [ 496.564299][T20519] ? can_vma_merge_left+0x11a/0x3e0 [ 496.564371][T20519] vma_modify+0xa30/0x2060 [ 496.564478][T20519] vma_modify_flags+0x24b/0x330 [ 496.564567][T20519] ? __pfx_vma_modify_flags+0x10/0x10 [ 496.564689][T20519] ? rcu_is_watching+0x15/0xb0 [ 496.564772][T20519] ? percpu_counter_add_batch+0xea/0x1d0 [ 496.564855][T20519] ? __vm_enough_memory+0x11b/0x380 [ 496.564942][T20519] mprotect_fixup+0x47a/0xa80 [ 496.565019][T20519] ? __pfx_mprotect_fixup+0x10/0x10 [ 496.565076][T20519] ? apparmor_file_mprotect+0x1d0/0x400 [ 496.565140][T20519] ? security_file_mprotect+0x1a/0x290 [ 496.565227][T20519] do_mprotect_pkey+0x8ab/0xcd0 [ 496.565320][T20519] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 496.565476][T20519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.565541][T20519] __x64_sys_mprotect+0x80/0x90 [ 496.565603][T20519] do_syscall_64+0x15f/0xf80 [ 496.565668][T20519] ? trace_irq_disable+0x3b/0x140 [ 496.565730][T20519] ? clear_bhb_loop+0x40/0x90 [ 496.565794][T20519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.565855][T20519] RIP: 0033:0x7fe1df59c617 [ 496.565900][T20519] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.565964][T20519] RSP: 002b:00007fe1dd7f4d18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 496.566048][T20519] RAX: ffffffffffffffda RBX: 00007fe1d8000000 RCX: 00007fe1df59c617 [ 496.566097][T20519] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007fe1d8000000 [ 496.566137][T20519] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 496.566172][T20519] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 496.566205][T20519] R13: 0000000000001000 R14: 00007fe1dc000000 R15: 0000000002a00000 [ 496.566286][T20519] [ 496.931571][T20522] netlink: 'syz.3.3946': attribute type 29 has an invalid length. [ 496.943598][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'. [ 496.976084][T20522] netlink: 'syz.3.3946': attribute type 29 has an invalid length. [ 496.984312][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'. [ 497.006045][T20522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3946'. [ 497.016120][T20522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3946'. [ 497.168697][T20537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3951'. [ 497.191165][T20537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3951'. [ 497.223426][T20539] syzkaller0: entered promiscuous mode [ 497.233217][T20539] syzkaller0: entered allmulticast mode [ 497.429486][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3956'. [ 497.580003][T20560] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3958'. [ 497.907096][T20570] syzkaller1: entered promiscuous mode [ 497.912840][T20570] syzkaller1: entered allmulticast mode [ 497.989557][T20570] netlink: 'syz.4.3963': attribute type 32 has an invalid length. [ 498.070695][T20578] netlink: 'syz.0.3965': attribute type 1 has an invalid length. [ 498.312831][T20591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.356458][T20591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.582107][T20606] FAULT_INJECTION: forcing a failure. [ 498.582107][T20606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.615630][T20606] CPU: 1 UID: 0 PID: 20606 Comm: syz.0.3971 Not tainted syzkaller #0 PREEMPT(full) [ 498.615660][T20606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 498.615674][T20606] Call Trace: [ 498.615682][T20606] [ 498.615691][T20606] dump_stack_lvl+0xe8/0x150 [ 498.615729][T20606] should_fail_ex+0x412/0x560 [ 498.615766][T20606] prepare_alloc_pages+0x22a/0x650 [ 498.615797][T20606] __alloc_frozen_pages_noprof+0x12f/0x380 [ 498.615825][T20606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 498.615852][T20606] ? __pfx_policy_nodemask+0x10/0x10 [ 498.615878][T20606] ? __pfx_perf_event_mmap+0x10/0x10 [ 498.615904][T20606] ? vma_modify_flags+0x2b6/0x330 [ 498.615932][T20606] alloc_pages_mpol+0x232/0x4a0 [ 498.615961][T20606] alloc_pages_noprof+0xa8/0x1a0 [ 498.615986][T20606] pte_alloc_one+0x22/0x370 [ 498.616010][T20606] __pte_alloc+0x25/0x1a0 [ 498.616034][T20606] do_pte_missing+0x2c47/0x3490 [ 498.616085][T20606] ? __lock_acquire+0x6b5/0x2cf0 [ 498.616144][T20606] handle_mm_fault+0x1bec/0x3310 [ 498.616187][T20606] ? handle_mm_fault+0xee/0x3310 [ 498.616222][T20606] ? __pfx_handle_mm_fault+0x10/0x10 [ 498.616247][T20606] ? lock_vma_under_rcu+0x45a/0x500 [ 498.616309][T20606] do_user_addr_fault+0xa73/0x1340 [ 498.616347][T20606] ? rcu_is_watching+0x15/0xb0 [ 498.616378][T20606] ? trace_page_fault_user+0x84/0x1e0 [ 498.616416][T20606] exc_page_fault+0x6a/0xc0 [ 498.616443][T20606] asm_exc_page_fault+0x26/0x30 [ 498.616464][T20606] RIP: 0033:0x7f0b8cf5e742 [ 498.616482][T20606] Code: 8d 15 5d 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 78 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 498.616501][T20606] RSP: 002b:00007f0b8de4ed20 EFLAGS: 00010286 [ 498.616520][T20606] RAX: ffffffffffffffff RBX: 00007f0b84000000 RCX: 00007f0b8cf9c617 [ 498.616536][T20606] RDX: 00007f0b8d04ef7b RSI: 0000000000021000 RDI: 00007f0b84000000 [ 498.616550][T20606] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 498.616564][T20606] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 498.616577][T20606] R13: 0000000000001000 R14: 00007f0b88000000 R15: 0000000001000000 [ 498.616610][T20606] [ 498.616635][T20606] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 498.924930][T20611] netlink: 'syz.3.3973': attribute type 4 has an invalid length. [ 498.947255][T20611] netlink: 'syz.3.3973': attribute type 4 has an invalid length. [ 499.024742][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 499.032827][ C1] lec:lec_tx_timeout: lec0 [ 499.037858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 499.282748][T20630] netlink: 'syz.0.3981': attribute type 23 has an invalid length. [ 499.385183][T20639] FAULT_INJECTION: forcing a failure. [ 499.385183][T20639] name failslab, interval 1, probability 0, space 0, times 0 [ 499.402479][T20639] CPU: 0 UID: 0 PID: 20639 Comm: syz.2.3985 Not tainted syzkaller #0 PREEMPT(full) [ 499.402508][T20639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.402522][T20639] Call Trace: [ 499.402530][T20639] [ 499.402539][T20639] dump_stack_lvl+0xe8/0x150 [ 499.402579][T20639] should_fail_ex+0x412/0x560 [ 499.402615][T20639] should_failslab+0xa8/0x100 [ 499.402637][T20639] ? ptlock_alloc+0x20/0x70 [ 499.402666][T20639] kmem_cache_alloc_noprof+0x87/0x650 [ 499.402707][T20639] ptlock_alloc+0x20/0x70 [ 499.402735][T20639] pte_alloc_one+0x7a/0x370 [ 499.402759][T20639] __pte_alloc+0x25/0x1a0 [ 499.402785][T20639] do_pte_missing+0x2c47/0x3490 [ 499.402817][T20639] ? __lock_acquire+0x6b5/0x2cf0 [ 499.402862][T20639] handle_mm_fault+0x1bec/0x3310 [ 499.402904][T20639] ? handle_mm_fault+0xee/0x3310 [ 499.402939][T20639] ? __pfx_handle_mm_fault+0x10/0x10 [ 499.402965][T20639] ? lock_vma_under_rcu+0x45a/0x500 [ 499.403034][T20639] do_user_addr_fault+0xa73/0x1340 [ 499.403081][T20639] ? rcu_is_watching+0x15/0xb0 [ 499.403111][T20639] ? trace_page_fault_user+0x84/0x1e0 [ 499.403143][T20639] exc_page_fault+0x6a/0xc0 [ 499.403170][T20639] asm_exc_page_fault+0x26/0x30 [ 499.403191][T20639] RIP: 0033:0x7f50c695e742 [ 499.403210][T20639] Code: 8d 15 5d 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 78 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 499.403229][T20639] RSP: 002b:00007f50c77b1d20 EFLAGS: 00010286 [ 499.403248][T20639] RAX: ffffffffffffffff RBX: 00007f50c0000000 RCX: 00007f50c699c617 [ 499.403264][T20639] RDX: 00007f50c6a4ef7b RSI: 0000000000021000 RDI: 00007f50c0000000 [ 499.403279][T20639] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 499.403297][T20639] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 499.403310][T20639] R13: 0000000000001000 R14: 00007f50c4000000 R15: 0000000003600000 [ 499.403344][T20639] [ 499.445017][T20639] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 500.137722][T20685] FAULT_INJECTION: forcing a failure. [ 500.137722][T20685] name failslab, interval 1, probability 0, space 0, times 0 [ 500.158518][T20685] CPU: 0 UID: 0 PID: 20685 Comm: syz.1.3998 Not tainted syzkaller #0 PREEMPT(full) [ 500.158550][T20685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 500.158564][T20685] Call Trace: [ 500.158573][T20685] [ 500.158582][T20685] dump_stack_lvl+0xe8/0x150 [ 500.158619][T20685] should_fail_ex+0x412/0x560 [ 500.158657][T20685] should_failslab+0xa8/0x100 [ 500.158680][T20685] ? __anon_vma_prepare+0xcb/0x4a0 [ 500.158711][T20685] kmem_cache_alloc_noprof+0x87/0x650 [ 500.158752][T20685] __anon_vma_prepare+0xcb/0x4a0 [ 500.158790][T20685] do_pte_missing+0x2dd1/0x3490 [ 500.158837][T20685] ? __lock_acquire+0x6b5/0x2cf0 [ 500.158886][T20685] handle_mm_fault+0x1bec/0x3310 [ 500.158929][T20685] ? handle_mm_fault+0xee/0x3310 [ 500.158966][T20685] ? __pfx_handle_mm_fault+0x10/0x10 [ 500.158992][T20685] ? lock_vma_under_rcu+0x45a/0x500 [ 500.159054][T20685] do_user_addr_fault+0xa73/0x1340 [ 500.159093][T20685] ? rcu_is_watching+0x15/0xb0 [ 500.159125][T20685] ? trace_page_fault_user+0x84/0x1e0 [ 500.159160][T20685] exc_page_fault+0x6a/0xc0 [ 500.159189][T20685] asm_exc_page_fault+0x26/0x30 [ 500.159217][T20685] RIP: 0033:0x7f7e1bd5e742 [ 500.159238][T20685] Code: 8d 15 5d 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 78 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 500.159257][T20685] RSP: 002b:00007f7e1cc8ed20 EFLAGS: 00010286 [ 500.159277][T20685] RAX: ffffffffffffffff RBX: 00007f7e14000000 RCX: 00007f7e1bd9c617 [ 500.159293][T20685] RDX: 00007f7e1be4ef7b RSI: 0000000000021000 RDI: 00007f7e14000000 [ 500.159308][T20685] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 500.159322][T20685] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 500.159336][T20685] R13: 0000000000001000 R14: 00007f7e18000000 R15: 0000000002200000 [ 500.159371][T20685] [ 500.159385][T20685] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 501.042358][T20720] lo speed is unknown, defaulting to 1000 [ 501.074441][T20720] lo speed is unknown, defaulting to 1000 [ 501.092791][T20720] lo speed is unknown, defaulting to 1000 [ 501.130018][T20723] netlink: 'syz.3.4007': attribute type 4 has an invalid length. [ 501.314629][T20728] netlink: 'syz.3.4009': attribute type 2 has an invalid length. [ 501.442555][T20734] bridge0: entered allmulticast mode [ 501.509358][T20742] netlink: 'syz.0.4014': attribute type 11 has an invalid length. [ 501.518449][T20742] __nla_validate_parse: 11 callbacks suppressed [ 501.518467][T20742] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.4014'. [ 501.560062][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.572681][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.735865][ T5903] lo speed is unknown, defaulting to 1000 [ 501.776191][T20720] infiniband syz2: set active [ 501.789460][T20720] infiniband syz2: added lo [ 501.836298][T20755] netlink: 'syz.0.4019': attribute type 2 has an invalid length. [ 501.907999][T20762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4021'. [ 502.022002][T20720] RDS/IB: syz2: added [ 502.044327][T20720] smc: adding ib device syz2 with port count 1 [ 502.061304][T20720] smc: ib device syz2 port 1 has no pnetid [ 502.077044][ T5903] lo speed is unknown, defaulting to 1000 [ 502.090818][T20720] lo speed is unknown, defaulting to 1000 [ 502.231272][T20784] netlink: 'syz.3.4028': attribute type 6 has an invalid length. [ 502.280675][T20784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4028'. [ 502.528819][T20801] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4034'. [ 502.569140][T20801] nbd: illegal input index -8454144 [ 502.710625][T20720] lo speed is unknown, defaulting to 1000 [ 502.972899][T20821] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4041'. [ 503.114406][T20831] netlink: 'syz.3.4044': attribute type 20 has an invalid length. [ 503.122667][T20831] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.231450][T20837] netlink: 'syz.3.4046': attribute type 1 has an invalid length. [ 503.243507][T20837] netlink: 'syz.3.4046': attribute type 2 has an invalid length. [ 503.251699][T20837] netlink: 'syz.3.4046': attribute type 1 has an invalid length. [ 503.287133][T20720] lo speed is unknown, defaulting to 1000 [ 503.368847][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 503.391977][T20843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 503.671237][T20720] lo speed is unknown, defaulting to 1000 [ 503.697765][T20850] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 503.770670][T20850] bond5: entered promiscuous mode [ 503.776697][T20850] 8021q: adding VLAN 0 to HW filter on device bond5 [ 503.870008][T20855] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 503.892766][T20855] bond1 (unregistering): Released all slaves [ 503.957893][T20850] bond5: (slave bridge1): making interface the new active one [ 503.969411][T20850] bridge1: entered promiscuous mode [ 503.984146][T20850] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 504.045305][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 504.053495][ C1] lec:lec_tx_timeout: lec0 [ 504.058691][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 504.199969][T20720] lo speed is unknown, defaulting to 1000 [ 504.233992][T20867] netlink: 'syz.3.4055': attribute type 7 has an invalid length. [ 504.265599][T20867] netlink: 'syz.3.4055': attribute type 1 has an invalid length. [ 504.277220][T20870] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4058'. [ 504.647595][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 504.679947][T20887] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4063'. [ 504.767206][T20887] bond1 (unregistering): Released all slaves [ 504.822954][T20720] lo speed is unknown, defaulting to 1000 [ 505.047660][T20893] syzkaller1: entered promiscuous mode [ 505.066462][T20893] syzkaller1: entered allmulticast mode [ 505.324348][T20910] netlink: 'syz.3.4068': attribute type 7 has an invalid length. [ 505.525718][T20720] lo speed is unknown, defaulting to 1000 [ 505.653431][T20926] netlink: 'syz.0.4072': attribute type 13 has an invalid length. [ 505.687868][T20926] gretap0: refused to change device tx_queue_len [ 505.695723][T20926] net_ratelimit: 189 callbacks suppressed [ 505.695740][T20926] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 505.907946][T20935] netlink: 'syz.4.4076': attribute type 2 has an invalid length. [ 505.955692][T20720] lo speed is unknown, defaulting to 1000 [ 506.114234][T20943] syzkaller1: entered promiscuous mode [ 506.120110][T20943] syzkaller1: entered allmulticast mode [ 506.387924][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809d22c800: rx timeout, send abort [ 506.888116][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809d22f400: rx timeout, send abort [ 506.896587][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809d22c800: abort rx timeout. Force session deactivation [ 507.011786][T20956] ip6gre0: Master is either lo or non-ether device [ 507.396414][ C1] vcan0: j1939_tp_rxtimer: 0xffff88809d22f400: abort rx timeout. Force session deactivation [ 507.785347][T20976] __nla_validate_parse: 7 callbacks suppressed [ 507.785361][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 507.801419][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 508.229314][T20918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.472288][T20989] validate_nla: 1 callbacks suppressed [ 508.472309][T20989] netlink: 'syz.4.4089': attribute type 1 has an invalid length. [ 508.518522][T20988] netlink: 'syz.2.4092': attribute type 21 has an invalid length. [ 508.531419][T20989] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.4089'. [ 508.563096][T20990] IPv6: sit2: Disabled Multicast RS [ 508.576729][T20994] netlink: 'syz.2.4092': attribute type 21 has an invalid length. [ 509.074805][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 509.082908][ C1] lec:lec_tx_timeout: lec0 [ 509.087568][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 509.106521][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4102'. [ 509.173060][T21032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4103'. [ 509.530131][T21045] netlink: 'syz.2.4108': attribute type 2 has an invalid length. [ 509.556034][T21045] 9: entered promiscuous mode [ 509.712647][T21049] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 509.892005][T21055] netlink: 'syz.3.4113': attribute type 1 has an invalid length. [ 509.929625][T21055] netlink: 'syz.3.4113': attribute type 1 has an invalid length. [ 509.960342][T21060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4112'. [ 509.971979][T21060] netlink: 'syz.1.4112': attribute type 1 has an invalid length. [ 509.980028][T21060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.088313][T21065] openvswitch: netlink: Message has 239 unknown bytes. [ 510.398522][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4122'. [ 510.432025][T21093] netlink: 'syz.1.4122': attribute type 1 has an invalid length. [ 510.978711][T21123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4129'. [ 511.115737][T21129] syzkaller1: entered promiscuous mode [ 511.121278][T21129] syzkaller1: entered allmulticast mode [ 511.156214][T21129] pim6reg: entered allmulticast mode [ 511.167313][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'. [ 513.182139][T21073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.366151][T21148] netlink: 'syz.4.4137': attribute type 21 has an invalid length. [ 513.413609][T21154] netlink: 'syz.3.4140': attribute type 1 has an invalid length. [ 513.487851][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4139'. [ 513.746394][T21172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.780216][T21174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4147'. [ 513.809251][T21174] netlink: 'syz.4.4147': attribute type 1 has an invalid length. [ 513.837652][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 513.889767][T21178] netlink: 'syz.2.4148': attribute type 10 has an invalid length. [ 513.897816][T21178] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4148'. [ 513.961032][T21176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 514.083167][T21194] netlink: 14584 bytes leftover after parsing attributes in process `syz.4.4147'. [ 514.094751][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 514.102890][ C1] lec:lec_tx_timeout: lec0 [ 514.108096][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 514.501411][T21217] macsec1: entered promiscuous mode [ 515.090921][T21265] syzkaller0: entered promiscuous mode [ 515.100524][T21265] syzkaller0: entered allmulticast mode [ 515.178367][T21268] syzkaller0: entered promiscuous mode [ 515.183962][T21268] syzkaller0: entered allmulticast mode [ 515.246846][T21272] sctp: [Deprecated]: syz.3.4178 (pid 21272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.246846][T21272] Use struct sctp_sack_info instead [ 515.511577][T21286] syzkaller1: entered promiscuous mode [ 515.528816][T21286] syzkaller1: entered allmulticast mode [ 515.661971][T21287] syzkaller0: entered promiscuous mode [ 515.679706][T21287] syzkaller0: entered allmulticast mode [ 515.879361][T21310] netlink: 'syz.1.4190': attribute type 9 has an invalid length. [ 515.908684][T21310] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4190'. [ 516.794319][T21364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4208'. [ 516.861032][T21363] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4208'. [ 518.872132][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4212'. [ 518.996846][T21386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.028441][T21387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.081916][T21386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4217'. [ 519.114769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 519.122848][ C1] lec:lec_tx_timeout: lec0 [ 519.129502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 519.140690][T21386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4217'. [ 519.347592][T21395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4219'. [ 519.624038][T21418] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 519.926209][T21431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4229'. [ 520.025689][T21431] nbd: must specify at least one socket [ 520.274951][T21440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4232'. [ 520.308185][T21440] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4232'. [ 520.463346][T21455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4237'. [ 520.472961][T21456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4237'. [ 520.521058][T21455] xfrm1: entered promiscuous mode [ 520.530355][T21455] xfrm1: entered allmulticast mode [ 520.730787][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4243'. [ 520.742048][T21469] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 520.778401][T21469] bond4 (unregistering): Released all slaves [ 524.904771][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 524.912820][ C1] lec:lec_tx_timeout: lec0 [ 524.917964][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 529.944760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 529.952830][ C1] lec:lec_tx_timeout: lec0 [ 529.957804][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 534.964821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 534.972872][ C1] lec:lec_tx_timeout: lec0 [ 534.977785][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 539.984737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 539.992799][ C1] lec:lec_tx_timeout: lec0 [ 539.997529][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 540.416248][T21494] sctp: [Deprecated]: syz.0.4249 (pid 21494) Use of int in max_burst socket option. [ 540.416248][T21494] Use struct sctp_assoc_value instead [ 540.473284][T21503] openvswitch: netlink: Duplicate or invalid key (type 0). [ 540.483991][T21503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.491371][T21502] __nla_validate_parse: 1 callbacks suppressed [ 540.491419][T21502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4253'. [ 540.679229][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4255'. [ 540.698344][T21512] netlink: 'syz.1.4256': attribute type 23 has an invalid length. [ 540.716545][T21513] macvtap1: entered allmulticast mode [ 540.722075][T21513] veth0_macvtap: entered allmulticast mode [ 540.817599][T21521] netlink: 'syz.4.4258': attribute type 29 has an invalid length. [ 540.838393][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4258'. [ 540.859892][T21516] netlink: 'syz.0.4257': attribute type 2 has an invalid length. [ 540.888721][T21516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 541.428283][T21513] nftables ruleset with unbound chain [ 541.631419][T21533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4262'. [ 541.659747][T21533] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 541.671328][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4266'. [ 541.676409][T21536] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4264'. [ 541.692399][T21539] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.4266'. [ 541.720282][T21538] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.4266'. [ 541.745905][T21541] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20001 [ 541.772964][T21538] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 541.977511][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4272'. [ 542.208347][T21566] netlink: 'syz.4.4275': attribute type 1 has an invalid length. [ 542.393736][T21576] sctp: [Deprecated]: syz.4.4278 (pid 21576) Use of int in max_burst socket option. [ 542.393736][T21576] Use struct sctp_assoc_value instead [ 543.486613][T21606] pimreg: entered allmulticast mode [ 543.634265][T21617] tipc: Enabling of bearer rejected, failed to enable media [ 544.417679][T21680] lo speed is unknown, defaulting to 1000 [ 545.014989][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 545.023048][ C1] lec:lec_tx_timeout: lec0 [ 545.028089][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 546.893097][T21646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.370272][T21713] netlink: 'syz.2.4311': attribute type 1 has an invalid length. [ 547.412349][T21713] __nla_validate_parse: 6 callbacks suppressed [ 547.412369][T21713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4311'. [ 547.487206][T21713] NCSI netlink: No device for ifindex 0 [ 547.761678][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4317'. [ 547.810669][T21733] team0 (unregistering): Port device team_slave_0 removed [ 547.828880][T21733] team0 (unregistering): Port device team_slave_1 removed [ 547.848277][T21740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4319'. [ 547.863169][T21740] netlink: 'syz.3.4319': attribute type 7 has an invalid length. [ 547.876803][T21741] netlink: 'syz.0.4318': attribute type 8 has an invalid length. [ 547.885849][T21740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4319'. [ 547.913656][T21740] ip6gretap0: entered promiscuous mode [ 547.921994][T21740] syz_tun: entered promiscuous mode [ 547.933001][T21732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.342412][T21765] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4327'. [ 548.383748][T21765] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4327'. [ 548.439186][T21771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'. [ 548.503579][T21771] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 548.953325][T21806] sctp: [Deprecated]: syz.0.4338 (pid 21806) Use of int in max_burst socket option. [ 548.953325][T21806] Use struct sctp_assoc_value instead [ 549.190484][T21815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.879678][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 549.886172][T21831] netlink: 'syz.3.4346': attribute type 1 has an invalid length. [ 550.034748][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 550.042838][ C1] lec:lec_tx_timeout: lec0 [ 550.049651][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 550.180504][T21837] bridge0: port 1(1¾x9ÿ) entered disabled state [ 550.189466][T21837] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.461885][T21773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.816334][T21855] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 551.880259][ T7123] IPVS: starting estimator thread 0... [ 551.892928][T21855] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4355'. [ 551.975692][T21865] IPVS: using max 25 ests per chain, 60000 per kthread [ 552.088149][T21874] netlink: 'syz.4.4360': attribute type 11 has an invalid length. [ 552.097671][T21874] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4360'. [ 552.119805][T21875] sctp: [Deprecated]: syz.3.4359 (pid 21875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.119805][T21875] Use struct sctp_sack_info instead [ 552.147182][T21875] sctp: [Deprecated]: syz.3.4359 (pid 21875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.147182][T21875] Use struct sctp_sack_info instead [ 552.368493][T21885] gtp1: entered promiscuous mode [ 552.404894][T21885] gtp1: entered allmulticast mode [ 552.518088][T21900] openvswitch: netlink: Key type 343 is out of range max 32 [ 552.528438][T21900] __nla_validate_parse: 1 callbacks suppressed [ 552.528454][T21900] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4368'. [ 552.735788][T21915] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 553.910206][T21985] netlink: 'syz.0.4398': attribute type 7 has an invalid length. [ 553.924988][T21984] netlink: 'syz.1.4397': attribute type 1 has an invalid length. [ 553.933016][T21985] netlink: 'syz.0.4398': attribute type 7 has an invalid length. [ 553.992129][T21984] bond4: entered promiscuous mode [ 553.997789][T21984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.028254][T21990] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4400'. [ 554.049736][T21984] ipvlan2: entered allmulticast mode [ 554.066812][T21984] bond4: entered allmulticast mode [ 554.121674][T21984] ipvlan3: entered allmulticast mode [ 554.128952][T21992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4399'. [ 554.195570][T21988] bond4: (slave bridge4): making interface the new active one [ 554.214109][T21988] bridge4: entered promiscuous mode [ 554.232370][T21998] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4402'. [ 554.252184][T21988] bridge4: entered allmulticast mode [ 554.273362][T21988] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 554.477579][T22008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4405'. [ 554.502180][T22008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4405'. [ 554.948636][T22046] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4419'. [ 555.065569][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 555.073718][ C1] lec:lec_tx_timeout: lec0 [ 555.079943][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 555.108158][T22054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4420'. [ 555.363117][T22066] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 555.410297][T22070] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4429'. [ 555.439179][T22070] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4429'. [ 555.591302][T22066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 555.663100][T22074] vlan4: entered promiscuous mode [ 555.682752][T22074] bond5: entered promiscuous mode [ 555.697078][T22074] vlan4: entered allmulticast mode [ 555.713486][T22074] bond5: entered allmulticast mode [ 555.769129][T22075] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 555.804280][T22075] bond5: (slave batadv1): making interface the new active one [ 555.820934][T22075] batadv1: entered promiscuous mode [ 555.829878][T22075] batadv1: entered allmulticast mode [ 555.838693][T22075] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 556.031077][T22100] vlan3: entered allmulticast mode [ 556.036804][T22100] bridge3: entered allmulticast mode [ 556.077641][T22100] bridge3: port 1(bond3) entered blocking state [ 556.084242][T22100] bridge3: port 1(bond3) entered disabled state [ 556.095594][T22100] bond3: entered allmulticast mode [ 556.103467][T22100] bond3: entered promiscuous mode [ 556.274600][T22113] IPv6: Can't replace route, no match found [ 556.296786][T22113] IPv6: Can't replace route, no match found [ 556.323698][T22113] sctp: [Deprecated]: syz.1.4441 (pid 22113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.323698][T22113] Use struct sctp_sack_info instead [ 556.377540][T22117] netlink: 'syz.3.4444': attribute type 2 has an invalid length. [ 556.601029][T22126] bond2: option min_links: invalid value (18446744073709551614) [ 556.610072][T22126] bond2: option min_links: allowed values 0 - 2147483647 [ 556.622425][T22126] bond2 (unregistering): Released all slaves [ 556.706788][T22140] netlink: 'syz.4.4449': attribute type 1 has an invalid length. [ 556.835743][T22140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 556.871076][T22145] syz.2.4452 (22145) used obsolete PPPIOCDETACH ioctl [ 556.920756][T22148] bond4: (slave gretap3): making interface the new active one [ 556.931883][T22148] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 557.540016][T22157] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 557.551996][T22157] bond6: option packets_per_slave: allowed values 0 - 65535 [ 557.569191][T22157] bond6 (unregistering): Released all slaves [ 557.740618][T22173] __nla_validate_parse: 68 callbacks suppressed [ 557.740639][T22173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4458'. [ 557.769686][T22173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4458'. [ 557.854017][T22176] netlink: 'syz.1.4460': attribute type 1 has an invalid length. [ 558.135868][T22198] IPVS: Unknown mcast interface: team0 [ 558.241853][T22201] netlink: 'syz.4.4468': attribute type 10 has an invalid length. [ 558.303638][T22206] netlink: 'syz.2.4471': attribute type 1 has an invalid length. [ 558.438441][T22208] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 558.450331][T22208] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 558.464905][T22208] bond1: (slave ip6gre1): making interface the new active one [ 558.473351][T22208] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 558.531069][T22217] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4473'. [ 558.709039][T22222] netlink: 'syz.4.4475': attribute type 1 has an invalid length. [ 558.732928][T22224] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4476'. [ 558.764564][T22225] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4476'. [ 558.915617][T22234] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4481'. [ 559.000781][T22244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4480'. [ 559.101369][T22247] netlink: 'syz.0.4483': attribute type 3 has an invalid length. [ 559.135873][T22247] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4483'. [ 559.187275][T22252] netlink: 'syz.4.4484': attribute type 4 has an invalid length. [ 559.697596][T22270] xt_hashlimit: size too large, truncated to 1048576 [ 560.094770][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 560.102854][ C1] lec:lec_tx_timeout: lec0 [ 560.109306][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 560.214105][T22295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4497'. [ 560.320707][T22299] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4498'. [ 560.347997][T22299] 0·: renamed from hsr_slave_1 (while UP) [ 560.364195][T22299] 0·: entered allmulticast mode [ 560.402454][T22299] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 560.441067][T22303] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 561.229212][T22339] ipt_REJECT: TCP_RESET invalid for non-tcp [ 561.426453][T22342] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 562.990819][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.002145][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.217784][T22340] pimreg3: entered allmulticast mode [ 563.224141][T22346] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 563.271766][T22348] veth5: entered promiscuous mode [ 563.307483][T22351] __nla_validate_parse: 4 callbacks suppressed [ 563.307501][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4513'. [ 563.495376][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4517'. [ 563.607297][T22368] sctp: [Deprecated]: syz.1.4515 (pid 22368) Use of int in max_burst socket option. [ 563.607297][T22368] Use struct sctp_assoc_value instead [ 563.727957][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 563.749467][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 563.841143][T22384] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4523'. [ 563.864490][T22388] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4525'. [ 563.888370][T22382] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 563.898942][T22390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4523'. [ 564.032641][T22392] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 564.041359][T22392] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4527'. [ 564.051740][T22392] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4527'. [ 564.062204][T22392] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 564.070374][T22392] netlink: 'syz.2.4527': attribute type 8 has an invalid length. [ 564.078677][T22392] netlink: 606 bytes leftover after parsing attributes in process `syz.2.4527'. [ 564.123955][T22398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4529'. [ 564.188914][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4526'. [ 564.366645][T22413] ip6tnl0: Caught tx_queue_len zero misconfig [ 564.397349][T22415] netlink: 'syz.2.4533': attribute type 75 has an invalid length. [ 564.610170][T22418] netlink: 'syz.3.4532': attribute type 1 has an invalid length. [ 565.125055][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 565.133147][ C1] lec:lec_tx_timeout: lec0 [ 565.138407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 565.337000][T22454] sock: sock_set_timeout: `syz.2.4542' (pid 22454) tries to set negative timeout [ 565.423923][T22461] netlink: 'syz.3.4544': attribute type 16 has an invalid length. [ 565.442484][T22461] netlink: 'syz.3.4544': attribute type 17 has an invalid length. [ 565.505551][T22473] xt_HMARK: spi-set and port-set can't be combined [ 565.544004][T22461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.719544][T22480] bridge0: port 1(1¾x9ÿ) entered disabled state [ 565.770984][T22482] bridge0: port 1(1¾x9ÿ) entered blocking state [ 565.777565][T22482] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 565.792162][T14707] batman_adv: batadv0: IGMP Querier appeared [ 565.834266][T22482] bridge0: port 1(1¾x9ÿ) entered disabled state [ 566.493988][T22523] syzkaller0: entered promiscuous mode [ 566.521352][T22523] syzkaller0: entered allmulticast mode [ 568.662400][T22535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.673614][T22535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 568.685164][T22535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.812477][T22554] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 569.852867][T22579] netlink: 'syz.4.4573': attribute type 1 has an invalid length. [ 570.961269][T22579] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 571.059164][T22586] __nla_validate_parse: 13 callbacks suppressed [ 571.059186][T22586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4574'. [ 571.086443][T22586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4574'. [ 571.108441][T22535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.146195][T22535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 571.188865][T22535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.218152][T22595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4576'. [ 571.304737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 571.312886][ C1] lec:lec_tx_timeout: lec0 [ 571.318195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.443239][T22535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.463002][T22610] netlink: 'syz.0.4579': attribute type 1 has an invalid length. [ 571.485044][T22535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 571.504415][T22535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.655207][T22612] bond7: (slave bridge3): making interface the new active one [ 571.678821][T22612] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 571.768117][T22535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.780119][T22535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 571.798190][T22535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.818382][T22630] netlink: 'syz.0.4588': attribute type 1 has an invalid length. [ 571.826782][T22630] netlink: 'syz.0.4588': attribute type 1 has an invalid length. [ 571.846778][T22630] netlink: 'syz.0.4588': attribute type 1 has an invalid length. [ 571.858642][T22630] netlink: 'syz.0.4588': attribute type 2 has an invalid length. [ 571.905286][T22630] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4588'. [ 572.088604][ T1165] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.102661][ T1165] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 572.127505][ T1165] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.215595][T20018] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.232264][T20018] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 572.265220][T20018] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.303685][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4594'. [ 572.348447][T20017] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.359800][T20017] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 572.370413][T20017] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.384283][T22658] Cannot find set identified by id 65534 to match [ 572.450969][T20018] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.460254][T20018] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 572.481642][T20018] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.520202][T22655] xt_cgroup: path and classid specified [ 572.913891][T22694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4605'. [ 572.967930][T22694] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 573.137796][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4611'. [ 573.271646][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4611'. [ 573.358687][T22724] bond3: option resend_igmp: invalid value (32767) [ 573.365650][T22724] bond3: option resend_igmp: allowed values 0 - 255 [ 573.373681][T22724] bond3 (unregistering): Released all slaves [ 573.545111][T22734] netlink: 'syz.2.4618': attribute type 6 has an invalid length. [ 573.592784][T22732] bridge_slave_0: left allmulticast mode [ 573.602570][T22732] bridge_slave_0: left promiscuous mode [ 573.629428][T22732] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.706085][T22732] bond0: (slave bridge_slave_1): Releasing backup interface [ 573.722762][T22745] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 573.744314][T22732] bond0: (slave bond_slave_0): Releasing backup interface [ 573.754052][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4619'. [ 573.776949][T22732] bond0: (slave bond_slave_1): Releasing backup interface [ 573.819887][T22732] team0: Port device team_slave_0 removed [ 573.854329][T22732] team0: Port device team_slave_1 removed [ 573.871478][T22732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.893961][T22732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.907381][T22732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.915788][T22732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.926398][T22732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 573.951291][T22738] team0: Mode changed to "activebackup" [ 573.962158][T22746] : renamed from hsr0 (while UP) [ 573.977001][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4623'. [ 574.032918][T22755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.061169][T22761] netlink: 'syz.0.4623': attribute type 1 has an invalid length. [ 574.088611][T22761] netlink: 'syz.0.4623': attribute type 1 has an invalid length. [ 574.110529][T22759] netlink: 'syz.0.4623': attribute type 1 has an invalid length. [ 574.917547][T22788] geneve3: entered promiscuous mode [ 574.933066][T22788] geneve3: entered allmulticast mode [ 574.991155][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 575.036287][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 575.067923][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 575.152051][T22771] mpoa:mpoad_close: () going down [ 575.214924][T22810] ip6t_rpfilter: unknown options [ 575.648810][T22841] sctp: [Deprecated]: syz.4.4648 (pid 22841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.648810][T22841] Use struct sctp_sack_info instead [ 576.386943][T22878] validate_nla: 1 callbacks suppressed [ 576.386963][T22878] netlink: 'syz.2.4658': attribute type 1 has an invalid length. [ 576.434228][T22878] netlink: 'syz.2.4658': attribute type 4 has an invalid length. [ 576.449553][T22875] syzkaller0: entered promiscuous mode [ 576.456683][T22878] __nla_validate_parse: 11 callbacks suppressed [ 576.456701][T22878] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4658'. [ 576.477602][T22875] syzkaller0: entered allmulticast mode [ 576.498839][T22884] netlink: 'syz.0.4661': attribute type 1 has an invalid length. [ 576.511217][ T30] audit: type=1804 audit(1776309520.615:5): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4658" name="/newroot/268/cgroup.controllers" dev="tmpfs" ino=1384 res=1 errno=0 [ 576.519466][T22884] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4661'. [ 576.548044][T22884] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4661'. [ 576.588073][ T30] audit: type=1800 audit(1776309520.645:6): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4658" name="cgroup.controllers" dev="tmpfs" ino=1384 res=0 errno=0 [ 576.693353][T22875] netlink: 15 bytes leftover after parsing attributes in process `syz.4.4657'. [ 576.717759][T22899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 576.749188][T22888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4662'. [ 576.903731][T22890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4662'. [ 576.915005][T22890] nbd: device at index 64 is going down [ 577.079563][T22910] udevd[22910]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 577.101040][T22910] udevd[22910]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 577.409551][T22929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4673'. [ 577.472315][T22933] netlink: 640 bytes leftover after parsing attributes in process `syz.0.4674'. [ 577.507820][T22933] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 577.548840][T22942] netlink: 640 bytes leftover after parsing attributes in process `syz.0.4674'. [ 577.617061][T22942] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 577.847940][T22953] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 577.876458][T22961] netlink: 'syz.0.4680': attribute type 21 has an invalid length. [ 577.892189][T22953] bond2 (unregistering): Released all slaves [ 577.935143][T22961] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 577.949958][T22967] syzkaller1: entered promiscuous mode [ 577.979165][T22967] syzkaller1: entered allmulticast mode [ 578.062084][T22974] netlink: 'syz.1.4683': attribute type 1 has an invalid length. [ 578.138449][T22980] netlink: 'syz.0.4684': attribute type 1 has an invalid length. [ 578.281187][T22987] openvswitch: netlink: EtherType 50a is less than min 600 [ 578.415620][T22998] »»»»»»: renamed from bond_slave_0 (while UP) [ 578.530633][T23005] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 578.594193][T23009] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 578.899972][T23027] geneve2: entered promiscuous mode [ 578.912642][T23027] geneve2: entered allmulticast mode [ 579.247618][T23051] tipc: Started in network mode [ 579.259284][T23051] tipc: Node identity ac14140f, cluster identity 4711 [ 579.278650][T23051] tipc: New replicast peer: 255.255.255.255 [ 579.291846][T23051] tipc: Enabled bearer , priority 10 [ 579.823185][T23087] lo speed is unknown, defaulting to 1000 [ 580.133920][T23098] macvlan2: entered promiscuous mode [ 580.155872][T23098] macvlan2: entered allmulticast mode [ 580.182367][T23098] bond8: (slave macvlan2): Opening slave failed [ 580.406527][ T5830] tipc: Node number set to 2886997007 [ 580.764820][T23128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.938497][T23138] netlink: 'syz.2.4734': attribute type 21 has an invalid length. [ 580.958742][T23138] netlink: 'syz.2.4734': attribute type 5 has an invalid length. [ 580.982703][T23146] netlink: 'syz.4.4736': attribute type 1 has an invalid length. [ 581.006758][T23146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.561744][T23179] __nla_validate_parse: 22 callbacks suppressed [ 581.561764][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'. [ 581.750245][T23192] delete_channel: no stack [ 581.833591][T23196] netlink: 'syz.3.4750': attribute type 7 has an invalid length. [ 581.867991][T23196] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4750'. [ 582.037408][T23211] pim6reg1: entered promiscuous mode [ 582.055882][T23211] pim6reg1: entered allmulticast mode [ 582.071780][T23211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4751'. [ 582.373126][T18784] nci: nci_rx_work: unknown MT 0x5 [ 582.416787][T23236] netlink: 'syz.2.4758': attribute type 1 has an invalid length. [ 582.432048][T23225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.467592][T23236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4758'. [ 582.615464][T23245] netlink: 'syz.4.4760': attribute type 1 has an invalid length. [ 582.769202][T23254] netlink: 54 bytes leftover after parsing attributes in process `syz.3.4761'. [ 582.786161][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4761'. [ 582.831383][T23261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4765'. [ 583.660440][T23294] netlink: 752 bytes leftover after parsing attributes in process `syz.1.4774'. [ 583.739444][T23298] netlink: 'syz.0.4777': attribute type 1 has an invalid length. [ 583.749736][T23298] netlink: 'syz.0.4777': attribute type 1 has an invalid length. [ 583.758118][T23298] netlink: 'syz.0.4777': attribute type 1 has an invalid length. [ 583.766341][T23298] netlink: 'syz.0.4777': attribute type 2 has an invalid length. [ 583.774231][T23298] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4777'. [ 583.965759][T23310] xt_l2tp: invalid flags combination: 8 [ 584.239822][T23321] syzkaller0: entered promiscuous mode [ 584.258684][T23321] syzkaller0: entered allmulticast mode [ 584.483611][T23335] openvswitch: netlink: Missing key (keys=40, expected=80) [ 584.511734][T23335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.565326][T23344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4790'. [ 584.650833][T23351] netlink: 'syz.4.4792': attribute type 1 has an invalid length. [ 584.802738][T23357] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 584.857724][T23359] netlink: 'syz.4.4795': attribute type 2 has an invalid length. [ 584.867727][T23359] netlink: 'syz.4.4795': attribute type 11 has an invalid length. [ 586.577129][T23289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.874046][T23374] __nla_validate_parse: 6 callbacks suppressed [ 586.874065][T23374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4800'. [ 587.189286][T23379] validate_nla: 1 callbacks suppressed [ 587.190149][T23379] netlink: 'syz.4.4802': attribute type 178 has an invalid length. [ 587.337124][T23392] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 587.347260][T23392] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4806'. [ 587.432388][T23399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4809'. [ 587.682845][T23416] netlink: 'syz.0.4814': attribute type 4 has an invalid length. [ 588.166881][T23433] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 588.191701][T23430] macvlan0: entered promiscuous mode [ 588.197683][T23430] macvlan0: entered allmulticast mode [ 588.203246][T23430] veth1_vlan: entered allmulticast mode [ 588.510463][T23442] netlink: set zone limit has 4 unknown bytes [ 588.617416][T23420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.859664][T23457] netlink: 'syz.0.4823': attribute type 1 has an invalid length. [ 588.880167][T23457] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4823'. [ 588.985554][T23467] wireguard1: entered promiscuous mode [ 588.994271][T23467] wireguard1: entered allmulticast mode [ 589.279449][T23484] netlink: 'syz.4.4834': attribute type 83 has an invalid length. [ 589.282035][T23483] netlink: 'syz.3.4833': attribute type 3 has an invalid length. [ 589.531248][T23500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4837'. [ 589.583515][T23502] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 589.637777][T23506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4839'. [ 589.661360][T23502] bond8: entered promiscuous mode [ 589.667521][T23502] 8021q: adding VLAN 0 to HW filter on device bond8 [ 589.688467][T23506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4839'. [ 589.691699][T23502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4839'. [ 589.710188][T23502] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 590.457156][T23551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 590.709355][T23564] netlink: 'syz.2.4859': attribute type 1 has an invalid length. [ 590.733342][T23564] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4859'. [ 590.760540][T23566] bridge0: port 1(ipvlan2) entered blocking state [ 590.782206][T23566] bridge0: port 1(ipvlan2) entered disabled state [ 590.799022][T23566] ipvlan2: entered allmulticast mode [ 590.819001][T23569] netlink: 'syz.4.4860': attribute type 1 has an invalid length. [ 590.844472][T23566] ipvlan2: left allmulticast mode [ 590.879760][T23568] erspan0: entered promiscuous mode [ 590.887332][T23568] gretap0: entered promiscuous mode [ 590.893183][T23568] debugfs: 'hsr1' already exists in 'hsr' [ 590.900458][T23568] Cannot create hsr debugfs directory [ 590.909682][T23573] veth1_to_team: default FDB implementation only supports local addresses [ 590.959481][T23572] vxcan1: Caught tx_queue_len zero misconfig [ 590.967618][T23572] netem: change failed [ 591.138615][T23585] ip6gre0: entered promiscuous mode [ 591.157119][T23585] ip6gre0: entered allmulticast mode [ 591.624471][T23624] x_tables: duplicate entry at hook 1 [ 591.851556][T23638] xt_hashlimit: size too large, truncated to 1048576 [ 591.927932][T23644] __nla_validate_parse: 10 callbacks suppressed [ 591.927972][T23644] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4885'. [ 592.342444][T23658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4891'. [ 592.682039][T23684] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4899'. [ 593.283707][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4913'. [ 593.300900][T23735] IPv6: NLM_F_CREATE should be specified when creating new route [ 593.315781][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4914'. [ 593.395868][T23715] validate_nla: 5 callbacks suppressed [ 593.395888][T23715] netlink: 'syz.3.4909': attribute type 8 has an invalid length. [ 593.424820][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4909'. [ 593.780665][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.812826][T23722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.822746][T23765] netlink: 'syz.0.4919': attribute type 11 has an invalid length. [ 593.822771][T23765] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.4919'. [ 594.652285][ T1165] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.670700][ T1165] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.726725][ T1165] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.752961][ T1165] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.887040][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4926'. [ 594.896412][T23798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4926'. [ 595.038555][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4926'. [ 595.126985][T23808] sctp: [Deprecated]: syz.2.4931 (pid 23808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.126985][T23808] Use struct sctp_sack_info instead [ 595.526178][T23815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.553051][T23834] netlink: 'syz.4.4936': attribute type 13 has an invalid length. [ 595.562227][T23834] netlink: 'syz.4.4936': attribute type 58 has an invalid length. [ 596.182397][T23872] syzkaller1: entered promiscuous mode [ 596.205154][T23872] syzkaller1: entered allmulticast mode [ 596.244537][T23875] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 596.536341][T23889] netlink: 'syz.2.4954': attribute type 1 has an invalid length. [ 596.588938][T23889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.660695][T23895] bond3: option mode: unable to set because the bond device is up [ 596.896979][T23909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.936451][T23915] netlink: 'syz.0.4960': attribute type 11 has an invalid length. [ 596.963921][T23915] netlink: 'syz.0.4960': attribute type 11 has an invalid length. [ 596.972145][T23915] __nla_validate_parse: 12 callbacks suppressed [ 596.972162][T23915] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4960'. [ 600.177940][T23948] netlink: 'syz.4.4967': attribute type 1 has an invalid length. [ 600.290716][T23951] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4967'. [ 600.756243][T23912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.930959][T23912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.107224][T23912] 0·: left allmulticast mode [ 601.371221][T23912] veth1_vlan: left allmulticast mode [ 601.378627][T23912] macvlan0: left promiscuous mode [ 601.384588][T23912] macvlan0: left allmulticast mode [ 601.676026][T23912] xfrm1: left promiscuous mode [ 601.681049][T23912] xfrm1: left allmulticast mode [ 601.688746][T23912] veth0_macvtap: left allmulticast mode [ 601.694548][T23912] macvtap1: left allmulticast mode [ 601.780510][T23912] geneve2: left promiscuous mode [ 601.795118][T23912] geneve2: left allmulticast mode [ 601.981016][T23957] netlink: 'syz.3.4969': attribute type 1 has an invalid length. [ 602.017528][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4970'. [ 602.033574][T23948] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 602.038230][T20018] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.069591][T20018] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.100455][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4970'. [ 602.154568][T23966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4970'. [ 602.224574][T23969] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4971'. [ 602.239820][T23971] ipt_REJECT: ECHOREPLY no longer supported. [ 602.248917][T23957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 602.317501][T20018] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.327267][T20018] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.340190][T23969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4971'. [ 602.425132][T23978] Cannot find del_set index 49151 as target [ 602.886152][T24009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.937526][T24011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4984'. [ 603.064173][T24015] geneve2: entered promiscuous mode [ 603.087804][T24015] netlink: 'syz.0.4985': attribute type 1 has an invalid length. [ 603.109739][T24015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4985'. [ 603.133765][T24017] xt_SECMARK: invalid mode: 9 [ 603.557440][T24028] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.565236][T24028] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.781758][T24028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.801159][T24028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.839791][T24050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4993'. [ 603.961181][T24057] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4993'. [ 603.983419][T24031] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.995110][T24031] netdevsim netdevsim1 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 604.010445][T24031] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.029560][T23749] lo speed is unknown, defaulting to 1000 [ 604.036933][T23749] syz2: Port: 1 Link DOWN [ 604.091898][T20017] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.111116][T20017] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 604.134912][T20017] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.147876][T20017] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.158349][T20017] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 604.167299][T20017] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.201883][T23767] lo speed is unknown, defaulting to 1000 [ 604.233774][T20017] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.259166][T20017] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 604.278438][T20017] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.310022][T24060] ±ÿ: renamed from team_slave_1 [ 604.472787][T24078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5000'. [ 604.494064][T24078] openvswitch: netlink: Missing key (keys=40, expected=80) [ 604.551188][T24081] syzkaller1: entered promiscuous mode [ 604.564369][T24081] syzkaller1: entered allmulticast mode [ 604.572443][T24081] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 606.939882][T24103] syzkaller1: entered promiscuous mode [ 606.945898][T24103] syzkaller1: entered allmulticast mode [ 607.083321][T24118] __nla_validate_parse: 2 callbacks suppressed [ 607.083360][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5012'. [ 607.249835][T24129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5016'. [ 607.259245][T24133] lo: entered promiscuous mode [ 607.270759][T24133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.550253][T24148] netlink: 'syz.2.5023': attribute type 1 has an invalid length. [ 607.605447][T24148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 607.623398][T24156] vlan2: entered promiscuous mode [ 607.628885][T24156] bond4: entered promiscuous mode [ 607.634081][T24156] vlan2: entered allmulticast mode [ 607.641450][T24156] bond4: entered allmulticast mode [ 607.647375][T24150] ip_vti0: entered promiscuous mode [ 607.656508][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'. [ 607.682675][T24154] vlan3: entered promiscuous mode [ 607.878443][T24156] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 607.886734][T24158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5025'. [ 607.898865][T24156] bond4: (slave batadv2): making interface the new active one [ 607.909150][T24156] batadv2: entered promiscuous mode [ 607.914836][T24156] batadv2: entered allmulticast mode [ 607.955827][T24156] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 608.019072][T24159] IPv6: sit1: Disabled Multicast RS [ 608.058793][T24165] netlink: 'syz.4.5026': attribute type 1 has an invalid length. [ 608.157881][T24165] bond5: entered promiscuous mode [ 608.177057][T24165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.319207][T24179] netlink: 'syz.0.5030': attribute type 39 has an invalid length. [ 608.364383][T24174] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.375677][T24174] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 608.410984][T24174] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 608.454377][T24174] bond5: (slave ip6gre2): making interface the new active one [ 608.478690][T24174] ip6gre2: entered promiscuous mode [ 608.487990][T24174] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 608.585512][T24188] syzkaller1: entered promiscuous mode [ 608.591076][T24188] syzkaller1: entered allmulticast mode [ 608.600963][T24190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5033'. [ 608.710447][T24199] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 608.825876][T24204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5036'. [ 608.902253][T24204] syzkaller0: entered allmulticast mode [ 608.917488][T24204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5036'. [ 608.930093][T24214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5040'. [ 608.946172][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5040'. [ 608.967699][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5040'. [ 608.990472][T24196] syzkaller0: left allmulticast mode [ 609.138541][T17954] ================================================================== [ 609.146676][T17954] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 609.154681][T17954] Read of size 8 at addr ffff88809c0392c0 by task dhcpcd/17954 [ 609.162343][T17954] [ 609.164700][T17954] CPU: 0 UID: 101 PID: 17954 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 609.164726][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 609.164740][T17954] Call Trace: [ 609.164749][T17954] [ 609.164758][T17954] dump_stack_lvl+0xe8/0x150 [ 609.164791][T17954] print_report+0xba/0x230 [ 609.164818][T17954] ? sock_def_readable+0x1cb/0x550 [ 609.164842][T17954] kasan_report+0x117/0x150 [ 609.164865][T17954] ? sock_def_readable+0x1cb/0x550 [ 609.164894][T17954] sock_def_readable+0x1cb/0x550 [ 609.164919][T17954] ? sock_def_readable+0xae/0x550 [ 609.164944][T17954] ? send_to_lecd+0x26d/0x830 [ 609.164969][T17954] send_to_lecd+0x3e7/0x830 [ 609.164999][T17954] lec_start_xmit+0xe52/0x2890 [ 609.165032][T17954] dev_hard_start_xmit+0x2cd/0x830 [ 609.165062][T17954] sch_direct_xmit+0x251/0x4c0 [ 609.165094][T17954] ? __pfx_sch_direct_xmit+0x10/0x10 [ 609.165126][T17954] __qdisc_run+0xa83/0x1560 [ 609.165165][T17954] __dev_queue_xmit+0x1021/0x3950 [ 609.165191][T17954] ? __dev_queue_xmit+0x2b6/0x3950 [ 609.165218][T17954] ? _copy_from_iter+0x5d4/0x1670 [ 609.165251][T17954] ? __pfx___dev_queue_xmit+0x10/0x10 [ 609.165276][T17954] ? __pfx__copy_from_iter+0x10/0x10 [ 609.165316][T17954] ? __pfx_packet_parse_headers+0x10/0x10 [ 609.165348][T17954] ? packet_xmit+0x68/0x320 [ 609.165378][T17954] packet_sendmsg+0x3ebc/0x50f0 [ 609.165408][T17954] ? shmem_acquire_dquot+0x80/0x640 [ 609.165438][T17954] ? do_syscall_64+0x15f/0xf80 [ 609.165463][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.165504][T17954] ? aa_sk_perm+0x6d5/0x900 [ 609.165529][T17954] ? __pfx_packet_sendmsg+0x10/0x10 [ 609.165559][T17954] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 609.165603][T17954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 609.165632][T17954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.165665][T17954] ? __pfx_packet_sendmsg+0x10/0x10 [ 609.165689][T17954] sock_write_iter+0x49b/0x4f0 [ 609.165714][T17954] ? __pfx_sock_write_iter+0x10/0x10 [ 609.165736][T17954] ? aa_file_perm+0x192/0x15e0 [ 609.165773][T17954] ? aa_sock_msg_perm+0xda/0x1b0 [ 609.165817][T17954] do_iter_readv_writev+0x619/0x8c0 [ 609.165871][T17954] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 609.165907][T17954] ? bpf_lsm_file_permission+0x9/0x20 [ 609.165928][T17954] ? security_file_permission+0x75/0x260 [ 609.165952][T17954] ? rw_verify_area+0x255/0x4d0 [ 609.165985][T17954] vfs_writev+0x33c/0x990 [ 609.166007][T17954] ? bpf_lsm_file_permission+0x9/0x20 [ 609.166034][T17954] ? __pfx_vfs_writev+0x10/0x10 [ 609.166067][T17954] ? __pfx_set_user_sigmask+0x10/0x10 [ 609.166107][T17954] do_writev+0x154/0x2e0 [ 609.166132][T17954] ? __pfx_do_writev+0x10/0x10 [ 609.166159][T17954] ? __secure_computing+0xe1/0x2a0 [ 609.166186][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.166208][T17954] do_syscall_64+0x15f/0xf80 [ 609.166232][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.166255][T17954] ? clear_bhb_loop+0x40/0x90 [ 609.166280][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.166301][T17954] RIP: 0033:0x7f42518ff407 [ 609.166321][T17954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 609.166340][T17954] RSP: 002b:00007ffe1db78230 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 609.166364][T17954] RAX: ffffffffffffffda RBX: 00007f4251875780 RCX: 00007f42518ff407 [ 609.166381][T17954] RDX: 0000000000000002 RSI: 00007ffe1db78290 RDI: 0000000000000003 [ 609.166395][T17954] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000 [ 609.166408][T17954] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe1db782d0 [ 609.166421][T17954] R13: 000055be8562ad00 R14: 00007ffe1db78320 R15: 00007ffe1db884f0 [ 609.166448][T17954] [ 609.166456][T17954] [ 609.534011][T17954] Allocated by task 18003: [ 609.538442][T17954] kasan_save_track+0x3e/0x80 [ 609.543153][T17954] __kasan_slab_alloc+0x6c/0x80 [ 609.548022][T17954] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 609.553857][T17954] sock_alloc_inode+0x2c/0x190 [ 609.558646][T17954] alloc_inode+0x6a/0x1b0 [ 609.563000][T17954] __sock_create+0x12d/0x9d0 [ 609.567643][T17954] __sys_socket+0xd6/0x1b0 [ 609.572169][T17954] __x64_sys_socket+0x7a/0x90 [ 609.576873][T17954] do_syscall_64+0x15f/0xf80 [ 609.581493][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.587414][T17954] [ 609.589753][T17954] Freed by task 14707: [ 609.593834][T17954] kasan_save_track+0x3e/0x80 [ 609.598551][T17954] kasan_save_free_info+0x46/0x50 [ 609.603605][T17954] __kasan_slab_free+0x5c/0x80 [ 609.608395][T17954] kmem_cache_free+0x180/0x630 [ 609.613202][T17954] rcu_core+0x7cd/0x1070 [ 609.617550][T17954] handle_softirqs+0x22a/0x840 [ 609.622336][T17954] do_softirq+0x76/0xd0 [ 609.626519][T17954] __local_bh_enable_ip+0xf8/0x130 [ 609.631654][T17954] bond_3ad_state_machine_handler+0x58cf/0x5bc0 [ 609.638000][T17954] process_scheduled_works+0xb5d/0x1860 [ 609.643578][T17954] worker_thread+0xa53/0xfc0 [ 609.648188][T17954] kthread+0x388/0x470 [ 609.652272][T17954] ret_from_fork+0x514/0xb70 [ 609.656895][T17954] ret_from_fork_asm+0x1a/0x30 [ 609.661686][T17954] [ 609.664024][T17954] Last potentially related work creation: [ 609.669779][T17954] kasan_save_stack+0x3e/0x60 [ 609.674482][T17954] kasan_record_aux_stack+0xbd/0xd0 [ 609.679804][T17954] call_rcu+0xee/0x890 [ 609.683902][T17954] evict+0x95b/0xb10 [ 609.687830][T17954] __dentry_kill+0x1a2/0x5e0 [ 609.692443][T17954] finish_dput+0xc9/0x480 [ 609.696798][T17954] __fput+0x691/0xa60 [ 609.700802][T17954] fput_close_sync+0x11f/0x240 [ 609.705610][T17954] __x64_sys_close+0x7e/0x110 [ 609.710311][T17954] do_syscall_64+0x15f/0xf80 [ 609.714929][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.720842][T17954] [ 609.723176][T17954] The buggy address belongs to the object at ffff88809c039200 [ 609.723176][T17954] which belongs to the cache sock_inode_cache of size 1408 [ 609.737766][T17954] The buggy address is located 192 bytes inside of [ 609.737766][T17954] freed 1408-byte region [ffff88809c039200, ffff88809c039780) [ 609.751697][T17954] [ 609.754048][T17954] The buggy address belongs to the physical page: [ 609.760487][T17954] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9c038 [ 609.769277][T17954] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 609.777797][T17954] memcg:ffff88809c03fe01 [ 609.782062][T17954] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 609.789621][T17954] page_type: f5(slab) [ 609.793621][T17954] raw: 00fff00000000040 ffff88801f286b40 dead000000000100 dead000000000122 [ 609.802223][T17954] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff88809c03fe01 [ 609.810833][T17954] head: 00fff00000000040 ffff88801f286b40 dead000000000100 dead000000000122 [ 609.819525][T17954] head: 0000000000000000 0000000800150015 00000000f5000000 ffff88809c03fe01 [ 609.828243][T17954] head: 00fff00000000003 ffffea0002700e01 00000000ffffffff 00000000ffffffff [ 609.836946][T17954] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 609.845749][T17954] page dumped because: kasan: bad access detected [ 609.852200][T17954] page_owner tracks the page as allocated [ 609.857926][T17954] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18003, tgid 18003 (syz-executor), ts 574250490523, free_ts 568861683291 [ 609.881418][T17954] post_alloc_hook+0x231/0x280 [ 609.886214][T17954] get_page_from_freelist+0x24dc/0x2580 [ 609.891775][T17954] __alloc_frozen_pages_noprof+0x18d/0x380 [ 609.897598][T17954] allocate_slab+0x77/0x660 [ 609.902119][T17954] refill_objects+0x331/0x3c0 [ 609.906821][T17954] __pcs_replace_empty_main+0x2e6/0x730 [ 609.912385][T17954] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 609.918214][T17954] sock_alloc_inode+0x2c/0x190 [ 609.922993][T17954] alloc_inode+0x6a/0x1b0 [ 609.927350][T17954] __sock_create+0x12d/0x9d0 [ 609.931960][T17954] __sys_socket+0xd6/0x1b0 [ 609.936396][T17954] __x64_sys_socket+0x7a/0x90 [ 609.941124][T17954] do_syscall_64+0x15f/0xf80 [ 609.945743][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.951673][T17954] page last free pid 22555 tgid 22555 stack trace: [ 609.958188][T17954] __free_frozen_pages+0xc2b/0xdb0 [ 609.963331][T17954] __slab_free+0x263/0x2b0 [ 609.967778][T17954] qlist_free_all+0x97/0x100 [ 609.972400][T17954] kasan_quarantine_reduce+0x148/0x160 [ 609.977888][T17954] __kasan_slab_alloc+0x22/0x80 [ 609.982751][T17954] kmem_cache_alloc_noprof+0x2bc/0x650 [ 609.988230][T17954] vm_area_alloc+0x24/0x140 [ 609.992757][T17954] mmap_region+0x10e0/0x22a0 [ 609.997364][T17954] do_mmap+0xc39/0x10c0 [ 610.001546][T17954] vm_mmap_pgoff+0x2c9/0x4f0 [ 610.006152][T17954] ksys_mmap_pgoff+0x51e/0x760 [ 610.010936][T17954] do_syscall_64+0x15f/0xf80 [ 610.015545][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.021454][T17954] [ 610.023798][T17954] Memory state around the buggy address: [ 610.029440][T17954] ffff88809c039180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 610.037516][T17954] ffff88809c039200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.045592][T17954] >ffff88809c039280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.053671][T17954] ^ [ 610.059850][T17954] ffff88809c039300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.067926][T17954] ffff88809c039380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.076002][T17954] ================================================================== [ 610.084175][T17954] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 610.091389][T17954] CPU: 0 UID: 101 PID: 17954 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 610.100606][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 610.110862][T17954] Call Trace: [ 610.114162][T17954] [ 610.117108][T17954] vpanic+0x56c/0xa60 [ 610.121123][T17954] ? __pfx_vpanic+0x10/0x10 [ 610.125660][T17954] panic+0xc5/0xd0 [ 610.129406][T17954] ? __pfx_panic+0x10/0x10 [ 610.133854][T17954] ? sock_def_readable+0x1cb/0x550 [ 610.138984][T17954] ? rcu_is_watching+0x15/0xb0 [ 610.143774][T17954] ? sock_def_readable+0x1cb/0x550 [ 610.148900][T17954] ? sock_def_readable+0x1cb/0x550 [ 610.154028][T17954] check_panic_on_warn+0x89/0xb0 [ 610.158987][T17954] ? sock_def_readable+0x1cb/0x550 [ 610.164129][T17954] end_report+0x73/0x170 [ 610.168396][T17954] ? sock_def_readable+0x1cb/0x550 [ 610.173616][T17954] kasan_report+0x128/0x150 [ 610.178137][T17954] ? sock_def_readable+0x1cb/0x550 [ 610.183287][T17954] sock_def_readable+0x1cb/0x550 [ 610.188257][T17954] ? sock_def_readable+0xae/0x550 [ 610.193308][T17954] ? send_to_lecd+0x26d/0x830 [ 610.198010][T17954] send_to_lecd+0x3e7/0x830 [ 610.202549][T17954] lec_start_xmit+0xe52/0x2890 [ 610.207439][T17954] dev_hard_start_xmit+0x2cd/0x830 [ 610.212606][T17954] sch_direct_xmit+0x251/0x4c0 [ 610.217406][T17954] ? __pfx_sch_direct_xmit+0x10/0x10 [ 610.222739][T17954] __qdisc_run+0xa83/0x1560 [ 610.227277][T17954] __dev_queue_xmit+0x1021/0x3950 [ 610.232330][T17954] ? __dev_queue_xmit+0x2b6/0x3950 [ 610.237466][T17954] ? _copy_from_iter+0x5d4/0x1670 [ 610.242550][T17954] ? __pfx___dev_queue_xmit+0x10/0x10 [ 610.247948][T17954] ? __pfx__copy_from_iter+0x10/0x10 [ 610.253265][T17954] ? __pfx_packet_parse_headers+0x10/0x10 [ 610.259015][T17954] ? packet_xmit+0x68/0x320 [ 610.263547][T17954] packet_sendmsg+0x3ebc/0x50f0 [ 610.268423][T17954] ? shmem_acquire_dquot+0x80/0x640 [ 610.273671][T17954] ? do_syscall_64+0x15f/0xf80 [ 610.278455][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.284564][T17954] ? aa_sk_perm+0x6d5/0x900 [ 610.289094][T17954] ? __pfx_packet_sendmsg+0x10/0x10 [ 610.294312][T17954] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 610.300762][T17954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 610.305738][T17954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.311061][T17954] ? __pfx_packet_sendmsg+0x10/0x10 [ 610.316280][T17954] sock_write_iter+0x49b/0x4f0 [ 610.321063][T17954] ? __pfx_sock_write_iter+0x10/0x10 [ 610.326369][T17954] ? aa_file_perm+0x192/0x15e0 [ 610.331161][T17954] ? aa_sock_msg_perm+0xda/0x1b0 [ 610.336124][T17954] do_iter_readv_writev+0x619/0x8c0 [ 610.341347][T17954] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 610.347101][T17954] ? bpf_lsm_file_permission+0x9/0x20 [ 610.352496][T17954] ? security_file_permission+0x75/0x260 [ 610.358145][T17954] ? rw_verify_area+0x255/0x4d0 [ 610.363032][T17954] vfs_writev+0x33c/0x990 [ 610.367382][T17954] ? bpf_lsm_file_permission+0x9/0x20 [ 610.372775][T17954] ? __pfx_vfs_writev+0x10/0x10 [ 610.377650][T17954] ? __pfx_set_user_sigmask+0x10/0x10 [ 610.383059][T17954] do_writev+0x154/0x2e0 [ 610.387343][T17954] ? __pfx_do_writev+0x10/0x10 [ 610.392124][T17954] ? __secure_computing+0xe1/0x2a0 [ 610.397259][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.403346][T17954] do_syscall_64+0x15f/0xf80 [ 610.407964][T17954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.414050][T17954] ? clear_bhb_loop+0x40/0x90 [ 610.418760][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.424671][T17954] RIP: 0033:0x7f42518ff407 [ 610.429104][T17954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 610.448730][T17954] RSP: 002b:00007ffe1db78230 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 610.457175][T17954] RAX: ffffffffffffffda RBX: 00007f4251875780 RCX: 00007f42518ff407 [ 610.465160][T17954] RDX: 0000000000000002 RSI: 00007ffe1db78290 RDI: 0000000000000003 [ 610.473150][T17954] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000 [ 610.481149][T17954] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe1db782d0 [ 610.489135][T17954] R13: 000055be8562ad00 R14: 00007ffe1db78320 R15: 00007ffe1db884f0 [ 610.497130][T17954] [ 610.500775][T17954] Kernel Offset: disabled [ 610.505106][T17954] Rebooting in 86400 seconds..