last executing test programs: 1m23.697163185s ago: executing program 1 (id=2280): r0 = socket(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x7, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x1) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd4, 0x0, 0x4) r3 = socket(0x1d, 0x2400000001, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x13, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 1m23.311496109s ago: executing program 1 (id=2282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x8001, 0x1, 0x3, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="01000000", @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r10, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0xfffffffffffffd2e, 0x2e, 0xd0b, 0x0, 0x0, {0x9}, [@typed={0x1b, 0x13e, 0x0, 0x0, @u32=0x10004}, @generic="eaffc2ee109f5cb5ed15a564814ec748efe46dd015ccb48ff0c0a898c98f3042a0530dc50b443b3c80099f0abb02108b61a273950f86f1adb655665ce690f110983f38489d1a21ed9748c263d0b93b806d9ddeaef6dd4435d5ac4beae4f5670c3cbba5503af2b6f83da9d25552ec8765cc6f2ea699bf6c23f5cef22b103ca0c0d67ce505a92c057eb40445741c4b00000000ec13dbac015ed9e31af43b6cee1884e150e00850b5f9e84e0c5b8ddf33d2992cb67c30291b81b8a95b200983d90e6d0294b2bf4fba113094d53e61e839de2a9eefa8d745d21c2cf7fcbda23f"]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x1cdc}, 0x1, 0x0, 0x0, 0x24000091}, 0x4000) 1m22.967326075s ago: executing program 2 (id=2287): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xb6b2ca0ebc195c99, {0x2, 0x4e22, @multicast2}, 'veth0_vlan\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={0x128, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x300}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}]}]}, 0x128}}, 0x40) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="15000100faffffff0000006002180000", @ANYRES32=r6, @ANYBLOB="14000300766574683000"/20], 0x2c}}, 0x4000850) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004005) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff2811db3c841566c7defe7aef", @ANYRES32=0x0, @ANYBLOB="c04200000000000014001280090001007665746800000000040002800800200001000000"], 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10) 1m22.882820937s ago: executing program 1 (id=2288): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x7) (async) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x4e24, 0x204, 0xa}, {0xbcd, 0x0, 0x3}, {0x81, 0x802}, 0x2000000, 0x6e6bb4, 0x1}, {{@in6=@loopback, 0x8000, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (async) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) socket$inet6(0xa, 0x3, 0x6) (async) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0x1}, 0x51f}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000001c0)=""/135, &(0x7f0000000000)=0x87) 1m22.86852898s ago: executing program 0 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x99}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x40000) 1m22.806821504s ago: executing program 4 (id=2290): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000140)=0x14) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x81}, 0x4004800) 1m22.755306898s ago: executing program 2 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040) 1m22.75386284s ago: executing program 0 (id=2292): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x2, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x108e, &(0x7f0000001480)={@empty, @empty, @void, {@mpls_uc={0x8847, {[{0x7513}, {0x23, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd}, {0xbfe}, {0x80}, {0x7}], @ipv4=@dccp={{0x14, 0x4, 0x3, 0x20, 0x1060, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @remote, {[@ssrr={0x89, 0xf, 0x3c, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}]}, @generic={0x82, 0x12, "7ed8281d85a45bbebb369dfbf7ee91f5"}, @noop, @generic={0x86, 0x2}, @timestamp_addr={0x44, 0xc, 0xce, 0x1, 0x7, [{@loopback, 0x1}]}, @timestamp={0x44, 0xc, 0xee, 0x0, 0x0, [0xbfff, 0x4]}]}}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, "0685f5", 0x0, "a06910"}, "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"}}}}}}, &(0x7f0000000080)={0x0, 0x4, [0xc4e, 0xb15, 0xf07, 0xdda]}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'nicvf0\x00', 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000300)={0x401, {{0xa, 0x4e20, 0xe, @local}}}, 0x88) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e3, &(0x7f0000000180)={r8, r10}) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x8, 0x0, 0x0, @local, @local, {[@srh={0x32}]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x20040051) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400fc01000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x24004001}, 0x4054) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000140)={0x1, 0x400, 0x3}) 1m22.579026944s ago: executing program 0 (id=2293): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x44, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xa006}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x5, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x3, 0x0, 0x0, 0x8000}]}}]}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x101, 0xa, {{0xd, 0x4, 0x2, 0x1c, 0x34, 0x65, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0x13, 0x17, [@private=0xa010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp_addr={0x44, 0xc, 0x5a, 0x1, 0x1, [{@remote, 0xce41}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettfilter={0x34, 0x2e, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0xffe0}, {0x1, 0xffe0}, {0x5, 0x1}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000000000000000000000000002011834000000020000000000000802000000020000000000000ee900005b000000000000006100"], 0x0, 0x54}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000090800000000000000008a0000000000000100000000270b02090218f6e8a7c04f20523729a48c45fe568c9433dcceaa56f79ebf55b3e7b5b7ef3adcafeadbd55e"], 0x1c}}, 0x0) 1m22.527281488s ago: executing program 4 (id=2294): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0xb, 0x5, 0x27) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000e}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x844) r4 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r4, 0x0, 0x0) unshare(0x26020480) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1m22.482228433s ago: executing program 1 (id=2295): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000140), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14012000", @ANYRES16=r5, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000014000500fe80000000000000000000000000000014000600ff010000000000000000000000000001"], 0x114}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000500) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m22.428767583s ago: executing program 2 (id=2296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet6(0xa, 0x2, 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socket$inet6(0xa, 0x2, 0x5) (async) 1m22.367986382s ago: executing program 3 (id=2297): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) close(r1) syz_emit_ethernet(0x12d, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES64=r1], 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900c13832c99c7ef1bf00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf43951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0f00d6e4edef3d93452a", 0xd8}], 0x1}, 0x800) listen(r3, 0x8) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x0, 0x2, 0x1, 0x1}}, 0x2e) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) close(r1) (async) syz_emit_ethernet(0x12d, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES64=r1], 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900c13832c99c7ef1bf00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf43951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0f00d6e4edef3d93452a", 0xd8}], 0x1}, 0x800) (async) listen(r3, 0x8) (async) accept4(r3, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x0, 0x2, 0x1, 0x1}}, 0x2e) (async) 1m22.366689059s ago: executing program 4 (id=2298): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) 1m22.187286832s ago: executing program 0 (id=2299): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000340)}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="5b36763b833f8249b277cd8a6ee50bed7508a9a2e62227278afefc2d98f215d2639950128e2564f75845433a18dd73ac8e56bd6653677e14ec11b784a9307363555d6a5cc8f61cfa96b2501e1ae2a1eab3fe58f6173745dcb32042796f4b54c5482a769256d1ba89b408b1be2f8631b52736e2aa4a4c7b4499a0bf34f927c828685c5b91de4b6d49c07e5dac4a9ccdfb66a95e897bc948188ce3f6b0e1c7c389b3a46280b18e84000eeb455654339e2e3e88d33d43ca63957de447667bccd2fd488064af", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000829bd7000ffdbdf250300000008000100", @ANYRES32=r10, @ANYBLOB="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"], 0x1c}}, 0x0) 1m22.186970011s ago: executing program 3 (id=2300): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) bind$netrom(r1, &(0x7f0000004840)={{0x3, @null, 0x9}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000301000080000009500000000000000a077bdb90ce405dde0882c0ee807d717be26a0a4d9dbf74455d08fdbc3fa0273745892d109864dde9d1406949dfc86607a453008fc1408df8b23c520a292c137cd8764c52b1ead22d4905a8071f612a298690076b0cb58b8ee623d34755359093e5bc4ed8f21a14922518f629ada7daa53346a396ec3538e27733045dcf6f42e644efc5d3f398bf63f058189b3f131f2587fa3c7957f596ac669fa593fdd11c5953058ccd308b652be94d8682bed15a58377630e3609f8f41348d3adee6ec1854e6924dfe9"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1m22.057861745s ago: executing program 3 (id=2301): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8e1, 0x1e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) 1m21.851102633s ago: executing program 4 (id=2302): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="b40600000000000071114f00000000008510000002000000850000000000fc00"/49], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(0x3) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007031a000300", 0x33a) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x120, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbde}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x86d}}, {@nsim={{0xe}, {0x4f, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 1m21.728206567s ago: executing program 2 (id=2303): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0xfc, 0x24, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff1}, {0x7}, {0x10, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0xff, 0x81}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x3c, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x3660}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x565c703b}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffff}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0xfc36, 0xd, 0x2, 0x101, 0x7, 0x4}}, {0xc, 0x2, [0x280, 0xfd9, 0x8, 0x8]}}, {{0x1c, 0x1, {0x6, 0x9, 0x100, 0xfff, 0x1, 0x101, 0x3, 0x4}}, {0xc, 0x2, [0x8001, 0x4, 0xf6a8, 0x6]}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m21.586275599s ago: executing program 3 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) 1m21.509074341s ago: executing program 0 (id=2305): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x81, 0xcc, &(0x7f00000003c0)=""/204, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r0, r0, r0, r0, r0], &(0x7f0000000540)=[{0x5, 0x3, 0x5}, {0x0, 0x4, 0x8, 0x2}, {0x2, 0x5, 0xd}, {0x4, 0x2, 0x10, 0x5}, {0x5, 0x3, 0xc, 0xa}, {0x5, 0x3, 0x593, 0xa}], 0x10, 0xdb}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@fallback=r0, r3, 0xc, 0x0, r4, @void, @value=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000000ca3384cd5628d729971600000000000000000100000000000000fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x40090) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1m21.397241993s ago: executing program 1 (id=2306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff00f500200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e05dc9e58"], 0x0) 1m21.292880892s ago: executing program 2 (id=2307): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m21.161882166s ago: executing program 4 (id=2308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x2000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1615a930dd030d3e}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\nT\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf251600000005000400000000000500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x70}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4004) 1m21.092410431s ago: executing program 3 (id=2309): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfffb}, {0xfff1, 0x4}, {0xa06d1318dbb4eb2c}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x0, 0x0, "a25b3c2bfe0fbcf77c05933641d87714"}) 1m21.062736602s ago: executing program 1 (id=2310): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x1a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r1, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000000101040000ee808422d73c79000800020001e8000803034000"/48], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) r8 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x61e2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) socket(0x2d, 0x2, 0x0) 1m21.061734295s ago: executing program 0 (id=2311): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) (async) r1 = socket(0x1a, 0x80805, 0xceda) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 1m20.881058521s ago: executing program 4 (id=2312): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000001600)=""/176, &(0x7f00000016c0)=0xb0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r2, 0x48212b8952c3affd, 0x70bd24}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4040800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000003080300000000000000000001000007050003003a0000000c000480086f9fb700014000"], 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@delnexthop={0x18, 0x69, 0x20, 0x70bd28, 0x25dfdbff}, 0x18}}, 0x0) 1m20.83195336s ago: executing program 2 (id=2313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000001340), r1) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001440)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40050) 1m20.519781946s ago: executing program 3 (id=2314): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000140)=0x81, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r2, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) recvfrom(r1, 0x0, 0x0, 0x40000040, 0x0, 0x0) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000005ec0), 0xffffffffffffffff) 0s ago: executing program 32 (id=2311): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) (async) r1 = socket(0x1a, 0x80805, 0xceda) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) kernel console output (not intermixed with test programs): may not be safe on all matching packets. [ 112.525782][ T6786] netlink: 'syz.3.224': attribute type 18 has an invalid length. [ 112.621813][ T6786] netlink: 'syz.3.224': attribute type 18 has an invalid length. [ 112.630224][ T1153] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.650261][ T1153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.668896][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.709891][ T6794] openvswitch: netlink: IP tunnel dst address not specified [ 112.712461][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.736543][ T6794] openvswitch: netlink: IP tunnel dst address not specified [ 112.819787][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030c2c800: rx timeout, send abort [ 112.829303][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030c2c800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 112.986633][ T6803] tipc: Started in network mode [ 113.004705][ T6803] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.087460][ T6803] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 113.127987][ T6803] tipc: Enabled bearer , priority 10 [ 113.435283][ T6826] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 113.620240][ T6837] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.051487][ T6856] bridge_slave_0: left allmulticast mode [ 114.068196][ T6861] __nla_validate_parse: 9 callbacks suppressed [ 114.068217][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 114.126466][ T6856] bridge_slave_0: left promiscuous mode [ 114.178056][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.255738][ T5953] tipc: Node number set to 1 [ 114.287848][ T6856] bridge_slave_1: left allmulticast mode [ 114.293818][ T6856] bridge_slave_1: left promiscuous mode [ 114.300521][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.300754][ T6871] sctp: [Deprecated]: syz.4.248 (pid 6871) Use of int in maxseg socket option. [ 114.300754][ T6871] Use struct sctp_assoc_value instead [ 114.355908][ T6856] bond0: (slave bond_slave_0): Releasing backup interface [ 114.372387][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 114.384283][ T6875] openvswitch: netlink: Message has 4 unknown bytes. [ 114.387266][ T6871] openvswitch: netlink: Unknown nsh attribute 0 [ 114.393226][ T6856] bond0: (slave bond_slave_1): Releasing backup interface [ 114.407989][ T6871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.430998][ T6856] team0: Port device team_slave_0 removed [ 114.444396][ T6856] team0: Port device team_slave_1 removed [ 114.452790][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.460383][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.481548][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.490403][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.515185][ T6856] gretap1: left allmulticast mode [ 114.593314][ T6863] macvlan2: entered promiscuous mode [ 114.601752][ T6863] macvlan2: entered allmulticast mode [ 114.609900][ T6863] veth1_to_bond: entered promiscuous mode [ 114.616627][ T6863] veth1_to_bond: entered allmulticast mode [ 114.625358][ T6863] team0: Port device macvlan2 added [ 114.795737][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 114.990638][ T6891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.253'. [ 115.199934][ T6900] validate_nla: 1 callbacks suppressed [ 115.199956][ T6900] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 115.237868][ T6903] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 115.244380][ T6902] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 115.400039][ T6909] netlink: 252 bytes leftover after parsing attributes in process `syz.2.261'. [ 115.443749][ T6902] bond3: entered promiscuous mode [ 115.458870][ T6902] bond3: entered allmulticast mode [ 115.465982][ T6902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.475481][ T6900] veth0_macvtap: left promiscuous mode [ 115.750259][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 115.769095][ T6915] syz_tun: entered allmulticast mode [ 115.817223][ T6914] syz_tun: left allmulticast mode [ 116.236468][ T6937] netlink: 'syz.2.268': attribute type 2 has an invalid length. [ 116.297262][ T6937] netlink: 'syz.2.268': attribute type 2 has an invalid length. [ 116.324982][ T6938] tipc: Enabling of bearer rejected, failed to enable media [ 116.705513][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 116.756911][ T6960] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 116.835704][ T6965] netlink: 'syz.4.274': attribute type 4 has an invalid length. [ 116.910111][ T6960] bond3: entered promiscuous mode [ 116.915589][ T6960] bond3: entered allmulticast mode [ 116.922012][ T6960] 8021q: adding VLAN 0 to HW filter on device bond3 [ 116.955399][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 117.050994][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 117.139370][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 117.369930][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 118.527539][ T7031] syz_tun: entered allmulticast mode [ 118.617967][ T7031] dvmrp1: entered allmulticast mode [ 118.791239][ T7043] unsupported nlmsg_type 40 [ 119.288313][ T7061] __nla_validate_parse: 4 callbacks suppressed [ 119.288343][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 119.304924][ T7030] syz_tun: left allmulticast mode [ 119.381539][ T7064] netlink: 144 bytes leftover after parsing attributes in process `syz.2.299'. [ 119.421889][ T51] Bluetooth: hci4: command tx timeout [ 119.851392][ T7086] netlink: 588 bytes leftover after parsing attributes in process `syz.4.306'. [ 120.195064][ T7098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.283468][ T7100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 120.415040][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 120.724437][ T7110] tipc: Started in network mode [ 120.730010][ T7110] tipc: Node identity 4a4f197f9592, cluster identity 4711 [ 120.745840][ T7110] tipc: Enabled bearer , priority 0 [ 120.753913][ T7110] syzkaller0: entered promiscuous mode [ 120.764540][ T7110] syzkaller0: entered allmulticast mode [ 120.847410][ T7108] tipc: Resetting bearer [ 120.920185][ T7108] tipc: Disabling bearer [ 121.188579][ T7140] syzkaller1: entered promiscuous mode [ 121.208067][ T7140] syzkaller1: entered allmulticast mode [ 121.265235][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 121.400134][ T7153] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002 [ 122.209268][ T7193] can: request_module (can-proto-0) failed. [ 122.492381][ T7219] netlink: 56 bytes leftover after parsing attributes in process `syz.2.344'. [ 122.654919][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.346'. [ 122.659423][ T7232] openvswitch: netlink: Message has -1 unknown bytes. [ 122.688274][ T7235] netlink: 72 bytes leftover after parsing attributes in process `syz.4.348'. [ 122.764506][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 122.999615][ T7255] openvswitch: netlink: Key type 29 is not supported [ 123.059279][ T7245] veth0_virt_wifi: renamed from veth0_vlan [ 123.099439][ T7245] syz.0.351 (7245) used greatest stack depth: 18936 bytes left [ 123.103959][ T7259] IPVS: length: 67 != 24 [ 123.113820][ T7253] gretap1: entered promiscuous mode [ 123.122895][ T7253] gretap1: entered allmulticast mode [ 123.134173][ T7261] netlink: 'syz.1.358': attribute type 33 has an invalid length. [ 123.508410][ T7276] netlink: 'syz.4.363': attribute type 9 has an invalid length. [ 123.953398][ T7296] hsr_slave_0 (unregistering): left promiscuous mode [ 124.359240][ T7324] __nla_validate_parse: 9 callbacks suppressed [ 124.359261][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'. [ 124.498788][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 124.668947][ T7346] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 124.726827][ T7345] bridge2: entered promiscuous mode [ 124.730297][ T7352] netlink: 'syz.0.384': attribute type 2 has an invalid length. [ 124.732117][ T7345] bridge2: entered allmulticast mode [ 124.976409][ T7358] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 124.984274][ T7358] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 125.007617][ T7358] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 125.038060][ T7358] netlink: 'syz.0.387': attribute type 2 has an invalid length. [ 125.055308][ T7358] netlink: 76 bytes leftover after parsing attributes in process `syz.0.387'. [ 125.321709][ T7381] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 125.342952][ T7383] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 125.355924][ T7381] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 125.374280][ T7383] netlink: 224 bytes leftover after parsing attributes in process `syz.4.396'. [ 125.412002][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 125.448765][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 125.500225][ T7394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.673335][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 125.694496][ T7404] netlink: 'syz.1.402': attribute type 3 has an invalid length. [ 125.721728][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 125.753631][ T7408] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 125.837087][ T7410] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 125.900838][ T7410] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.913659][ T7410] gretap2: entered promiscuous mode [ 125.920039][ T7410] gretap2: entered allmulticast mode [ 125.956086][ T7415] netlink: 'syz.0.404': attribute type 25 has an invalid length. [ 126.204812][ T5953] IPVS: starting estimator thread 0... [ 126.282304][ T7431] dvmrp0: entered allmulticast mode [ 126.327347][ T7434] IPVS: using max 26 ests per chain, 62400 per kthread [ 126.486105][ T7449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.493711][ T7426] syz.4.408: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.555467][ T7426] CPU: 1 UID: 0 PID: 7426 Comm: syz.4.408 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 126.555495][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.555507][ T7426] Call Trace: [ 126.555516][ T7426] [ 126.555525][ T7426] dump_stack_lvl+0x189/0x250 [ 126.555560][ T7426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.555583][ T7426] ? __pfx__printk+0x10/0x10 [ 126.555607][ T7426] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.555628][ T7426] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.555648][ T7426] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 126.555669][ T7426] warn_alloc+0x214/0x310 [ 126.555700][ T7426] ? __pfx_warn_alloc+0x10/0x10 [ 126.555733][ T7426] ? __get_vm_area_node+0x28f/0x300 [ 126.555757][ T7426] ? xskq_create+0xbf/0x170 [ 126.555779][ T7426] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 126.555835][ T7426] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.555866][ T7426] ? __kasan_kmalloc+0x93/0xb0 [ 126.555891][ T7426] vmalloc_user_noprof+0xad/0xf0 [ 126.555915][ T7426] ? xskq_create+0xbf/0x170 [ 126.555935][ T7426] xskq_create+0xbf/0x170 [ 126.555958][ T7426] xsk_init_queue+0xb0/0x110 [ 126.555980][ T7426] xsk_setsockopt+0x57b/0x8d0 [ 126.556001][ T7426] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.556019][ T7426] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.556071][ T7426] ? __fget_files+0x2a/0x420 [ 126.556097][ T7426] ? aa_sock_opt_perm+0xff/0x1b0 [ 126.556126][ T7426] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 126.556147][ T7426] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.556169][ T7426] do_sock_setsockopt+0x17c/0x1b0 [ 126.556203][ T7426] __x64_sys_setsockopt+0x13f/0x1b0 [ 126.556234][ T7426] do_syscall_64+0xfa/0x3b0 [ 126.556255][ T7426] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.556275][ T7426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.556294][ T7426] ? clear_bhb_loop+0x60/0xb0 [ 126.556318][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.556336][ T7426] RIP: 0033:0x7f372438ebe9 [ 126.556353][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.556367][ T7426] RSP: 002b:00007f3725188038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.556387][ T7426] RAX: ffffffffffffffda RBX: 00007f37245b5fa0 RCX: 00007f372438ebe9 [ 126.556401][ T7426] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 126.556413][ T7426] RBP: 00007f3724411e19 R08: 0000000000000004 R09: 0000000000000000 [ 126.556426][ T7426] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 126.556438][ T7426] R13: 00007f37245b6038 R14: 00007f37245b5fa0 R15: 00007ffd78fe3ea8 [ 126.556471][ T7426] [ 126.830442][ T7426] Mem-Info: [ 126.833592][ T7426] active_anon:4413 inactive_anon:0 isolated_anon:0 [ 126.833592][ T7426] active_file:1085 inactive_file:39839 isolated_file:0 [ 126.833592][ T7426] unevictable:768 dirty:61 writeback:0 [ 126.833592][ T7426] slab_reclaimable:10933 slab_unreclaimable:95269 [ 126.833592][ T7426] mapped:28889 shmem:1360 pagetables:1058 [ 126.833592][ T7426] sec_pagetables:0 bounce:0 [ 126.833592][ T7426] kernel_misc_reclaimable:0 [ 126.833592][ T7426] free:1327364 free_pcp:14392 free_cma:0 [ 126.924782][ T7426] Node 0 active_anon:17752kB inactive_anon:0kB active_file:4340kB inactive_file:159152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115556kB dirty:244kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11980kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 126.976494][ T7426] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.018362][ T7426] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.050122][ T7426] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 127.060997][ T7426] Node 0 DMA32 free:1405248kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17888kB inactive_anon:0kB active_file:4340kB inactive_file:157580kB unevictable:1536kB writepending:244kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:39124kB local_pcp:17704kB free_cma:0kB [ 127.093496][ T7426] lowmem_reserve[]: 0 0 1 1 1 [ 127.100984][ T7426] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 127.131778][ T7426] lowmem_reserve[]: 0 0 0 0 0 [ 127.136592][ T7426] Node 1 Normal free:3888592kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:8704kB free_cma:0kB [ 127.168479][ T7426] lowmem_reserve[]: 0 0 0 0 0 [ 127.173244][ T7426] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.228041][ T7426] Node 0 DMA32: 421*4kB (UM) 199*8kB (ME) 100*16kB (ME) 48*32kB (M) 34*64kB (UME) 17*128kB (UM) 11*256kB (UME) 4*512kB (UME) 9*1024kB (ME) 10*2048kB (UME) 332*4096kB (M) = 1405196kB [ 127.257643][ T7426] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 127.276248][ T7426] Node 1 Normal: 168*4kB (UE) 46*8kB (UME) 48*16kB (UME) 40*32kB (UME) 15*64kB (UME) 6*128kB (UME) 3*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3888592kB [ 127.301149][ T7469] netlink: 44 bytes leftover after parsing attributes in process `syz.3.420'. [ 127.339857][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 127.348699][ T7475] netem: unknown loss type 0 [ 127.348811][ T7475] netem: change failed [ 127.349139][ T7426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.379402][ T7426] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.397365][ T7426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.407939][ T7426] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.418162][ T7426] 42280 total pagecache pages [ 127.423093][ T7426] 0 pages in swap cache [ 127.429625][ T7426] Free swap = 124996kB [ 127.433807][ T7426] Total swap = 124996kB [ 127.438852][ T7426] 2097051 pages RAM [ 127.439901][ T7479] tipc: Enabling of bearer rejected, failed to enable media [ 127.442931][ T7426] 0 pages HighMem/MovableOnly [ 127.458342][ T7426] 425645 pages reserved [ 127.463020][ T7426] 0 pages cma reserved [ 127.779755][ T7498] sctp: [Deprecated]: syz.3.426 (pid 7498) Use of int in max_burst socket option deprecated. [ 127.779755][ T7498] Use struct sctp_assoc_value instead [ 128.255522][ T7513] nbd2: detected capacity change from 0 to 127 [ 128.399465][ T7513] netlink: 'syz.4.429': attribute type 23 has an invalid length. [ 128.413439][ T7526] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 128.423625][ T51] block nbd2: Receive control failed (result -32) [ 128.424021][ T7526] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.519168][ T6088] IPVS: starting estimator thread 0... [ 128.615255][ T7532] IPVS: using max 25 ests per chain, 60000 per kthread [ 128.640496][ T7540] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 128.833350][ T7555] gretap1: entered promiscuous mode [ 128.839128][ T7555] gretap1: entered allmulticast mode [ 129.368662][ T7573] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 129.460962][ T7578] __nla_validate_parse: 2 callbacks suppressed [ 129.460981][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 129.488559][ T7578] netlink: 'syz.0.445': attribute type 18 has an invalid length. [ 129.537107][ T7585] netlink: 224 bytes leftover after parsing attributes in process `syz.3.449'. [ 129.567402][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 129.574848][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.586061][ T7578] netlink: 'syz.0.445': attribute type 18 has an invalid length. [ 129.613803][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 129.649898][ T7589] netlink: 'syz.3.450': attribute type 8 has an invalid length. [ 129.653844][ T7573] bond1: (slave bridge4): making interface the new active one [ 129.672847][ T7573] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 129.690970][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.844597][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.868498][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.961762][ T7600] netlink: 'syz.1.454': attribute type 8 has an invalid length. [ 130.021559][ T7606] netlink: 204 bytes leftover after parsing attributes in process `syz.1.454'. [ 130.342639][ T7620] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.489732][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 130.832537][ T7646] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 130.860064][ T7646] netlink: 216 bytes leftover after parsing attributes in process `syz.4.468'. [ 130.917411][ T7646] netlink: 'syz.4.468': attribute type 12 has an invalid length. [ 130.933292][ T7646] netlink: 'syz.4.468': attribute type 29 has an invalid length. [ 130.951424][ T7646] netlink: 148 bytes leftover after parsing attributes in process `syz.4.468'. [ 130.972883][ T7646] netlink: 59 bytes leftover after parsing attributes in process `syz.4.468'. [ 131.310018][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 132.139377][ T7711] raw_sendmsg: syz.2.481 forgot to set AF_INET. Fix it! [ 132.203725][ T7713] tipc: Enabled bearer , priority 10 [ 132.788000][ T7741] nbd3: detected capacity change from 0 to 63 [ 132.802253][ T7741] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 132.823020][ T51] block nbd3: Receive control failed (result -32) [ 132.942925][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.315159][ T5953] tipc: Node number set to 3755809151 [ 135.033297][ T7797] __nla_validate_parse: 8 callbacks suppressed [ 135.033317][ T7797] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.505'. [ 135.078395][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 135.115037][ T7804] netlink: 5 bytes leftover after parsing attributes in process `syz.1.507'. [ 135.123205][ T7787] syz.2.503 (7787) used greatest stack depth: 17808 bytes left [ 135.298590][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 135.457895][ T7827] netlink: 'syz.2.511': attribute type 7 has an invalid length. [ 135.466035][ T7827] netlink: 140 bytes leftover after parsing attributes in process `syz.2.511'. [ 135.485407][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.513'. [ 135.671148][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 135.716045][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 135.747967][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 135.774344][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 135.845300][ T7842] bridge0: port 3(vlan3) entered blocking state [ 135.867611][ T7842] bridge0: port 3(vlan3) entered disabled state [ 135.888940][ T7842] vlan3: entered allmulticast mode [ 135.906307][ T7842] bridge0: entered allmulticast mode [ 135.915894][ T7842] vlan3: left allmulticast mode [ 135.921010][ T7842] bridge0: left allmulticast mode [ 135.950932][ T7841] bridge0: port 3(vlan3) entered blocking state [ 135.959083][ T7841] bridge0: port 3(vlan3) entered disabled state [ 135.972119][ T7841] vlan3: entered allmulticast mode [ 135.978261][ T7841] bridge0: entered allmulticast mode [ 135.991733][ T7841] vlan3: left allmulticast mode [ 135.996951][ T7841] bridge0: left allmulticast mode [ 136.456342][ T7871] team0 (unregistering): Port device team_slave_0 removed [ 136.473009][ T7871] team0 (unregistering): Port device team_slave_1 removed [ 136.590956][ T7870] sctp: [Deprecated]: syz.0.524 (pid 7870) Use of int in maxseg socket option. [ 136.590956][ T7870] Use struct sctp_assoc_value instead [ 136.937324][ T7905] netlink: 'syz.3.533': attribute type 3 has an invalid length. [ 137.025504][ T7908] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 137.929558][ T7965] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 137.956506][ T7967] bridge_slave_0: left allmulticast mode [ 137.962317][ T7967] bridge_slave_0: left promiscuous mode [ 137.969566][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.987489][ T7967] bridge_slave_1: left allmulticast mode [ 137.993413][ T7967] bridge_slave_1: left promiscuous mode [ 138.005122][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.024132][ T7967] bond0: (slave bond_slave_0): Releasing backup interface [ 138.038362][ T7967] bond0: (slave bond_slave_1): Releasing backup interface [ 138.057051][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.064563][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.083704][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.100537][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.156194][ T7967] bond1: (slave bridge4): Releasing active interface [ 138.191472][ T7970] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 138.823960][ T8014] IPv6: sit1: Disabled Multicast RS [ 138.999127][ T30] audit: type=1107 audit(1754960998.385:3): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 139.030258][ T8023] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 139.159722][ T8027] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 139.181280][ T8027] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.200108][ T8027] gretap2: entered promiscuous mode [ 139.207899][ T8027] gretap2: entered allmulticast mode [ 139.450898][ T8042] bond0: entered promiscuous mode [ 139.553261][ T8051] ip6gre1: entered allmulticast mode [ 139.666438][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.674103][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.683395][ T8057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.692388][ T8057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.701496][ T8057] batman_adv: batadv0: Removing interface: team0 [ 139.946040][ T8067] netlink: 'syz.1.580': attribute type 2 has an invalid length. [ 140.101215][ T8076] __nla_validate_parse: 18 callbacks suppressed [ 140.101235][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 140.120047][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 140.146055][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 140.169568][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 140.222042][ T8085] netlink: 84 bytes leftover after parsing attributes in process `syz.1.585'. [ 140.401107][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 140.627372][ T8105] veth1_to_bridge: entered promiscuous mode [ 140.633758][ T8105] macvtap1: entered allmulticast mode [ 140.661088][ T8105] veth1_to_bridge: entered allmulticast mode [ 140.903287][ T8130] !€ÿ: renamed from bond_slave_0 (while UP) [ 141.238068][ T8152] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 141.272321][ T8152] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 141.348000][ T8156] netlink: 'syz.4.607': attribute type 4 has an invalid length. [ 141.537800][ T7767] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 141.559621][ T8172] delete_channel: no stack [ 141.655635][ T8184] netlink: 'syz.2.617': attribute type 3 has an invalid length. [ 141.702451][ T8192] netlink: 'syz.1.615': attribute type 10 has an invalid length. [ 141.716093][ T8192] syz_tun: entered promiscuous mode [ 141.739103][ T8192] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 141.764353][ T8195] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 142.474580][ T8207] tipc: Enabling of bearer rejected, failed to enable media [ 142.627831][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 142.642817][ T51] block nbd1: Receive control failed (result -32) [ 142.685889][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.626'. [ 142.835961][ T8229] netlink: 'syz.4.627': attribute type 9 has an invalid length. [ 142.843682][ T8229] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.627'. [ 143.029432][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 143.483092][ T8260] 8021q: VLANs not supported on sit0 [ 143.543555][ T8261] bond5: entered promiscuous mode [ 143.550535][ T8261] bond5: entered allmulticast mode [ 143.556726][ T8261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.625809][ T8268] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 143.761862][ T8279] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 143.775383][ T8279] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 143.785129][ T8279] gretap1: entered promiscuous mode [ 143.800988][ T8276] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 143.819562][ T8279] gretap1: entered allmulticast mode [ 144.009294][ T8276] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.011465][ T8293] openvswitch: netlink: Key 19 has unexpected len 8 expected 4 [ 144.077437][ T8291] bond0: entered promiscuous mode [ 144.083659][ T8291] bond0: entered allmulticast mode [ 144.091876][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.153840][ T8302] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 144.291152][ T8311] pim6reg1: entered promiscuous mode [ 144.340864][ T8311] pim6reg1: entered allmulticast mode [ 144.397943][ T8316] syz_tun: entered allmulticast mode [ 144.491170][ T8316] netlink: 'syz.3.656': attribute type 8 has an invalid length. [ 144.566671][ T8315] syz_tun: left allmulticast mode [ 144.650326][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.662819][ T8328] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 144.677432][ T8328] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 144.743445][ T8338] netlink: 'syz.3.662': attribute type 12 has an invalid length. [ 144.751839][ T8338] netlink: 'syz.3.662': attribute type 29 has an invalid length. [ 145.191778][ T8358] __nla_validate_parse: 9 callbacks suppressed [ 145.191798][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 145.255880][ T8362] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 145.288412][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 145.786422][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 145.800290][ T30] audit: type=1107 audit(1754961005.195:4): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 146.042506][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'. [ 146.184029][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 146.218968][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 146.253008][ T8414] netlink: 92 bytes leftover after parsing attributes in process `syz.4.687'. [ 146.260785][ T8404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.684'. [ 146.313644][ T8414] validate_nla: 1 callbacks suppressed [ 146.313662][ T8414] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 146.342482][ T8414] netlink: 228 bytes leftover after parsing attributes in process `syz.4.687'. [ 146.346674][ T8404] netlink: 80 bytes leftover after parsing attributes in process `syz.2.684'. [ 148.003349][ T30] audit: type=1107 audit(1754961007.395:5): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Rì³a'micé6Ã2¯˜WkûGQ=´„âÇ?ÞG¡§t},Mn Dr*]WB8ZL”x<]´Èmìh>m«)]ÞŠ0Îo¿`Ù'/©r}…·6£Rö¹õ(/‡±­zO_S&ë¶(ý±Á×zžÈDžø]n[÷€Ð4ž W”OîÒKÛ¿åM™H]ËH!%L]2¯º*cœyˆOýO¦9ˆ;5^nÒà…\øY‹¢€wíÀOàIÈÌ+J#ér”éMÊõ@‹ÍsãÔ°^«Êž»4îeë{' [ 148.469275][ T8510] net veth1_virt_wifi .: renamed from virt_wifi0 [ 148.913338][ T8538] sctp: [Deprecated]: syz.2.719 (pid 8538) Use of int in max_burst socket option. [ 148.913338][ T8538] Use struct sctp_assoc_value instead [ 149.112100][ T8546] erspan0: entered promiscuous mode [ 149.217473][ T8553] sctp: [Deprecated]: syz.4.724 (pid 8553) Use of int in max_burst socket option deprecated. [ 149.217473][ T8553] Use struct sctp_assoc_value instead [ 149.249046][ T8551] sctp: [Deprecated]: syz.4.724 (pid 8551) Use of int in max_burst socket option deprecated. [ 149.249046][ T8551] Use struct sctp_assoc_value instead [ 149.686686][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.763128][ T8574] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 149.903892][ T8577] geneve2: entered promiscuous mode [ 149.931281][ T8577] geneve2: entered allmulticast mode [ 149.941981][ T10] IPVS: starting estimator thread 0... [ 150.036793][ T8586] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.094233][ T8593] netlink: 'syz.1.736': attribute type 83 has an invalid length. [ 150.323128][ T8598] netlink: 'syz.4.738': attribute type 2 has an invalid length. [ 150.343783][ T8598] __nla_validate_parse: 11 callbacks suppressed [ 150.343805][ T8598] netlink: 4284 bytes leftover after parsing attributes in process `syz.4.738'. [ 150.368832][ T8604] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 150.528453][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 150.541555][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 150.550862][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 150.729097][ T8625] veth0: entered promiscuous mode [ 150.742940][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 150.772821][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 150.842472][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 150.859688][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 150.932065][ T8628] nft_compat: unsupported protocol 0 [ 151.489087][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 151.538226][ T8624] veth0: left promiscuous mode [ 151.852680][ T8655] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.976207][ T8660] bond0: option ad_select: unable to set because the bond device is up [ 152.014520][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'. [ 152.233687][ T8680] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 152.247357][ T8680] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 152.257978][ T8680] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 152.267524][ T8680] netlink: 'syz.2.762': attribute type 29 has an invalid length. [ 152.575240][ T8689] team0: No ports can be present during mode change [ 152.593671][ T8698] : renamed from bridge_slave_0 (while UP) [ 152.627153][ T8689] vlan0: entered promiscuous mode [ 152.690597][ T8689] team0: Port device vlan0 added [ 152.728908][ T8696] tipc: Started in network mode [ 152.733940][ T8696] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 152.752216][ T8696] tipc: Enabled bearer , priority 0 [ 152.823014][ T8705] syzkaller1: entered promiscuous mode [ 152.831254][ T8705] syzkaller1: entered allmulticast mode [ 153.309034][ T8740] openvswitch: netlink: Missing valid actions attribute. [ 153.316592][ T8740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.779019][ T8772] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 153.802896][ T8772] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 153.818177][ T8772] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.865438][ T5953] tipc: Node number set to 11578026 [ 154.214556][ T8801] veth0: entered promiscuous mode [ 154.253546][ T8803] nft_compat: unsupported protocol 0 [ 154.482631][ T8813] dvmrp1: entered allmulticast mode [ 155.241202][ T8853] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 155.259608][ T8854] sctp: [Deprecated]: syz.0.813 (pid 8854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.259608][ T8854] Use struct sctp_sack_info instead [ 155.324254][ T8858] sctp: [Deprecated]: syz.0.813 (pid 8858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.324254][ T8858] Use struct sctp_sack_info instead [ 155.596819][ T8875] __nla_validate_parse: 14 callbacks suppressed [ 155.596842][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 155.652280][ T8877] tipc: Started in network mode [ 155.658782][ T8877] tipc: Node identity 7abf4ae253d4, cluster identity 4711 [ 155.667180][ T8877] tipc: Enabled bearer , priority 0 [ 155.676588][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 155.683283][ T8877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.725439][ T8876] tipc: Disabling bearer [ 155.896989][ T5887] Bluetooth: hci2: command tx timeout [ 156.042741][ T8896] netlink: 'syz.4.827': attribute type 7 has an invalid length. [ 156.215261][ T5887] Bluetooth: hci4: command 0x0405 tx timeout [ 156.250179][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'. [ 156.259902][ T8923] : left allmulticast mode [ 156.259932][ T8923] : left promiscuous mode [ 156.260280][ T8923] bridge0: port 1() entered disabled state [ 156.286437][ T8923] bridge_slave_1: left allmulticast mode [ 156.286650][ T8917] netlink: 'syz.1.829': attribute type 7 has an invalid length. [ 156.292456][ T8923] bridge_slave_1: left promiscuous mode [ 156.312523][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.326245][ T8917] netlink: 'syz.1.829': attribute type 8 has an invalid length. [ 156.334010][ T8928] netlink: 'syz.3.831': attribute type 3 has an invalid length. [ 156.343850][ T8869] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 156.353270][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 156.373946][ T8923] bond0: (slave 1!€ÿ): Releasing backup interface [ 156.440892][ T8923] bond0: (slave bond_slave_1): Releasing backup interface [ 156.540128][ T8923] team0: Port device team_slave_0 removed [ 156.568154][ T8923] team0: Port device team_slave_1 removed [ 156.576364][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.586383][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.595274][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.602658][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.636836][ T8923] team0: Port device geneve0 removed [ 156.652978][ T8923] bond0: (slave wlan1): Releasing backup interface [ 156.686660][ T8927] netlink: 44 bytes leftover after parsing attributes in process `syz.4.832'. [ 156.740628][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'. [ 156.929469][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'. [ 157.183986][ T8961] syzkaller0: entered promiscuous mode [ 157.216163][ T8961] syzkaller0: entered allmulticast mode [ 157.227672][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 157.241969][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 157.574887][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 157.629249][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 158.048177][ T9014] team0: No ports can be present during mode change [ 158.195420][ T9025] 8021q: VLANs not supported on ip6gre0 [ 159.497346][ T9079] validate_nla: 2 callbacks suppressed [ 159.497367][ T9079] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 159.542390][ T9079] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 159.570172][ T9079] netlink: 'syz.2.867': attribute type 235 has an invalid length. [ 159.656748][ T5953] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 159.822765][ T9089] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 160.294469][ T9099] tunl0: entered promiscuous mode [ 160.316894][ T9099] netlink: 'syz.4.877': attribute type 3 has an invalid length. [ 160.573549][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.581468][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.606605][ T9113] __nla_validate_parse: 10 callbacks suppressed [ 160.606625][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.882'. [ 160.645466][ T9113] netlink: 44 bytes leftover after parsing attributes in process `syz.4.882'. [ 160.792118][ T9127] 8021q: VLANs not supported on xfrm0 [ 160.946878][ T9136] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 161.779121][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 162.393317][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 162.609865][ T9198] syzkaller0: entered promiscuous mode [ 162.616607][ T9198] syzkaller0: entered allmulticast mode [ 162.853295][ T9211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.905'. [ 162.900286][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.905'. [ 162.919495][ T9205] netlink: 'syz.2.905': attribute type 9 has an invalid length. [ 163.289264][ T9229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.911'. [ 163.365449][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 163.404528][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 163.480451][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.915'. [ 164.371067][ T9293] pim6reg1: entered promiscuous mode [ 164.380407][ T9293] pim6reg1: entered allmulticast mode [ 164.583464][ T9298] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 164.680336][ T9298] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 164.711561][ T9298] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.751263][ T9309] tipc: Enabled bearer , priority 0 [ 164.782585][ T9309] tipc: Resetting bearer [ 164.890753][ T9308] tipc: Disabling bearer [ 165.159197][ T9325] netlink: 'syz.2.939': attribute type 29 has an invalid length. [ 165.249967][ T9336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.257565][ T9336] IPv6: NLM_F_CREATE should be set when creating new route [ 165.830131][ T9364] tipc: Enabled bearer , priority 0 [ 165.838959][ T9361] tipc: Enabling of bearer rejected, already enabled [ 165.851318][ T9364] syzkaller0: entered promiscuous mode [ 165.853441][ T9366] __nla_validate_parse: 1 callbacks suppressed [ 165.853458][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 165.874388][ T9364] syzkaller0: entered allmulticast mode [ 165.884868][ T9363] netlink: 'syz.3.948': attribute type 6 has an invalid length. [ 165.916716][ T9361] tipc: Resetting bearer [ 165.937544][ T9360] tipc: Resetting bearer [ 165.953834][ T9360] tipc: Disabling bearer [ 166.226084][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'. [ 166.261619][ T9382] netlink: 'syz.3.955': attribute type 10 has an invalid length. [ 166.281230][ T9382] veth0_vlan: entered allmulticast mode [ 166.507124][ T9401] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 166.549014][ T9401] netlink: 228 bytes leftover after parsing attributes in process `syz.1.958'. [ 166.760932][ T9411] gretap3: entered allmulticast mode [ 166.782211][ T9415] netlink: 'syz.1.966': attribute type 6 has an invalid length. [ 166.800834][ T9418] C: renamed from lo (while UP) [ 166.806611][ T9415] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.966'. [ 166.876574][ T9423] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 166.890446][ T9421] netlink: 68 bytes leftover after parsing attributes in process `syz.4.967'. [ 166.957335][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.970'. [ 167.012401][ T9425] netlink: 52 bytes leftover after parsing attributes in process `syz.1.970'. [ 167.021983][ T9425] netlink: 52 bytes leftover after parsing attributes in process `syz.1.970'. [ 167.066628][ T9430] lo: entered promiscuous mode [ 167.071862][ T9430] netlink: 'syz.4.971': attribute type 2 has an invalid length. [ 167.088554][ T9430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.187369][ T9439] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 167.196058][ T9439] netlink: 224 bytes leftover after parsing attributes in process `syz.4.974'. [ 167.207409][ T9439] netlink: 9 bytes leftover after parsing attributes in process `syz.4.974'. [ 167.222445][ T9439] gretap0: entered promiscuous mode [ 169.950435][ T9603] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 169.989264][ T9603] team0: Device macvtap1 is already an upper device of the team interface [ 171.186946][ T9665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.194300][ T9665] IPv6: NLM_F_CREATE should be set when creating new route [ 171.630642][ T9679] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 171.992628][ T9703] __nla_validate_parse: 11 callbacks suppressed [ 171.992651][ T9703] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1041'. [ 172.704152][ T9694] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 172.776386][ T9743] netlink: 167728 bytes leftover after parsing attributes in process `syz.4.1052'. [ 172.802968][ T9743] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 172.943541][ T9755] pim6reg1: entered promiscuous mode [ 172.949129][ T9755] pim6reg1: entered allmulticast mode [ 173.159315][ T9766] IPv6: addrconf: prefix option has invalid lifetime [ 173.349924][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 173.373292][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 173.385157][ T9775] netlink: 'syz.0.1062': attribute type 11 has an invalid length. [ 173.437471][ T9778] netlink: 'syz.1.1063': attribute type 17 has an invalid length. [ 173.461657][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 173.482860][ T9778] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1063'. [ 173.686043][ T9785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 173.923372][ T9809] netlink: 'syz.4.1071': attribute type 9 has an invalid length. [ 173.977128][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 174.082468][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'. [ 174.091782][ T9819] netlink: 'syz.0.1072': attribute type 1 has an invalid length. [ 174.100735][ T9819] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1072'. [ 174.242156][ T9830] rdma_op ffff888026eb91f0 conn xmit_rdma 0000000000000000 [ 175.078269][ T9857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1085'. [ 175.391320][ T9872] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.401514][ T9872] vlan0: entered promiscuous mode [ 175.424402][ T9872] team0: Port device vlan0 added [ 175.522744][ T9881] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 175.706875][ T9886] bond4: entered promiscuous mode [ 175.712314][ T9886] bond4: entered allmulticast mode [ 175.718509][ T9886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.764443][ T9892] openvswitch: netlink: IPv6 tunnel dst address is zero [ 176.408573][ T9927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 176.661747][ T9946] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 176.714001][ T9946] gtp1: entered promiscuous mode [ 176.739978][ T9946] gtp1: entered allmulticast mode [ 176.916941][ T9952] netem: invalid attributes len -24 [ 176.922919][ T9952] netem: change failed [ 177.211183][ T9984] __nla_validate_parse: 9 callbacks suppressed [ 177.211203][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1119'. [ 177.276132][ T6009] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 177.675724][T10010] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1131'. [ 177.687350][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1131'. [ 177.728156][T10015] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 177.742433][T10014] IPVS: stopping master sync thread 10015 ... [ 177.989859][T10025] veth1_macvtap: left promiscuous mode [ 177.995926][T10025] macsec0: entered promiscuous mode [ 177.998825][T10027] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1136'. [ 178.193621][T10033] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 178.209499][T10025] bond5: entered allmulticast mode [ 178.218540][T10025] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.228775][T10025] bridge0: port 3(bond5) entered blocking state [ 178.235550][T10025] bridge0: port 3(bond5) entered disabled state [ 178.245282][T10025] bond5: entered promiscuous mode [ 178.254003][T10039] lo: left promiscuous mode [ 178.262134][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 178.276565][T10039] tunl0: left promiscuous mode [ 178.287081][T10039] gretap0: left promiscuous mode [ 178.301198][T10039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.420760][T10033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.462104][T10041] bond1: (slave gretap3): making interface the new active one [ 178.474228][T10041] bond1: (slave gretap3): Enslaving as an active interface with an up link [ 178.506378][T10052] netlink: 'syz.0.1142': attribute type 2 has an invalid length. [ 178.530156][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 178.547196][T10050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1142'. [ 178.569972][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 178.577712][T10041] syz.2.1138 (10041) used greatest stack depth: 17368 bytes left [ 178.704842][ T51] Bluetooth: hci1: command 0x0401 tx timeout [ 178.763508][T10068] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1145'. [ 178.779402][T10066] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 178.806575][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'. [ 178.817607][T10066] ip_vti0: entered promiscuous mode [ 178.822868][T10066] ip_vti0: entered allmulticast mode [ 179.545092][T10096] netlink: 'syz.2.1155': attribute type 7 has an invalid length. [ 179.684133][T10105] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 180.049825][T10113] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.056647][T10113] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.909144][T10157] delete_channel: no stack [ 182.308163][T10238] __nla_validate_parse: 11 callbacks suppressed [ 182.308185][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 182.346054][T10234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.631169][T10251] Bluetooth: MGMT ver 1.23 [ 182.689831][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1198'. [ 182.863295][T10265] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1201'. [ 182.899208][ T8915] tipc: Subscription rejected, illegal request [ 182.959368][T10265] netlink: 'syz.4.1201': attribute type 3 has an invalid length. [ 183.479980][T10296] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 183.504761][T10296] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1211'. [ 184.105137][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'. [ 184.196896][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1215'. [ 184.198158][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 184.263787][T10319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1217'. [ 184.363880][T10331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 184.512927][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'. [ 184.538852][T10341] netlink: 'syz.2.1222': attribute type 11 has an invalid length. [ 184.571195][T10341] netlink: 'syz.2.1222': attribute type 11 has an invalid length. [ 184.580244][T10341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1222'. [ 184.668542][T10357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.669065][T10358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.699872][T10355] lo speed is unknown, defaulting to 1000 [ 184.709881][T10355] lo speed is unknown, defaulting to 1000 [ 184.719120][T10355] lo speed is unknown, defaulting to 1000 [ 184.965007][T10367] netlink: 'syz.3.1229': attribute type 11 has an invalid length. [ 185.029059][T10371] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 185.053854][T10371] netlink: 'syz.2.1230': attribute type 2 has an invalid length. [ 185.467928][ T5963] lo speed is unknown, defaulting to 1000 [ 185.477893][T10355] infiniband syz0: set active [ 185.491599][T10355] infiniband syz0: added lo [ 185.509297][T10355] syz0: rxe_create_cq: returned err = -12 [ 185.515875][T10355] infiniband syz0: Couldn't create ib_mad CQ [ 185.522322][T10355] infiniband syz0: Couldn't open port 1 [ 185.627982][T10355] RDS/IB: syz0: added [ 185.633620][T10392] sock: sock_set_timeout: `syz.0.1237' (pid 10392) tries to set negative timeout [ 185.643592][T10355] smc: adding ib device syz0 with port count 1 [ 185.650384][T10355] smc: ib device syz0 port 1 has pnetid [ 185.663031][ T5927] lo speed is unknown, defaulting to 1000 [ 185.682583][T10355] lo speed is unknown, defaulting to 1000 [ 186.057731][T10405] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 186.188643][T10405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.359340][T10410] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 186.388132][T10403] lo speed is unknown, defaulting to 1000 [ 186.398621][T10410] netlink: 'syz.3.1243': attribute type 4 has an invalid length. [ 186.954531][T10435] netlink: 'syz.3.1254': attribute type 10 has an invalid length. [ 187.007770][T10435] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 187.393676][T10355] lo speed is unknown, defaulting to 1000 [ 187.409312][T10449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.444066][T10452] netlink: 'syz.2.1260': attribute type 1 has an invalid length. [ 187.456018][T10454] __nla_validate_parse: 6 callbacks suppressed [ 187.456038][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1258'. [ 187.899008][T10468] netlink: 'syz.2.1261': attribute type 83 has an invalid length. [ 187.974561][T10355] lo speed is unknown, defaulting to 1000 [ 188.283525][T10480] geneve3: entered promiscuous mode [ 188.329042][T10480] bond3: entered promiscuous mode [ 188.334151][T10480] bond3: entered allmulticast mode [ 188.339854][T10480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.447573][T10480] bond3 (unregistering): Released all slaves [ 188.471789][T10355] lo speed is unknown, defaulting to 1000 [ 188.631371][T10493] netlink: 'syz.2.1269': attribute type 15 has an invalid length. [ 188.653606][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1269'. [ 188.768873][T10500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1271'. [ 188.889414][T10355] lo speed is unknown, defaulting to 1000 [ 189.095482][ T51] Bluetooth: hci2: command tx timeout [ 189.499606][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 190.151274][T10552] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1286'. [ 190.226924][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1288'. [ 190.407522][T10564] can: request_module (can-proto-0) failed. [ 190.651447][T10584] validate_nla: 1 callbacks suppressed [ 190.651465][T10584] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 190.796312][T10596] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 190.838059][T10584] bond5: entered promiscuous mode [ 190.844165][T10584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.889115][T10580] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.899058][T10580] bond5: (slave bond6): making interface the new active one [ 190.910512][T10580] bond6: entered promiscuous mode [ 190.912388][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1299'. [ 190.918065][T10580] bond5: (slave bond6): Enslaving as an active interface with an up link [ 190.968631][T10599] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 191.132397][T10622] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1303'. [ 191.368594][T10628] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1306'. [ 191.666880][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 192.019608][T10670] 8021q: VLANs not supported on ipvlan1 [ 192.248629][T10682] netlink: 'syz.1.1325': attribute type 1 has an invalid length. [ 192.986000][T10720] netlink: 'syz.3.1338': attribute type 3 has an invalid length. [ 193.004055][T10720] __nla_validate_parse: 4 callbacks suppressed [ 193.004076][T10720] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1338'. [ 193.048055][T10723] netlink: 'syz.3.1338': attribute type 3 has an invalid length. [ 193.073271][T10724] lo speed is unknown, defaulting to 1000 [ 193.073665][T10723] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1338'. [ 193.079924][T10722] syzkaller1: entered promiscuous mode [ 193.110006][T10722] syzkaller1: entered allmulticast mode [ 193.144185][T10729] pimreg: entered allmulticast mode [ 193.187794][T10729] pimreg: left allmulticast mode [ 193.273185][T10733] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1343'. [ 193.570989][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.578297][T10739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.586818][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.594137][T10739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.749614][T10739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.890468][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 193.959472][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1346'. [ 194.044176][T10762] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 194.068034][T10762] netlink: 'syz.4.1349': attribute type 2 has an invalid length. [ 194.310550][T10776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1357'. [ 194.328616][T10776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1357'. [ 194.441746][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 194.474507][T10786] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 194.652046][T10786] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 194.901123][T10806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1365'. [ 195.013772][T10817] netlink: 'syz.2.1368': attribute type 7 has an invalid length. [ 195.026395][T10820] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 195.028871][T10817] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1368'. [ 195.066385][T10817] netlink: 'syz.2.1368': attribute type 7 has an invalid length. [ 195.342288][T10835] bridge_slave_0: entered promiscuous mode [ 195.401432][T10837] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 2, id = 0 [ 196.333341][T10882] validate_nla: 33 callbacks suppressed [ 196.333363][T10882] netlink: 'syz.3.1384': attribute type 5 has an invalid length. [ 196.358067][T10882] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 196.836137][T10899] smc: net device bond0 applied user defined pnetid SYZ2 [ 197.003059][T10910] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 197.010002][ T5963] IPVS: starting estimator thread 0... [ 197.129189][T10911] IPVS: using max 29 ests per chain, 69600 per kthread [ 197.251927][T10918] bond7: entered promiscuous mode [ 197.258331][T10918] bond7: entered allmulticast mode [ 197.265538][T10918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 197.328211][T10930] ksmbd: Unknown IPC event: 3, ignore. [ 197.706888][T10918] bond7 (unregistering): Released all slaves [ 197.772532][T10932] tipc: Enabled bearer , priority 0 [ 197.781476][T10933] syzkaller0: entered promiscuous mode [ 197.788015][T10933] syzkaller0: entered allmulticast mode [ 197.971718][T10947] tipc: Resetting bearer [ 197.983108][T10951] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20003 [ 198.030946][T10951] __nla_validate_parse: 44 callbacks suppressed [ 198.030966][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1402'. [ 198.051774][T10947] tipc: Disabling bearer [ 198.069375][T10962] netlink: 'syz.4.1404': attribute type 2 has an invalid length. [ 198.080316][T10963] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1406'. [ 198.081206][T10965] netlink: 'syz.4.1404': attribute type 2 has an invalid length. [ 198.097198][T10963] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 198.100023][T10962] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.1404'. [ 198.125695][T10963] netlink: 'syz.1.1406': attribute type 4 has an invalid length. [ 198.140710][T10965] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.1404'. [ 198.328420][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 198.353557][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1409'. [ 198.384415][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1409'. [ 198.408607][T10974] netlink: 'syz.3.1409': attribute type 7 has an invalid length. [ 198.426236][T10974] netlink: 'syz.3.1409': attribute type 8 has an invalid length. [ 198.434216][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 198.481916][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 198.498437][T10981] netlink: 'syz.4.1414': attribute type 5 has an invalid length. [ 198.507839][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1414'. [ 198.533216][T10981] geneve3: entered promiscuous mode [ 198.543724][T10981] geneve3: entered allmulticast mode [ 198.550748][T10983] netlink: 'syz.4.1414': attribute type 1 has an invalid length. [ 198.565167][ T8915] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 198.575946][T10983] netlink: 'syz.4.1414': attribute type 2 has an invalid length. [ 198.579611][ T8915] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 198.598865][ T8915] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 198.613555][ T8915] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 199.093983][T10991] syzkaller1: entered promiscuous mode [ 199.095951][T10993] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 199.102850][T10991] syzkaller1: entered allmulticast mode [ 199.468210][T11012] bridge6: entered promiscuous mode [ 199.474414][T11012] bridge6: entered allmulticast mode [ 199.586291][T11015] vxcan1: entered allmulticast mode [ 199.805877][T11026] syz_tun: tun_net_xmit 20 [ 200.332517][T11059] rdma_op ffff88806c6209f0 conn xmit_rdma 0000000000000000 [ 200.538749][T11074] netlink: 'syz.1.1447': attribute type 4 has an invalid length. [ 200.570727][T11075] tipc: Enabling of bearer rejected, failed to enable media [ 201.696032][T11133] openvswitch: netlink: Flow key attr not present in new flow. [ 201.846583][T11137] syz_tun: tun_net_xmit 42 [ 201.900413][T11144] validate_nla: 4 callbacks suppressed [ 201.900433][T11144] netlink: 'syz.4.1462': attribute type 8 has an invalid length. [ 201.970829][T11142] netlink: 'syz.2.1463': attribute type 10 has an invalid length. [ 201.992103][T11142] wlan1: mtu less than device minimum [ 202.001004][T11142] `: (slave wlan1): Error -22 calling dev_set_mtu [ 202.022706][T11142] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 202.262128][T11161] bond3: entered promiscuous mode [ 202.268564][T11161] bond3: entered allmulticast mode [ 202.275790][T11161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.854736][ C1] syz_tun: tun_net_xmit 42 [ 202.953800][T11209] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 203.209954][T11225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.421768][T11234] netlink: 'syz.1.1488': attribute type 2 has an invalid length. [ 203.555922][T11248] __nla_validate_parse: 20 callbacks suppressed [ 203.555943][T11248] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1491'. [ 203.566471][T11239] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1490'. [ 203.671049][T11252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1492'. [ 203.713170][T11252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1492'. [ 203.794525][T11254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1493'. [ 203.895351][ C1] syz_tun: tun_net_xmit 42 [ 203.973291][T11264] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 204.095012][T11267] lo speed is unknown, defaulting to 1000 [ 204.300809][T11278] netlink: 'syz.0.1502': attribute type 1 has an invalid length. [ 204.330156][T11278] netlink: 'syz.0.1502': attribute type 2 has an invalid length. [ 204.351539][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 204.382328][T11281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1503'. [ 204.636879][T11289] netlink: 'syz.0.1505': attribute type 2 has an invalid length. [ 204.921476][T11303] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1508'. [ 204.935203][ C1] syz_tun: tun_net_xmit 42 [ 204.994418][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'. [ 205.106989][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1511'. [ 205.304332][T11319] netlink: 'syz.0.1514': attribute type 11 has an invalid length. [ 205.740672][T11337] netlink: 'syz.2.1516': attribute type 11 has an invalid length. [ 205.869198][T11337] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.897551][T11337] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.975235][ C1] syz_tun: tun_net_xmit 42 [ 206.695658][ T5885] Bluetooth: hci0: command 0x080f tx timeout [ 206.701968][ T5888] Bluetooth: hci2: command 0x0406 tx timeout [ 206.708174][ T5886] Bluetooth: hci1: command 0x0401 tx timeout [ 206.714895][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 206.742126][T11383] netlink: 'syz.3.1529': attribute type 10 has an invalid length. [ 206.916520][T11383] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.963780][T11398] geneve3: entered promiscuous mode [ 206.972693][T11400] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 206.985192][T11398] geneve3: entered allmulticast mode [ 207.014834][ C1] syz_tun: tun_net_xmit 42 [ 207.162017][T11407] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 207.182194][T11404] netlink: 'syz.3.1534': attribute type 2 has an invalid length. [ 207.206691][T11407] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 207.227090][T11407] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 207.240814][T11413] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 207.309374][T11413] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.595589][T11449] __nla_validate_parse: 7 callbacks suppressed [ 259.595611][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 259.933360][T11474] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1553'. [ 260.049233][T11477] tipc: Enabled bearer , priority 0 [ 260.088275][T11477] syzkaller0: entered promiscuous mode [ 260.093821][T11477] syzkaller0: entered allmulticast mode [ 260.672621][T11499] netlink: 'syz.2.1562': attribute type 1 has an invalid length. [ 260.763675][T11509] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 260.787137][T11499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.887548][T11511] veth7: entered promiscuous mode [ 260.912791][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 260.951216][T11504] vlan2: entered allmulticast mode [ 260.967204][T11504] veth1: entered allmulticast mode [ 260.982069][T11504] bond4: (slave vlan2): making interface the new active one [ 260.993656][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1564'. [ 261.008760][T11504] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 261.013762][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 261.309504][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 261.388668][T11511] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.396707][T11476] tipc: Resetting bearer [ 261.424403][T11476] tipc: Disabling bearer [ 261.659627][T11542] lo speed is unknown, defaulting to 1000 [ 261.677792][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1571'. [ 261.949840][T11562] netlink: 'syz.0.1577': attribute type 21 has an invalid length. [ 262.117298][T11562] syzkaller0: refused to change device tx_queue_len [ 262.391203][T11578] netlink: 'syz.4.1581': attribute type 27 has an invalid length. [ 262.672071][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1583'. [ 262.694101][T11591] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1583'. [ 262.769794][T11600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1587'. [ 262.947116][T11607] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 263.972562][T11667] openvswitch: netlink: IPv4 tun info is not correct [ 263.989396][T11667] netlink: 'syz.3.1608': attribute type 16 has an invalid length. [ 263.997733][T11667] netlink: 'syz.3.1608': attribute type 17 has an invalid length. [ 264.031080][T11667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.483507][T11689] netlink: 'syz.4.1613': attribute type 4 has an invalid length. [ 264.760565][T11698] tipc: Enabled bearer , priority 0 [ 264.806426][T11698] syzkaller0: entered promiscuous mode [ 264.811968][T11698] syzkaller0: entered allmulticast mode [ 264.845855][T11698] tipc: Resetting bearer [ 264.903704][T11698] tipc: Disabling bearer [ 264.908337][T11711] __nla_validate_parse: 8 callbacks suppressed [ 264.908353][T11711] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1621'. [ 265.011207][T11717] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 265.032775][T11717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1622'. [ 265.069612][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 265.121987][T11719] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1624'. [ 265.283867][T11726] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 265.310115][T11731] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 265.402934][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 265.481451][T11735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1629'. [ 265.552912][T11737] veth11: entered promiscuous mode [ 265.607940][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'. [ 265.829047][T11758] netlink: 'syz.2.1633': attribute type 15 has an invalid length. [ 265.839895][T11770] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 265.864394][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 265.865351][T11767] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 265.881443][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1633'. [ 265.893893][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 265.992382][T11774] netlink: 'syz.1.1638': attribute type 9 has an invalid length. [ 267.491039][T11859] netlink: 'syz.4.1650': attribute type 10 has an invalid length. [ 267.598890][T11859] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 267.641249][T11863] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.675201][ T5953] IPVS: starting estimator thread 0... [ 267.767809][T11871] IPVS: using max 22 ests per chain, 52800 per kthread [ 268.023365][T11895] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 268.364455][T11911] syz_tun: tun_net_xmit 1510 [ 268.369732][T11911] syz_tun: tun_net_xmit 1510 [ 268.374810][T11911] syz_tun: tun_net_xmit 1510 [ 268.380779][T11911] syz_tun: tun_net_xmit 1510 [ 268.387925][T11911] syz_tun: tun_net_xmit 1510 [ 268.394366][T11911] syz_tun: tun_net_xmit 1510 [ 268.401498][T11911] syz_tun: tun_net_xmit 1510 [ 268.410109][T11911] syz_tun: tun_net_xmit 1510 [ 268.430389][T11911] syz_tun: tun_net_xmit 1510 [ 268.436206][T11911] syz_tun: tun_net_xmit 1510 [ 268.451161][T11911] syz_tun: tun_net_xmit 1510 [ 268.460979][T11911] syz_tun: tun_net_xmit 1510 [ 268.465812][T11911] syz_tun: tun_net_xmit 1510 [ 268.480699][T11911] syz_tun: tun_net_xmit 1510 [ 268.503254][T11919] netlink: 'syz.4.1661': attribute type 16 has an invalid length. [ 268.553137][T11919] netlink: 'syz.4.1661': attribute type 17 has an invalid length. [ 268.601055][T11911] syz_tun: tun_net_xmit 1510 [ 268.620770][T11911] syz_tun: tun_net_xmit 1510 [ 268.630753][T11925] v: renamed from dummy0 (while UP) [ 268.650489][T11911] syz_tun: tun_net_xmit 1510 [ 268.693547][T11911] syz_tun: tun_net_xmit 1510 [ 268.713779][T11911] syz_tun: tun_net_xmit 1510 [ 268.729368][T11911] syz_tun: tun_net_xmit 1510 [ 268.777479][T11911] syz_tun: tun_net_xmit 1510 [ 268.805914][T11911] syz_tun: tun_net_xmit 1510 [ 268.825470][ T5953] syz_tun: tun_net_xmit 110 [ 268.830503][ T5953] syz_tun: tun_net_xmit 1510 [ 268.833663][T11933] Bluetooth: MGMT ver 1.23 [ 268.835177][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835240][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835261][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835290][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835310][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835329][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835349][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835368][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835388][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835409][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835429][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835449][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835468][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835487][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835507][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835525][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835544][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835563][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835583][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835603][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835623][ T5953] syz_tun: tun_net_xmit 1510 [ 268.835642][ T5953] syz_tun: tun_net_xmit 781 [ 268.965400][T11919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.036512][ T982] lo speed is unknown, defaulting to 1000 [ 269.197112][T11948] gretap0: entered promiscuous mode [ 269.218921][T11948] vlan2: entered promiscuous mode [ 269.300215][T11953] netlink: 'syz.4.1671': attribute type 1 has an invalid length. [ 269.325818][ T982] syz_tun: tun_net_xmit 110 [ 269.338812][T11953] wg1: entered promiscuous mode [ 269.355883][T11953] wg1: entered allmulticast mode [ 269.581141][T11966] syz_tun: tun_net_xmit 42 [ 270.461815][T12009] __nla_validate_parse: 14 callbacks suppressed [ 270.461837][T12009] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1689'. [ 270.570543][T12011] netlink: 'syz.0.1690': attribute type 1 has an invalid length. [ 270.624707][ C0] syz_tun: tun_net_xmit 42 [ 270.656011][T12018] hsr0 speed is unknown, defaulting to 1000 [ 270.662552][T12018] hsr0 speed is unknown, defaulting to 1000 [ 270.671486][T12018] hsr0 speed is unknown, defaulting to 1000 [ 270.691172][T12018] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 270.723550][T12018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 270.752376][T12018] hsr0 speed is unknown, defaulting to 1000 [ 270.761309][T12018] hsr0 speed is unknown, defaulting to 1000 [ 270.771882][T12018] hsr0 speed is unknown, defaulting to 1000 [ 270.781799][T12018] hsr0 speed is unknown, defaulting to 1000 [ 270.791033][T12018] hsr0 speed is unknown, defaulting to 1000 [ 271.153718][T12043] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 271.165421][T12043] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 271.348612][T12052] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1702'. [ 271.654722][ C0] syz_tun: tun_net_xmit 42 [ 271.693319][T12066] lo speed is unknown, defaulting to 1000 [ 272.158269][T12090] netlink: 'syz.1.1710': attribute type 3 has an invalid length. [ 272.208280][T12090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.292057][T12091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'. [ 272.301296][T12088] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.376993][T12098] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1711'. [ 272.440247][T12101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1712'. [ 272.602796][T12066] hsr0 speed is unknown, defaulting to 1000 [ 272.703599][ C0] syz_tun: tun_net_xmit 42 [ 273.236567][T12107] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1715'. [ 273.411282][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 273.424764][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 273.451867][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 273.484892][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 273.575820][T12119] netlink: 'syz.1.1717': attribute type 6 has an invalid length. [ 273.601804][T12117] bridge0: port 1(vlan0) entered blocking state [ 273.679619][T12117] bridge0: port 1(vlan0) entered disabled state [ 273.704956][T12117] vlan0: entered allmulticast mode [ 273.723203][T12117] bridge0: entered allmulticast mode [ 273.734813][ C0] syz_tun: tun_net_xmit 42 [ 273.839191][T12117] vlan0: left allmulticast mode [ 273.857515][T12117] bridge0: left allmulticast mode [ 273.967384][T12118] bridge0: port 1(vlan0) entered blocking state [ 273.974072][T12118] bridge0: port 1(vlan0) entered disabled state [ 274.001473][T12118] vlan0: entered allmulticast mode [ 274.010078][T12118] bridge0: entered allmulticast mode [ 274.021639][T12118] vlan0: left allmulticast mode [ 274.029901][T12118] bridge0: left allmulticast mode [ 274.691636][T12163] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 274.774679][ C0] syz_tun: tun_net_xmit 42 [ 274.805147][T12173] netlink: 'syz.1.1735': attribute type 4 has an invalid length. [ 275.021151][T12195] geneve4: entered promiscuous mode [ 275.028636][T12195] geneve4: entered allmulticast mode [ 275.039958][ T7768] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 275.052192][ T7768] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 275.067617][ T7768] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 275.095138][ T6009] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 275.303378][T12195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.352198][T12195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.365791][T12195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 275.420281][T12211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.459544][T12211] bond0: (slave rose0): Enslaving as an active interface with an up link [ 275.469489][T12217] __nla_validate_parse: 7 callbacks suppressed [ 275.469509][T12217] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1746'. [ 275.580103][T12213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1746'. [ 275.643620][T12195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.705386][T12195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.761301][T12195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 275.983315][T12195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.019271][T12195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.051102][T12195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 276.107848][T12249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1753'. [ 276.139006][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1754'. [ 276.288444][T12195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.323183][T12195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.352853][T12195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 276.451647][T12254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.733797][T12284] veth1_macvtap: left promiscuous mode [ 276.751728][T12284] macsec0: entered promiscuous mode [ 276.770939][T12288] netlink: 'syz.4.1763': attribute type 5 has an invalid length. [ 276.789115][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.811323][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 276.822303][ T60] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 276.858068][T12290] veth3: entered allmulticast mode [ 276.867213][T12294] netlink: 'syz.4.1763': attribute type 1 has an invalid length. [ 276.893672][T12284] batadv1: entered allmulticast mode [ 276.921661][T12296] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 277.093728][ T7768] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.127464][ T7768] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 277.150468][ T7768] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.193256][ T7766] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.236165][ T7766] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 277.279023][ T7766] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.350129][ T7766] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.385554][ T7766] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 277.414387][ T7766] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.418040][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 278.068228][T12353] netlink: 'syz.0.1779': attribute type 33 has an invalid length. [ 278.109504][T12353] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1779'. [ 278.139917][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 278.203965][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.237643][T12361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.171745][T12404] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1793'. [ 279.186489][T12408] batman_adv: batadv0: Adding interface: wlan1 [ 279.192900][T12408] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.222149][T12408] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 279.240359][T12404] veth0: entered promiscuous mode [ 279.570124][T12403] veth0: left promiscuous mode [ 279.625653][T12429] netlink: 'syz.4.1799': attribute type 3 has an invalid length. [ 279.699540][T12430] Bluetooth: MGMT ver 1.23 [ 279.735788][T12434] netlink: 'syz.0.1802': attribute type 12 has an invalid length. [ 280.041562][T12447] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 280.238924][ T982] hsr0 speed is unknown, defaulting to 1000 [ 280.306391][T12454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1809'. [ 280.639403][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 280.889265][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 280.993413][T12488] veth0: entered promiscuous mode [ 281.122771][T12490] veth0: left promiscuous mode [ 281.227563][T12499] syzkaller1: entered promiscuous mode [ 281.249898][T12499] syzkaller1: entered allmulticast mode [ 281.278640][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 281.460866][T12512] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1828'. [ 281.497803][T12516] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1829'. [ 281.509033][ T30] audit: type=1107 audit(1754961140.885:6): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 281.643529][T12524] netlink: 'syz.0.1830': attribute type 1 has an invalid length. [ 281.783861][T12531] Unsupported ieee802154 address type: 0 [ 281.996553][T12524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.004375][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1832'. [ 282.095892][T12542] macvlan2: entered promiscuous mode [ 282.126593][T12542] macvlan2: entered allmulticast mode [ 282.160330][T12542] bond4: entered promiscuous mode [ 282.179982][T12542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.228894][T12542] bond4: left promiscuous mode [ 282.322523][T12555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1839'. [ 282.340679][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 282.348124][T12560] openvswitch: netlink: IP tunnel dst address not specified [ 282.371176][T12555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 282.551460][T12566] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1842'. [ 282.561939][T12566] netlink: 'syz.0.1842': attribute type 6 has an invalid length. [ 282.575717][T12566] netlink: 'syz.0.1842': attribute type 5 has an invalid length. [ 282.890184][T12586] pimreg3: entered allmulticast mode [ 283.716610][T12618] netlink: 'syz.2.1858': attribute type 1 has an invalid length. [ 283.769474][T12625] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 283.771029][T12623] gtp1: entered promiscuous mode [ 283.783474][T12626] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 283.791633][T12623] gtp1: entered allmulticast mode [ 283.813457][T12628] dvmrp1: left allmulticast mode [ 284.152799][T12645] geneve4: entered promiscuous mode [ 284.171518][T12645] geneve4: entered allmulticast mode [ 284.199909][ T8910] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 284.216790][ T8910] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 284.228372][T12659] syz_tun: tun_net_xmit 42 [ 284.241808][T12659] Bluetooth: MGMT ver 1.23 [ 284.339428][T12644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.407147][T12657] team0: No ports can be present during mode change [ 285.158249][T12712] netlink: 'syz.4.1884': attribute type 6 has an invalid length. [ 285.254777][ C1] syz_tun: tun_net_xmit 42 [ 285.848654][T12741] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 286.238967][T12644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.263455][T12644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 286.294712][ C1] syz_tun: tun_net_xmit 42 [ 286.503775][T12644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.519863][T12644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 286.614053][T12782] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 286.636689][T12782] __nla_validate_parse: 11 callbacks suppressed [ 286.636715][T12782] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1904'. [ 286.657990][T12782] netlink: 'syz.2.1904': attribute type 2 has an invalid length. [ 286.668756][T12782] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 287.075817][ T8918] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 287.098602][ T8918] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.147538][ T8918] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 287.162053][ T8918] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.204518][ T8918] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 287.213238][ T8918] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.261835][ T8918] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 287.272339][ T8918] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.373033][T12818] netlink: 'syz.2.1913': attribute type 21 has an invalid length. [ 287.394498][T12818] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 287.489792][T12826] pimreg3: entered allmulticast mode [ 287.520819][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 287.664012][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 287.679330][T12842] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 287.689886][T12842] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1919'. [ 287.869727][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 288.493686][T12889] sctp: [Deprecated]: syz.3.1935 (pid 12889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.493686][T12889] Use struct sctp_sack_info instead [ 288.690745][T12899] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 288.709972][T12901] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1937'. [ 288.821457][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1940'. [ 288.872000][T12904] bond8: (slave gretap1): making interface the new active one [ 288.881983][T12904] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 288.981654][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 289.144007][T12915] netlink: 'syz.3.1943': attribute type 3 has an invalid length. [ 289.167754][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 289.256570][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 289.973514][T12958] tipc: Enabled bearer , priority 10 [ 290.058873][T12960] syz_tun: tun_net_xmit 42 [ 290.070005][T12960] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 290.081560][T12960] netlink: 'syz.4.1957': attribute type 2 has an invalid length. [ 290.718723][T12969] netlink: 'syz.2.1960': attribute type 1 has an invalid length. [ 290.939810][T12984] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 291.085421][ T5934] tipc: Node number set to 3086902922 [ 291.094701][ C0] syz_tun: tun_net_xmit 42 [ 291.723433][T13031] __nla_validate_parse: 6 callbacks suppressed [ 291.723457][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 291.741859][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 292.001369][T13036] openvswitch: netlink: Message has 8 unknown bytes. [ 292.134719][ C0] syz_tun: tun_net_xmit 42 [ 292.196276][T13044] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1980'. [ 292.320162][T13011] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 292.420209][T13056] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1984'. [ 292.733431][T13070] netlink: 'syz.1.1987': attribute type 4 has an invalid length. [ 292.759542][T13070] netlink: 'syz.1.1987': attribute type 10 has an invalid length. [ 292.905773][T13070] team0: Device hsr_slave_0 failed to register rx_handler [ 293.005303][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 293.158383][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1991'. [ 293.175099][ C0] syz_tun: tun_net_xmit 42 [ 293.399177][T13101] netlink: 187884 bytes leftover after parsing attributes in process `syz.4.1996'. [ 293.408706][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880611d2800: rx timeout, send abort [ 293.899727][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880611d1000: rx timeout, send abort [ 293.908790][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880611d2800: abort rx timeout. Force session deactivation [ 293.929977][T13117] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2000'. [ 294.061007][T13109] team0: Port device vlan0 removed [ 294.215102][ C0] syz_tun: tun_net_xmit 42 [ 294.223507][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 294.318514][T13127] vlan2: entered allmulticast mode [ 294.340836][T13127] bridge9: entered allmulticast mode [ 294.408062][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880611d1000: abort rx timeout. Force session deactivation [ 294.641984][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 294.965323][T13159] veth1_to_batadv: mtu less than device minimum [ 294.996245][T13164] syz_tun: entered allmulticast mode [ 295.238880][T13162] syz_tun: left allmulticast mode [ 295.254690][ C0] syz_tun: tun_net_xmit 42 [ 295.427505][T13180] netlink: 'syz.1.2021': attribute type 10 has an invalid length. [ 295.644205][T13187] netlink: 'syz.0.2023': attribute type 21 has an invalid length. [ 295.687937][T13187] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 295.739721][T13187] ip6tnl1: entered promiscuous mode [ 295.756331][T13187] ip6tnl1: entered allmulticast mode [ 295.774398][T13190] netlink: 'syz.0.2023': attribute type 8 has an invalid length. [ 296.216723][T13204] netlink: 'syz.1.2027': attribute type 1 has an invalid length. [ 296.295216][ C0] syz_tun: tun_net_xmit 42 [ 296.333856][T13204] bond7: entered promiscuous mode [ 296.354124][T13204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.388315][T13208] netlink: 'syz.3.2028': attribute type 10 has an invalid length. [ 296.399075][T13208] IPv6: Can't replace route, no match found [ 296.409277][T13208] netlink: 'syz.3.2028': attribute type 10 has an invalid length. [ 296.439603][T13209] IPv6: Can't replace route, no match found [ 296.596805][ T30] audit: type=1107 audit(1754961155.995:7): pid=13214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 297.006627][T13235] netlink: 'syz.3.2036': attribute type 10 has an invalid length. [ 297.110200][T13234] tipc: Enabled bearer , priority 0 [ 297.119851][T13235] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 297.138116][T13235] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 297.150413][T13236] syzkaller0: entered promiscuous mode [ 297.157047][T13236] syzkaller0: entered allmulticast mode [ 297.191392][T13239] __nla_validate_parse: 70 callbacks suppressed [ 297.191412][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 297.208965][T13236] tipc: Resetting bearer [ 297.233575][T13236] tipc: Disabling bearer [ 297.334653][ C0] syz_tun: tun_net_xmit 42 [ 297.343170][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.352498][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.374292][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.383945][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.416262][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.431901][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.443230][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.452579][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.478658][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 297.932837][T13265] syz.2.2047 uses old SIOCAX25GETINFO [ 297.948513][T13270] validate_nla: 3 callbacks suppressed [ 297.948534][T13270] netlink: 'syz.3.2048': attribute type 4 has an invalid length. [ 297.984073][T13270] netlink: 'syz.3.2048': attribute type 2 has an invalid length. [ 298.374704][ C0] syz_tun: tun_net_xmit 42 [ 299.018769][T13313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.074895][T13319] vlan0: entered allmulticast mode [ 299.089809][T13319] bond8: entered allmulticast mode [ 299.327469][T13323] geneve2: entered promiscuous mode [ 299.332875][T13323] geneve2: entered allmulticast mode [ 299.393047][T13332] xt_socket: unknown flags 0xd0 [ 299.685293][T13347] Can't find ip_set type has,port [ 300.073373][T13375] netlink: 'syz.4.2075': attribute type 12 has an invalid length. [ 300.616312][ C0] syz_tun: tun_net_xmit 42 [ 301.363321][T13434] tipc: Cannot configure node identity twice [ 301.432335][T13445] tipc: Enabled bearer , priority 0 [ 301.523695][T13445] tipc: Disabling bearer [ 301.561846][T13453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.654718][ C0] syz_tun: tun_net_xmit 42 [ 301.667770][T13460] openvswitch: netlink: IP tunnel dst address not specified [ 301.752299][T13463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.792208][T13463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.831069][T13467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.421402][T13499] __nla_validate_parse: 144 callbacks suppressed [ 302.421424][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 302.460086][T13499] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2111'. [ 302.486609][T13494] lo speed is unknown, defaulting to 1000 [ 302.694698][ C0] syz_tun: tun_net_xmit 42 [ 302.747524][T13505] IPVS: persistence engine module ip_vs_pe_À not found [ 302.876547][T13513] syzkaller0: entered promiscuous mode [ 302.877375][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2117'. [ 302.882078][T13513] syzkaller0: entered allmulticast mode [ 302.898797][T13513] netlink: 'syz.1.2116': attribute type 2 has an invalid length. [ 302.928553][T13513] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2116'. [ 302.954750][T13513] nbd: must specify a device to reconfigure [ 302.975550][T13516] netlink: 'syz.1.2116': attribute type 2 has an invalid length. [ 302.983337][T13516] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2116'. [ 302.999194][T13516] nbd: must specify a device to reconfigure [ 303.023583][T13514] tipc: Enabled bearer , priority 0 [ 303.175848][T13514] syzkaller0: entered promiscuous mode [ 303.195249][T13514] syzkaller0: entered allmulticast mode [ 303.213790][T13514] tipc: Resetting bearer [ 303.256220][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2120'. [ 303.275251][T13522] tipc: Resetting bearer [ 303.662059][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 303.735961][ C0] syz_tun: tun_net_xmit 42 [ 303.865117][T13548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2124'. [ 303.874357][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 304.130910][ T10] tipc: Node number set to 694897378 [ 304.786456][ C0] syz_tun: tun_net_xmit 42 [ 305.152990][T13522] tipc: Disabling bearer [ 305.269838][T13494] hsr0 speed is unknown, defaulting to 1000 [ 305.428996][T13553] netlink: 'syz.2.2126': attribute type 13 has an invalid length. [ 305.489039][T13555] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2127'. [ 305.511754][T13559] delete_channel: no stack [ 305.577152][T13559] dvmrp1: entered allmulticast mode [ 305.814685][ C0] syz_tun: tun_net_xmit 42 [ 305.823063][T13568] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 305.845597][T13570] sctp: [Deprecated]: syz.4.2133 (pid 13570) Use of int in maxseg socket option. [ 305.845597][T13570] Use struct sctp_assoc_value instead [ 305.870327][T13568] team0: Device veth1_macvtap failed to register rx_handler [ 305.917398][T13570] syz_tun: tun_net_xmit 42 [ 306.493694][T13604] netlink: 'syz.4.2143': attribute type 7 has an invalid length. [ 306.934725][ C1] syz_tun: tun_net_xmit 42 [ 307.392296][T13649] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 307.550373][T13659] __nla_validate_parse: 5 callbacks suppressed [ 307.550395][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 307.599934][T13659] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.974851][ C1] syz_tun: tun_net_xmit 42 [ 308.017599][T13682] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 308.065314][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 308.259375][T13690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2166'. [ 309.017585][ C1] syz_tun: tun_net_xmit 42 [ 309.750855][T13683] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.771368][T13686] netlink: 'syz.4.2165': attribute type 4 has an invalid length. [ 309.997378][T13704] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2172'. [ 310.054850][ C1] syz_tun: tun_net_xmit 42 [ 310.166178][T13712] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 310.193561][T13712] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2174'. [ 310.695200][ C1] syz_tun: tun_net_xmit 42 [ 310.887087][T13762] xt_socket: unknown flags 0x50 [ 310.899448][T13762] netlink: 'syz.2.2186': attribute type 83 has an invalid length. [ 311.094693][ C1] syz_tun: tun_net_xmit 42 [ 311.217122][T13776] netlink: 'syz.4.2189': attribute type 13 has an invalid length. [ 311.230592][T13776] netlink: 'syz.4.2189': attribute type 17 has an invalid length. [ 311.617577][ T982] syz_tun: tun_net_xmit 110 [ 311.686538][T13800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2192'. [ 311.762121][T13776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.785357][ T5953] syz_tun: tun_net_xmit 110 [ 311.880796][T13771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.891255][T13804] 8021q: VLANs not supported on ip6_vti0 [ 312.090022][T13813] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 312.123853][T13813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2194'. [ 312.163461][T13813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2194'. [ 312.184831][T13815] netlink: 'syz.2.2195': attribute type 21 has an invalid length. [ 312.219886][T13815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2195'. [ 312.263154][T13820] netlink: 'syz.2.2195': attribute type 21 has an invalid length. [ 312.290846][T13820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2195'. [ 312.491810][T13829] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 312.577353][T13836] __nla_validate_parse: 4 callbacks suppressed [ 312.577373][T13836] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2199'. [ 312.632688][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'. [ 312.704488][T13841] 8021q: adding VLAN 0 to HW filter on device bond10 [ 312.775384][ C0] syz_tun: tun_net_xmit 182 [ 313.326047][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 313.469057][T13885] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.478146][T13890] tap0: tun_chr_ioctl cmd 1074025676 [ 313.489471][T13890] tap0: owner set to 0 [ 313.512324][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 313.560858][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 313.571430][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 313.581661][T13895] netlink: 'syz.3.2219': attribute type 7 has an invalid length. [ 314.149750][T13931] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2230'. [ 314.165154][T13930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2231'. [ 314.257449][ T5927] syz_tun: tun_net_xmit 110 [ 314.290870][T13940] batman_adv: batadv0: Removing interface: wlan1 [ 314.350809][T13940] bond5: (slave bond6): Releasing backup interface [ 314.370270][T13940] bond6: left promiscuous mode [ 314.415663][ T5927] syz_tun: tun_net_xmit 110 [ 314.771025][T13964] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2240'. [ 314.826893][T13966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2238'. [ 314.858927][T13966] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 314.913528][T13969] macvlan0: entered allmulticast mode [ 314.932717][T13969] veth1_vlan: entered allmulticast mode [ 314.955285][T13969] veth1_vlan: left allmulticast mode [ 315.098897][T13969] macvlan0 (unregistering): left allmulticast mode [ 315.111859][T13973] syz.1.2243: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.146228][T13973] CPU: 1 UID: 0 PID: 13973 Comm: syz.1.2243 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 315.146261][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.146273][T13973] Call Trace: [ 315.146281][T13973] [ 315.146290][T13973] dump_stack_lvl+0x189/0x250 [ 315.146322][T13973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.146347][T13973] ? __pfx__printk+0x10/0x10 [ 315.146375][T13973] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.146399][T13973] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.146424][T13973] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 315.146450][T13973] warn_alloc+0x214/0x310 [ 315.146487][T13973] ? __pfx_warn_alloc+0x10/0x10 [ 315.146528][T13973] ? __get_vm_area_node+0x28f/0x300 [ 315.146556][T13973] ? nf_tables_newset+0x132b/0x2530 [ 315.146591][T13973] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 315.146658][T13973] ? alloc_pages_mpol+0x3cd/0x4a0 [ 315.146687][T13973] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.146722][T13973] ? rcu_is_watching+0x15/0xb0 [ 315.146744][T13973] ? nf_tables_newset+0x132b/0x2530 [ 315.146771][T13973] ? nf_tables_newset+0x132b/0x2530 [ 315.146797][T13973] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 315.146825][T13973] ? nf_tables_newset+0x132b/0x2530 [ 315.146855][T13973] ? nft_table_lookup+0x211/0x230 [ 315.146871][T13973] ? nft_set_lookup+0x128/0x150 [ 315.146890][T13973] ? nft_hash_privsize+0x6f/0xf0 [ 315.146919][T13973] nf_tables_newset+0x132b/0x2530 [ 315.146964][T13973] ? __pfx_nf_tables_newset+0x10/0x10 [ 315.147021][T13973] ? __nla_parse+0x40/0x60 [ 315.147052][T13973] nfnetlink_rcv+0x1132/0x2520 [ 315.147112][T13973] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 315.147154][T13973] ? ref_tracker_free+0x63a/0x7d0 [ 315.147214][T13973] ? __netlink_deliver_tap+0x807/0x850 [ 315.147240][T13973] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.147288][T13973] netlink_unicast+0x82c/0x9e0 [ 315.147322][T13973] ? __pfx_netlink_unicast+0x10/0x10 [ 315.147347][T13973] ? netlink_sendmsg+0x642/0xb30 [ 315.147370][T13973] ? skb_put+0x11b/0x210 [ 315.147402][T13973] netlink_sendmsg+0x805/0xb30 [ 315.147439][T13973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.147469][T13973] ? aa_sock_msg_perm+0xf1/0x1d0 [ 315.147499][T13973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 315.147520][T13973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.147547][T13973] __sock_sendmsg+0x219/0x270 [ 315.147573][T13973] ____sys_sendmsg+0x505/0x830 [ 315.147610][T13973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.147659][T13973] ? import_iovec+0x74/0xa0 [ 315.147683][T13973] ___sys_sendmsg+0x21f/0x2a0 [ 315.147715][T13973] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.147790][T13973] ? __fget_files+0x2a/0x420 [ 315.147818][T13973] ? __fget_files+0x3a0/0x420 [ 315.147860][T13973] __x64_sys_sendmsg+0x19b/0x260 [ 315.147892][T13973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.147934][T13973] ? rcu_is_watching+0x15/0xb0 [ 315.147960][T13973] ? do_syscall_64+0xbe/0x3b0 [ 315.147991][T13973] do_syscall_64+0xfa/0x3b0 [ 315.148014][T13973] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.148037][T13973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.148057][T13973] ? clear_bhb_loop+0x60/0xb0 [ 315.148083][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.148102][T13973] RIP: 0033:0x7f889798ebe9 [ 315.148121][T13973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.148138][T13973] RSP: 002b:00007f8895bee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.148160][T13973] RAX: ffffffffffffffda RBX: 00007f8897bb5fa0 RCX: 00007f889798ebe9 [ 315.148175][T13973] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 315.148188][T13973] RBP: 00007f8897a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 315.148201][T13973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.148213][T13973] R13: 00007f8897bb6038 R14: 00007f8897bb5fa0 R15: 00007ffe5b3874d8 [ 315.148248][T13973] [ 315.148257][T13973] Mem-Info: [ 315.557804][T13973] active_anon:4564 inactive_anon:0 isolated_anon:0 [ 315.557804][T13973] active_file:1262 inactive_file:39898 isolated_file:0 [ 315.557804][T13973] unevictable:768 dirty:95 writeback:0 [ 315.557804][T13973] slab_reclaimable:11294 slab_unreclaimable:119182 [ 315.557804][T13973] mapped:30985 shmem:1360 pagetables:1233 [ 315.557804][T13973] sec_pagetables:0 bounce:0 [ 315.557804][T13973] kernel_misc_reclaimable:0 [ 315.557804][T13973] free:1304990 free_pcp:13141 free_cma:0 [ 315.619473][T13986] macvtap1: entered promiscuous mode [ 315.625987][T13986] vlan0: entered promiscuous mode [ 315.631509][T13986] macvtap1: entered allmulticast mode [ 315.637070][T13986] vlan0: entered allmulticast mode [ 315.642560][T13986] veth1_macvtap: entered allmulticast mode [ 315.650501][T13973] Node 0 active_anon:18256kB inactive_anon:0kB active_file:5048kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123940kB dirty:380kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13728kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.683460][T13973] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.714787][T13973] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.751474][T13973] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 315.757495][T13973] Node 0 DMA32 free:1313448kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17804kB inactive_anon:0kB active_file:5048kB inactive_file:157816kB unevictable:1536kB writepending:380kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:38084kB local_pcp:19496kB free_cma:0kB [ 315.781404][T13998] syzkaller0: entered promiscuous mode [ 315.832154][T13973] lowmem_reserve[]: 0 0 1 1 1 [ 315.840445][T13973] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 315.875781][T13973] lowmem_reserve[]: 0 0 0 0 0 [ 315.880569][T13973] Node 1 Normal free:3891140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15648kB local_pcp:7168kB free_cma:0kB [ 315.913070][T13973] lowmem_reserve[]: 0 0 0 0 0 [ 315.917975][T13998] syzkaller0: entered allmulticast mode [ 315.925362][T13997] tipc: Enabled bearer , priority 0 [ 315.932240][T13973] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 315.940154][T13992] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 315.950281][T13973] Node 0 DMA32: 506*4kB (UME) 316*8kB (ME) 230*16kB (UME) 1104*32kB (UME) 691*64kB (UME) 191*128kB (UME) 40*256kB (UE) 6*512kB (UM) 4*1024kB (UM) 12*2048kB (UM) 283*4096kB (M) = 1313384kB [ 315.976664][T13973] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 315.999713][T13973] Node 1 Normal: 167*4kB (UE) 49*8kB (UME) 48*16kB (UME) 81*32kB (UME) 32*64kB (UME) 7*128kB (UME) 3*256kB (ME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891140kB [ 316.025636][T13973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.040957][T13973] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.042495][T13998] tipc: Resetting bearer [ 316.050951][T13973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.050982][T13973] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.051001][T13973] 42518 total pagecache pages [ 316.051011][T13973] 0 pages in swap cache [ 316.051020][T13973] Free swap = 124996kB [ 316.051029][T13973] Total swap = 124996kB [ 316.051040][T13973] 2097051 pages RAM [ 316.051049][T13973] 0 pages HighMem/MovableOnly [ 316.051057][T13973] 425645 pages reserved [ 316.051066][T13973] 0 pages cma reserved [ 316.311053][T13991] tipc: Resetting bearer [ 316.426161][T14027] netlink: 'syz.4.2249': attribute type 7 has an invalid length. [ 316.433959][T14027] netlink: 'syz.4.2249': attribute type 8 has an invalid length. [ 316.442887][T13991] tipc: Disabling bearer [ 316.641982][T14036] macvtap1: entered allmulticast mode [ 316.650231][T14036] veth0_macvtap: entered allmulticast mode [ 316.965767][T14056] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 317.008506][T14056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.102246][T14056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.154330][T14056] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 317.168692][T14056] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 317.360066][T14060] veth11: entered promiscuous mode [ 317.371400][T14060] bond5: (slave veth11): Enslaving as an active interface with a down link [ 317.447401][T14082] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 317.855162][T14098] geneve4: entered promiscuous mode [ 317.863281][T14098] geneve4: entered allmulticast mode [ 317.931786][T14102] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 317.954207][T14102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.970988][T14102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.176018][T14102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.205049][T14102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.357965][T14102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.391132][T14102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.405806][T14138] can: request_module (can-proto-0) failed. [ 318.579969][T14102] bond0: (slave netdevsim0): Releasing backup interface [ 318.602050][T14102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.624034][T14102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.779741][T14148] geneve4: entered promiscuous mode [ 318.833215][T14158] __nla_validate_parse: 11 callbacks suppressed [ 318.833236][T14158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2282'. [ 318.898160][T14164] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 318.906928][T14164] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2287'. [ 318.986026][T14164] veth13: entered allmulticast mode [ 319.070434][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 319.089496][ T8902] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.099041][ T8902] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.147848][ T8914] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.160623][T14181] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2290'. [ 319.175950][ T8914] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.184372][T14181] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2290'. [ 319.251313][ T8914] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.279344][ T8914] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.344423][ T8914] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.353177][ T8914] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.398111][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 319.450171][T14189] netlink: 'syz.3.2297': attribute type 33 has an invalid length. [ 319.458292][T14189] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2297'. [ 319.467899][T14187] netlink: 'syz.1.2295': attribute type 4 has an invalid length. [ 319.471880][T14190] netlink: 'syz.3.2297': attribute type 33 has an invalid length. [ 319.490525][T14190] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2297'. [ 319.530628][T14194] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 319.555458][T14194] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 319.575561][T14196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2298'. [ 319.718645][T14210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2299'. [ 319.805551][T14198] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 320.348145][T14224] netlink: 'syz.4.2302': attribute type 3 has an invalid length. [ 331.793844][ T5927] sched: DL replenish lagged too much [ 332.240459][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 337.124987][ C0] syz_tun: tun_net_xmit 182 [ 388.962898][ C0] syz_tun: tun_net_xmit 182 [ 429.364498][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 429.371585][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14250/1:b..l [ 429.379988][ C0] rcu: (detected by 0, t=10503 jiffies, g=47061, q=560658 ncpus=2) [ 429.387988][ C0] task:syz.1.2310 state:R running task stack:28936 pid:14250 tgid:14242 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 429.402074][ C0] Call Trace: [ 429.405358][ C0] [ 429.408377][ C0] __schedule+0x1798/0x4cc0 [ 429.412901][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 429.418103][ C0] ? __pfx___schedule+0x10/0x10 [ 429.422958][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 429.429097][ C0] ? arch_stack_walk+0xfc/0x150 [ 429.433949][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 429.439225][ C0] preempt_schedule_irq+0xb5/0x150 [ 429.444420][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 429.450151][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 429.455971][ C0] irqentry_exit+0x6f/0x90 [ 429.460394][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.466876][ C0] RIP: 0010:kasan_check_range+0x6b/0x2c0 [ 429.472623][ C0] Code: 00 ff f3 0f 1e fa 4c 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 <49> c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d [ 429.492336][ C0] RSP: 0018:ffffc9000b327a98 EFLAGS: 00000282 [ 429.498488][ C0] RAX: ffffffff822e3c01 RBX: 0000000000000000 RCX: ffffffff822e3cd7 [ 429.506466][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801cccd408 [ 429.514445][ C0] RBP: 0000000000000008 R08: ffff88801cccd40b R09: ffff88801cccd40b [ 429.522445][ C0] R10: dffffc0000000000 R11: ffffed1003999a81 R12: ffff88801cccd3c0 [ 429.530440][ C0] R13: 0000000000000004 R14: 000000000004a909 R15: 1ffff11003999a81 [ 429.538523][ C0] ? __page_table_check_zero+0x141/0x530 [ 429.544182][ C0] ? __page_table_check_zero+0x217/0x530 [ 429.549842][ C0] ? page_ext_lookup+0x127/0x180 [ 429.554870][ C0] __page_table_check_zero+0x217/0x530 [ 429.560333][ C0] ? __page_table_check_zero+0xba/0x530 [ 429.565875][ C0] __free_frozen_pages+0xbd7/0xd30 [ 429.571002][ C0] __put_partials+0x156/0x1a0 [ 429.575677][ C0] put_cpu_partial+0x17c/0x250 [ 429.580453][ C0] ? put_cpu_partial+0x6d/0x250 [ 429.585297][ C0] __slab_free+0x2d5/0x3c0 [ 429.589725][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.596139][ C0] ? __phys_addr+0xd3/0x180 [ 429.600646][ C0] qlist_free_all+0x97/0x140 [ 429.605233][ C0] kasan_quarantine_reduce+0x148/0x160 [ 429.610708][ C0] __kasan_slab_alloc+0x22/0x80 [ 429.615580][ C0] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 429.621412][ C0] ? sock_alloc_inode+0x28/0xc0 [ 429.626352][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 429.631718][ C0] sock_alloc_inode+0x28/0xc0 [ 429.636392][ C0] alloc_inode+0x6a/0x1b0 [ 429.640718][ C0] __sock_create+0x12d/0x9f0 [ 429.645357][ C0] __sys_socket+0xd7/0x1b0 [ 429.649905][ C0] __x64_sys_socket+0x7a/0x90 [ 429.654683][ C0] do_syscall_64+0xfa/0x3b0 [ 429.659221][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.664412][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.670468][ C0] ? clear_bhb_loop+0x60/0xb0 [ 429.675230][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.681119][ C0] RIP: 0033:0x7f889798ebe9 [ 429.685528][ C0] RSP: 002b:00007f8895bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 429.693961][ C0] RAX: ffffffffffffffda RBX: 00007f8897bb6180 RCX: 00007f889798ebe9 [ 429.701963][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 429.709948][ C0] RBP: 00007f8897a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 429.717944][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.725911][ C0] R13: 00007f8897bb6218 R14: 00007f8897bb6180 R15: 00007ffe5b3874d8 [ 429.733907][ C0] [ 429.737011][ C0] rcu: rcu_preempt kthread starved for 494 jiffies! g47061 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 429.748048][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 429.758016][ C0] rcu: RCU grace-period kthread stack dump: [ 429.763905][ C0] task:rcu_preempt state:R running task stack:26632 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 429.777469][ C0] Call Trace: [ 429.780806][ C0] [ 429.783744][ C0] __schedule+0x1798/0x4cc0 [ 429.788264][ C0] ? __lock_acquire+0xab9/0xd20 [ 429.793135][ C0] ? __pfx___schedule+0x10/0x10 [ 429.798085][ C0] ? schedule+0x91/0x360 [ 429.802322][ C0] schedule+0x165/0x360 [ 429.806556][ C0] schedule_timeout+0x12b/0x270 [ 429.811498][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 429.816873][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 429.822863][ C0] ? __pfx_process_timeout+0x10/0x10 [ 429.828145][ C0] ? prepare_to_swait_event+0x341/0x380 [ 429.833687][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 429.838542][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 429.844692][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 429.850430][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 429.855657][ C0] ? finish_swait+0xcd/0x1f0 [ 429.860280][ C0] rcu_gp_kthread+0x99/0x390 [ 429.864893][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 429.870104][ C0] ? __kthread_parkme+0x7b/0x200 [ 429.875051][ C0] ? __kthread_parkme+0x1a1/0x200 [ 429.880100][ C0] kthread+0x70e/0x8a0 [ 429.884210][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 429.889407][ C0] ? __pfx_kthread+0x10/0x10 [ 429.893995][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.899187][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.904380][ C0] ? __pfx_kthread+0x10/0x10 [ 429.908967][ C0] ret_from_fork+0x3fc/0x770 [ 429.913562][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 429.918677][ C0] ? __switch_to_asm+0x39/0x70 [ 429.923436][ C0] ? __switch_to_asm+0x33/0x70 [ 429.928189][ C0] ? __pfx_kthread+0x10/0x10 [ 429.932857][ C0] ret_from_fork_asm+0x1a/0x30 [ 429.937889][ C0] [ 429.940903][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 429.947206][ C0] Sending NMI from CPU 0 to CPUs 1: [ 429.952415][ C1] NMI backtrace for cpu 1 [ 429.952428][ C1] CPU: 1 UID: 0 PID: 8908 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 429.952448][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.952458][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 429.952482][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 429.952502][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 429.952516][ C1] RSP: 0018:ffffc90000a079b8 EFLAGS: 00000246 [ 429.952530][ C1] RAX: ffffffff8172213d RBX: 0000000000000003 RCX: ffff88801ff73c00 [ 429.952541][ C1] RDX: 0000000000000100 RSI: ffffffff8d9b492d RDI: ffffffff8be32680 [ 429.952553][ C1] RBP: ffffc90000a07a90 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6 [ 429.952564][ C1] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: dffffc0000000000 [ 429.952575][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000140f3c [ 429.952586][ C1] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 429.952599][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.952611][ C1] CR2: 00007f7d6f63ffbc CR3: 000000000df36000 CR4: 00000000003526f0 [ 429.952627][ C1] Call Trace: [ 429.952636][ C1] [ 429.952641][ C1] kvm_wait+0x232/0x290 [ 429.952660][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.952680][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 429.952704][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 429.952726][ C1] ? __ip_vs_conn_in_get+0xa3e/0xaa0 [ 429.952750][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 429.952771][ C1] ? __lock_acquire+0xab9/0xd20 [ 429.952796][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 429.952816][ C1] do_raw_spin_lock+0x21f/0x290 [ 429.952832][ C1] ? __dev_queue_xmit+0xd70/0x3b50 [ 429.952848][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 429.952870][ C1] __dev_queue_xmit+0xd70/0x3b50 [ 429.952890][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 429.952906][ C1] ? synproxy_pernet+0x23/0x240 [ 429.952926][ C1] ? synproxy_pernet+0x23/0x240 [ 429.952947][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 429.952961][ C1] ? synproxy_pernet+0x23/0x240 [ 429.952979][ C1] ? synproxy_pernet+0x23/0x240 [ 429.952999][ C1] ? __asan_memset+0x22/0x50 [ 429.953018][ C1] ? __lock_acquire+0xab9/0xd20 [ 429.953047][ C1] ? ip_finish_output2+0xae7/0x1160 [ 429.953065][ C1] ip_finish_output2+0xd03/0x1160 [ 429.953079][ C1] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 429.953095][ C1] ? ip_finish_output2+0x452/0x1160 [ 429.953111][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 429.953128][ C1] ? ip_skb_dst_mtu+0x866/0xab0 [ 429.953143][ C1] ? ip_finish_output+0x33a/0x3f0 [ 429.953166][ C1] ip_output+0x2a1/0x3c0 [ 429.953188][ C1] ? ip_output+0x60/0x3c0 [ 429.953210][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 429.953236][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 429.953256][ C1] ? nft_jhash_eval+0x928/0xa80 [ 429.953275][ C1] ? synproxy_pernet+0x45/0x270 [ 429.953292][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 429.953310][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 429.953325][ C1] ? nf_ip_checksum+0x13c/0x510 [ 429.953350][ C1] nft_synproxy_do_eval+0x345/0x570 [ 429.953367][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 429.953381][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 429.953402][ C1] nft_do_chain+0x409/0x1920 [ 429.953431][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 429.953456][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 429.953481][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 429.953498][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 429.953517][ C1] nft_do_chain_inet+0x25d/0x340 [ 429.953539][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 429.953565][ C1] ? NF_HOOK+0x9a/0x3a0 [ 429.953582][ C1] ? NF_HOOK+0x9a/0x3a0 [ 429.953599][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 429.953622][ C1] nf_hook_slow+0xc2/0x220 [ 429.953644][ C1] NF_HOOK+0x206/0x3a0 [ 429.953662][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 429.953680][ C1] ? NF_HOOK+0x9a/0x3a0 [ 429.953696][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 429.953712][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 429.953731][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 429.953757][ C1] ? skb_dst+0x4f/0xd0 [ 429.953774][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 429.953794][ C1] NF_HOOK+0x30c/0x3a0 [ 429.953812][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 429.953829][ C1] ? NF_HOOK+0x9a/0x3a0 [ 429.953846][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 429.953862][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 429.953881][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 429.953903][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 429.953920][ C1] __netif_receive_skb+0x143/0x380 [ 429.953939][ C1] ? process_backlog+0x2d5/0x14f0 [ 429.953958][ C1] process_backlog+0x60e/0x14f0 [ 429.953983][ C1] ? __pfx_process_backlog+0x10/0x10 [ 429.954000][ C1] ? rcu_is_watching+0x15/0xb0 [ 429.954016][ C1] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 429.954037][ C1] __napi_poll+0xc7/0x360 [ 429.954052][ C1] ? net_rx_action+0x46d/0xe30 [ 429.954071][ C1] net_rx_action+0x707/0xe30 [ 429.954098][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 429.954132][ C1] handle_softirqs+0x283/0x870 [ 429.954150][ C1] ? do_softirq+0xec/0x180 [ 429.954167][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 429.954184][ C1] ? kernel_fpu_end+0xc8/0x120 [ 429.954203][ C1] do_softirq+0xec/0x180 [ 429.954216][ C1] [ 429.954222][ C1] [ 429.954228][ C1] ? __pfx_do_softirq+0x10/0x10 [ 429.954243][ C1] ? read_tsc+0x9/0x20 [ 429.954265][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 429.954287][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 429.954302][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 429.954315][ C1] ? __asan_memset+0x22/0x50 [ 429.954333][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 429.954354][ C1] kernel_fpu_end+0xd2/0x120 [ 429.954373][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 429.954397][ C1] blake2s_compress+0x5f/0xd0 [ 429.954416][ C1] blake2s_update+0x14b/0x450 [ 429.954433][ C1] hmac+0x1b6/0x330 [ 429.954449][ C1] ? __pfx_hmac+0x10/0x10 [ 429.954462][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 429.954487][ C1] ? kernel_fpu_end+0xd2/0x120 [ 429.954512][ C1] ? __asan_memset+0x22/0x50 [ 429.954531][ C1] message_ephemeral+0x1c0/0x280 [ 429.954547][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 429.954577][ C1] ? __crypto_memneq+0x2fe/0x470 [ 429.954600][ C1] wg_noise_handshake_create_initiation+0x27c/0x7e0 [ 429.954620][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 429.954638][ C1] ? __lock_acquire+0xab9/0xd20 [ 429.954663][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 429.954686][ C1] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 429.954703][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.954720][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 429.954737][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 429.954761][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 429.954781][ C1] ? do_raw_spin_lock+0x121/0x290 [ 429.954802][ C1] ? ktime_get_coarse_with_offset+0xfb/0x140 [ 429.954821][ C1] wg_packet_handshake_send_worker+0x163/0x320 [ 429.954842][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 429.954871][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.954886][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 429.954900][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 429.954915][ C1] process_scheduled_works+0xade/0x17b0 [ 429.954943][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 429.954965][ C1] worker_thread+0x8a0/0xda0 [ 429.954992][ C1] kthread+0x70e/0x8a0 [ 429.955012][ C1] ? __pfx_worker_thread+0x10/0x10 [ 429.955027][ C1] ? __pfx_kthread+0x10/0x10 [ 429.955045][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.955061][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.955077][ C1] ? __pfx_kthread+0x10/0x10 [ 429.955095][ C1] ret_from_fork+0x3fc/0x770 [ 429.955111][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 429.955129][ C1] ? __switch_to_asm+0x39/0x70 [ 429.955147][ C1] ? __switch_to_asm+0x33/0x70 [ 429.955165][ C1] ? __pfx_kthread+0x10/0x10 [ 429.955183][ C1] ret_from_fork_asm+0x1a/0x30 [ 429.955209][ C1]