last executing test programs: 6.39129958s ago: executing program 0 (id=4493): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0xa, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x100004}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) (async) unshare(0x62000000) r2 = socket$inet6(0xa, 0x80001, 0x0) (async) socketpair(0x1d, 0x800, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) (async, rerun: 32) getsockopt$bt_hci(r2, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000000000)=0x1e) (rerun: 32) 5.398049221s ago: executing program 1 (id=4508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000140)) 4.141095874s ago: executing program 4 (id=4525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x40}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 3.717486527s ago: executing program 3 (id=4528): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x844) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x1, 0x8}, {0xb, 0x2}, {0x5, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) socket(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6(0xa, 0x3, 0x88) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x844) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x1, 0x8}, {0xb, 0x2}, {0x5, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x10}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async) 1.714581624s ago: executing program 4 (id=4531): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket(0x10, 0x80002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) 1.714029562s ago: executing program 3 (id=4532): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000080)=',]-/\x00', 0x80000, &(0x7f0000000180)={@_ha_fsid={[0x3ff, 0x5]}, {0x4, 0x54, 0x5, 0x6}}, 0x84d, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x8c64}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev, @local}, &(0x7f00000002c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r3, 0x25, 0x12, @val=@perf_event={0xfffffffffffffc01}}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x40002000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff06, 0x0) 1.658627496s ago: executing program 3 (id=4533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000100)='#\x00', 0x40040, &(0x7f0000000140)={@_ha_fsid={[0x0, 0x8]}, {0x520, 0x2, 0x7, 0x3}}, 0xfc0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @loopback}}, [0x81, 0x7, 0xb, 0x6, 0x2, 0x10000, 0x7fff, 0x88, 0x9d6, 0xfffffffffffffbff, 0xed02, 0x4, 0xa1a, 0x4, 0x6]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r2, 0x4) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0xfffffffc, 0x7d1f, 0x6, 0x6}}) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xe1}, 0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd2a, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x5, 0x2, 0x0, 0x0, 0x5, 0x10}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000044000000060a0b040000000000000000020000001800048014000180090001006861736800000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 1.656628358s ago: executing program 0 (id=4534): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r8, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) r14 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r14, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRES8=r10, @ANYBLOB="b2c4829be8466bd02d5544da904838ec2ece6749ad79e60093d3441aa7", @ANYRES32=r4], 0x160}, 0x1, 0x0, 0x0, 0x24048000}, 0x814) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xfffffffffffffd38, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x86}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r13, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r15}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x24}}, 0x10000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000095280500400012800c0001006d6163766c616e003000028008000100100000001c000580fffe0400aaaaaaaaaa3b00000a000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=r5, @ANYBLOB="9d738aac38b19b5e6d5815c2f44b820ff6973cab250f749448ab7c58405252407233c83c36d601c539dbd49503cff54b0ce5342ed17cbda93a24045e6697a82170a5b57e0bdf4726b96e00996e4b3354fb07abce17459411c10c41f797650c002864972305e6d36577dc419ad2e5534441e020e207736634f536185738ee8d66da991581383dbda2518f0b7dd72d32d235ce18f6abbbdda10f9efb8e2de10f21ef844184d256a819762d22c4600b966f3e0d09459100"/191], 0x68}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r11, 0x0, 0x96, 0x8a, &(0x7f0000000640)="454972a9f990af5dd6f195210278e88c032629388d131a9996b95e5e933b1b457cb1091836b22d4496a260d8051b528162c8e465098e4eacb01b7a5767390763383dc8a01da71dd31800a152c21b303c1ed063ee27c6aa8b443d39e46a0225d16a19887d90feae4cb0bcc37d47efa8c1ed05a96165a0fec8e6749f852ffa325e5414af5d211ebc9b259d3c7ee13180d02105eb6df64b", &(0x7f0000000840)=""/138, 0x3ff, 0x0, 0x88, 0xfb, &(0x7f00000009c0)="8199a4571de59ded4dc891d1f2a7d884ea1720bbd350f429c96df422068518d464f07a07ea49afd2d1fb084243cef9a47f27f141474c1d0b6517921e25b2f7d41effdec2a15e011e2b4d6e77524ccdfcd53e89fdd1e1f6a53dbf216488bad7152cc90f3691975cc6ea1b6592ecfca0f3bb3979d5ee9fcbb338b1ed70ebc9c4d5c3800a6f6251f2b3", &(0x7f0000000a80)="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", 0x7, 0x0, 0x7}, 0x50) (async) r16 = socket$unix(0x1, 0x1, 0x0) bind$unix(r16, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r16, 0x2) (async) shutdown(r0, 0x0) (async) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r17 = accept(r16, 0x0, 0x0) sendto$inet6(r17, &(0x7f0000000000)="35ebc9747b", 0x5, 0x400440e9, 0x0, 0x0) 1.633882781s ago: executing program 2 (id=4535): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000200)={{r1, &(0x7f0000000000)='syz2\x00', 0x800, &(0x7f0000000080)={@align=0x5, {0x2, 0x3, 0x6, 0x9}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x8}, {[0xfff, 0x6e7, 0xc3f, 0x5]}, 0x2, 0x7d, &(0x7f0000000180)=""/125}) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x74, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x57, 0x6, "c7e307f2dab5dc5e7a72af1749e9df8da62765ba2cfc26ae2f094524365ddfa6ceec2141519c6e17532bf45c1fc533a74478308a46b5e06902e363b9acf93165cc059f0029212b9e6192de91d896caee2365eb"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x8180}, 0x4c044) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 1.538338398s ago: executing program 1 (id=4536): r0 = socket$inet(0x2, 0x4, 0xe) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000280)={{'\x00', 0x1}, {0x4000000000006}, 0x5, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)="34bde05070f6ddbdc2a011fb45e2d9867ffc785cbbf0f44ba49e971b09c0870148a7cda9e027b968a292a3fe6535656e30cf78c2e6d6ddf27661c5d228818211317e1ab76c56201da7060aee9e4cfa84da1ee7d5d522aa696f13fd06d7b227058b2c238b3366b09acaab01250157f4834999dd98359b9cc7da8e4ea3fde01877e3", 0x81, 0x0, &(0x7f0000000ec0)=ANY=[], 0x196}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000007c0)=@gcm_128={{0x304}, "2d887b8e0a5ec4e3", "ba88af9a3490cdfa2440d3fb12d56195", "39623f11", "e80cd2f73ea6b598"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$kcm(0xa, 0x922000000003, 0x11) socket$netlink(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffcdaa000000727645030000002b684300000059ffe3eb51d55122c7bb184ae658811185c44b1a9c8edb51eb3b87aa576f579f2384096ce96076fce569ce0024ba2c64b09d0140239fd0cad1bf2c84ec749c5f7d2c0b1e471556a613cd5072486fe9d4f4684e646a78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000ff12e61900010900000000007090eb09a732a337d9ec000000021800000003fd"], 0x24}}, 0x0) (async) poll(&(0x7f00000003c0)=[{r6, 0x100}, {r7}, {r8}, {r7, 0x140a}, {r3, 0xc0a0}], 0x5, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r7}, &(0x7f0000000a40), &(0x7f0000000a80)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e4603b5878860a702d551", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0110180000000000000028000000280000000400000002000000010000000000000000000000ba00000040000000000f010000006b00005f005492d0a9832d4491"], &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x1}, 0x28) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="1c0000005e007f029e3b47feffffffffffffffd956c07dead6792e01", 0x1c}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) vmsplice(r4, &(0x7f0000000600)=[{&(0x7f00000006c0)="3e9901f3c0cb53130812d697ccc3baca86205bf69510541182a20acfc7a89c4bd16101cf1f23b6f685f63c01db838b9cdb1fd035e45104cbab52f0c306bdb4970bd0d9c1ed8605283580ff06305c3df0c741b10523554f3ee0f3be068d3c95e13ac2386b53f9246d7db3895fdee33c894d7b02e48525ea6ae71bff2dd8fc41533a50e557436a626b5c3192d8a2d339dd868f168e2b49072567f64463d3976584b753c3c4ab9698baa1068c829ceb09d541c8c1ee9819", 0xb6}], 0x1, 0x3) 1.509517047s ago: executing program 2 (id=4537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xffffffff, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 1.435097698s ago: executing program 1 (id=4538): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x2, 0x0, 0x7fe}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000240)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) 1.354092138s ago: executing program 2 (id=4539): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x1e, 0x0, @void}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000640)=""/50, 0x32}], 0x1, 0x7f, 0x8) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20000000) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100000000000400000000000ff020000000020000000000000000001e00000800000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ad00000000000000000000000000000000000000000000000000000000000000fdff1f00000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fc0200000000000000000000000000012400090000000000010000000100000000000080b4000000000000000500000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001b00000000000000000000ffff0a010102ffff0004000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x104}}, 0x4cc00) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000063010b000000000095000000000000f7691ea6031d3480478b6e00ccf68262a0d4529b57e785c0bfb21c880481f139b231a9d673a791420edc066ec7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 874.176938ms ago: executing program 1 (id=4540): unshare(0x20000400) (async) unshare(0x20000400) r0 = socket(0x1d, 0x3, 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040081}], 0x1, 0x40) (async) sendmmsg$alg(r1, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040081}], 0x1, 0x40) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001140)) (async) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001140)) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x21}}}}}, 0x30}}, 0x4800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r5}, 0x38) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r8) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000040)=0x10001, 0x4) r9 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x44, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) sendfile(r1, r9, &(0x7f0000000000)=0x1, 0x9) (async) sendfile(r1, r9, &(0x7f0000000000)=0x1, 0x9) 805.044308ms ago: executing program 3 (id=4541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x35}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40050) 747.922462ms ago: executing program 0 (id=4542): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) shutdown(r0, 0x1) 747.207595ms ago: executing program 2 (id=4543): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) (async) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002e80)={0x0, 0x72, "f7a3aeff5ff7a44d1724c47107d4e56fe0cf00cdd8fb4fce27e8870cbc609e3a2aadfed3ccd7018b8659295d8b1901abe29566a0124e438985511aee6221b652f1365feec54405049b360c7e29b7db11070260e80e551ece1c72f0081081f988dd0fef5c50d43d9d097eaac23ad0aa6ceaf2"}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e29, 0xff, @remote, 0xe32c}}}, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000003b40), 0x0, 0x4040081) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r7, &(0x7f0000001e00)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x7a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, 0x0, 0x0, 0xfffffffffffffffe}}], 0x1, 0x40004) (async) readv(r7, &(0x7f0000000400)=[{&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000900)=""/197, 0xc5}], 0x4) 746.826382ms ago: executing program 4 (id=4544): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8, 0x0, 0x3}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 550.395758ms ago: executing program 4 (id=4545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r4, @ANYBLOB="08000200e4"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xb, 0x6576, 0xba, 0x1, 0x1, 0x7, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40080c1}, 0x40000880) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x3, 0x2}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42}}}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 550.059282ms ago: executing program 2 (id=4546): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000a40)={0x48, r2, 0x1, 0x70bd28, 0xfffffffe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbf2}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x48}}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x24000001}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000000b0103000000000000000000000003772e2bc09c9c08000240000000050ae30300bbbbbbbbbbbb00000a000100bbbbbbbbbbbb00000a000100ffffffffffff000008000340000000000800"], 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x80) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r11) sendmsg$IEEE802154_START_REQ(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r12, 0x5fa3dbc996777dbd, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x44, r12, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd68ba024e00281901fe880000000000000000000000000001fe88000000000000000000000000010173000000000000003300000900000000290000fa000000004e224e3d04919078e63338b902734e56"], 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) (async) close(0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRESOCT=r7, @ANYRES64=r9], 0x50}}, 0x0) 547.680789ms ago: executing program 3 (id=4547): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x70, 0x1e, 0x399, 0x0, 0x0, {{@in6=@mcast1}, @in6=@local}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r4}, @IFLA_BRPORT_COST={0x8, 0x3, 0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xfcf}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1e, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call, @map_val={0x18, 0x3, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @generic={0x3, 0x2, 0x5, 0xfffd, 0x2}, @exit, @jmp={0x5, 0x1, 0x8, 0x4, 0xa, 0xfffffffffffffff8, 0x8}], &(0x7f0000000000)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000480)=[r5, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5], &(0x7f0000000200)=[{0x2, 0x3, 0xa, 0x3}, {0x0, 0x4, 0xb, 0x4}, {0x1, 0x1, 0x5, 0x3}, {0x3, 0x1, 0x7}, {0x1, 0x5, 0x3, 0x9}, {0x3, 0x5, 0xe, 0x3}], 0x10, 0x4e5}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x1e, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call, @map_val={0x18, 0x3, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @generic={0x3, 0x2, 0x5, 0xfffd, 0x2}, @exit, @jmp={0x5, 0x1, 0x8, 0x4, 0xa, 0xfffffffffffffff8, 0x8}], &(0x7f0000000000)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000480)=[r5, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5], &(0x7f0000000200)=[{0x2, 0x3, 0xa, 0x3}, {0x0, 0x4, 0xb, 0x4}, {0x1, 0x1, 0x5, 0x3}, {0x3, 0x1, 0x7}, {0x1, 0x5, 0x3, 0x9}, {0x3, 0x5, 0xe, 0x3}], 0x10, 0x4e5}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r6, r7}, 0xc) 521.837307ms ago: executing program 0 (id=4548): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000200000000000000ffff05000100070000000900020073797a3000000000050005000a000000050004000000000016000300686173683a6e65742c706f72742c6e65740000001400078008000840000000000500150002"], 0x64}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18027a00000000000000000027000000950000000000000056cb5f77a81a3f7bfddbd63088ca"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000140)="8b1e98f76780c39a890efc38cd7db3231cc396241f865c66856000d875cf4a82ecd95b19bc532b4198246cf24803306f27c2d0d34b174fa6dd57398e5eab809b7563164791581ae3d6c4b0fd5f88c7126f82b591b8c1e06fc964af890bfbd663541ee4e0bd4fd33efdead194f18ef5e4f9c5aa148a2ae7a2ae997bcaf73460d9ba077cf057a4cf8dc4755ee83fb7f492f51b5c59231c", 0x96}, {&(0x7f0000000500)="7a5c417b50def5c03d03dc3d0eff152f58561c6dcddd781af3e6c73afdf4603d796f2cb6250018c0ba61aeaac18847e639a10ee3350a1496a7c0f421eb2e827fe37ff16e6a2f0958309ee2b6f1dfb721651e71a88c4b85bc05d792053059d8ac29c27652b143364caf0eece2ea3e5b144819173c7129f0bca3f4c2cb1ac57cec95fc650697265d4b12fba9444bb307638f4cc781f911dfb947caad363a64fd7d7bea068c148e2d0dbcf9f4ec670f1ededff81e3032dfa7ffc2eddff785de5fe33c33afed777d8623c00cbd141b51963aa245dd2c54dcd4d771f8f31f23f76137b742c35f1e8a86fdfdaa7c34b8dadb8a7947", 0xf2}, {&(0x7f0000000200)="947ae0ed2a4aff43bb7ba77206a6bafbd2aba307321868292b338c006a00d5c38d5c73c970826c076b003977255500ddd6672b890c2a97b42770d149450fd96fbfa8764c99289be1f2c7d17a90d500559a090ddef4f3240b3481e8fb3636d94bebca6bcc222c16b8c3a6ee475499cc79104333c3c1f127bbd15326047824134fce4933350c3e32677c5ee38c33df6e0142856b1f14ae9acad40b6ac0e2783d95b902ea6e8a42a3124526bbad25a915ee934316459100ea", 0xb7}, {&(0x7f0000000600)="b64496b7b4d3d9c01140bc859831b64a5322baffa5e4c86bc597b95460bb20676ee074002da19b99", 0x28}, {&(0x7f0000000640)="2c437182d6f63a7bbbac77d7c9ae338bb4474b658f85a3a98ac68f8db248cdd0f693845fb732c407a534265309def735bba3192691405770652e810e422e5899ead94898f5983c8976fcab26e27a58aa2ed13f4569ea0b0c17e4f5c2cf2dd69e97557f56d5094c143d4339487aaff23df0cd6a6fb63d2f62d08df4e88f256a38170ffc0926fc443db286b741ab076fa9603a15cdf2fe4464c167aaf12b361a8afcef1b1b0ecd95312e4914678f0494e4b7ffbaae6398859a17147816d92d2c13359ac94c53efeab251e26d9f11328950413383ca678cd91fcd3561735048eed79631434c", 0xe4}], 0x5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001c80)={0x0, 0x0, "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", "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"}) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) r9 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r9, 0x1}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000002c80)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf8, "8cbadc4215ba2f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000004000)={r6, r10, "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", "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"}) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f00000007c0)={0x18, 0x2, {0x2, @local}}, 0x1e) 520.523785ms ago: executing program 1 (id=4549): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000100)={0x1, 0x3d, "7f3c9fb9931c878e94427755467c93c748d445677a9860188251da70821c5e514c622a6095f7d1107d75edf81695b7ef1c71f940544a80ee548fad7bbe"}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf255c00000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040002) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="8000"/15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80005}, 0x50) 393.651606ms ago: executing program 2 (id=4550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x2}) socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x9, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0x1d, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r10, 0x1}, 0x1c}}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) r13 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) (async) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtclass={0x9, 0x28, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0x4, 0x1}, {0x0, 0xb}, {0x3, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6a}}, @tclass_kind_options=@c_sfq, @tclass_kind_options=@c_multiq, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x50}}, 0x4041080) 326.427298ms ago: executing program 1 (id=4551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xa}}}, 0x24}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000012c0)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRESHEX=r0, @ANYRESDEC=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="94a4242e488a401ddb63a5bdb15bb0269ba639262f1b7c6f9f188b13c970563afdb919d14b32411664eda435d2d29c67c165e2", @ANYRES64=0x0], 0x11) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x9, 0x30, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000010000000000000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22013, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000540)='syzkaller\x00', 0x20000400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000001540)=ANY=[@ANYRES32, @ANYBLOB="ffff0000b0ac"]) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bond0\x00', @remote}) 306.561056ms ago: executing program 0 (id=4552): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) sendto$unix(r7, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000002bc0)=""/4100, 0x1021}, {&(0x7f0000000240)=""/163, 0xa3}], 0x6}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 251.226325ms ago: executing program 3 (id=4553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e520000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 142.488329ms ago: executing program 4 (id=4554): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x27, 0x802, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) (async) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) (async) close(r0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x27, 0x802, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) (async) 105.498219ms ago: executing program 0 (id=4555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 0s ago: executing program 4 (id=4556): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x1d, 0x3, 0xffff, 0x5, 0x3, 0x5, {0x0, @in={{0x2, 0x4e21, @local}}, 0xe, 0xeb30, 0xb8, 0xffffffc4, 0x6}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x3, 0xb, 0x9, 0x9, 0x0, 0x5, 0xc, r1}, &(0x7f0000000180)=0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) kernel console output (not intermixed with test programs): ): Released all slaves [ 397.883148][T12538] bond4 (unregistering): Released all slaves [ 397.897147][T12538] bond5 (unregistering): Released all slaves [ 397.911560][T12538] bond6 (unregistering): Released all slaves [ 398.051046][ T5143] Bluetooth: hci2: command tx timeout [ 398.346727][T16917] chnl_net:caif_netlink_parms(): no params data found [ 398.669992][T17007] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 398.714978][T17007] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 398.747080][T17007] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 398.770779][T17013] validate_nla: 4 callbacks suppressed [ 398.770799][T17013] netlink: 'syz.0.3001': attribute type 5 has an invalid length. [ 398.795134][T17007] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 398.958760][T17013] geneve3: entered promiscuous mode [ 398.964198][T17013] geneve3: entered allmulticast mode [ 399.184138][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 399.217888][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 399.594652][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 399.617011][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 399.658125][T16917] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.692879][T16917] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.734902][T16917] bridge_slave_0: entered allmulticast mode [ 399.782707][T16917] bridge_slave_0: entered promiscuous mode [ 399.819497][T16917] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.834559][T16917] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.852247][T16917] bridge_slave_1: entered allmulticast mode [ 399.875387][T16917] bridge_slave_1: entered promiscuous mode [ 400.124482][ T5143] Bluetooth: hci2: command tx timeout [ 400.167845][T17044] __nla_validate_parse: 6 callbacks suppressed [ 400.167867][T17044] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3005'. [ 400.230410][T16917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.281758][T16917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.388240][T17037] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 400.407535][T16917] team0: Port device team_slave_0 added [ 400.423864][T16917] team0: Port device team_slave_1 added [ 400.573623][T16917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.613196][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.658241][T16917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.722730][T16917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.739345][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.767046][T16917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.812427][T17054] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 400.835071][T17053] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 400.846194][T17053] syzkaller1: linktype set to 823 [ 400.863087][T17053] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 400.891859][T17054] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 401.022469][T16917] hsr_slave_0: entered promiscuous mode [ 401.049134][T16917] hsr_slave_1: entered promiscuous mode [ 401.090312][T16917] debugfs: 'hsr0' already exists in 'hsr' [ 401.090643][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 401.110010][T16917] Cannot create hsr debugfs directory [ 401.395668][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3010'. [ 401.416970][T17077] net_ratelimit: 61 callbacks suppressed [ 401.416989][T17077] openvswitch: netlink: EtherType 50a is less than min 600 [ 401.689345][T17089] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 401.721154][T12538] : left promiscuous mode [ 401.727369][T17092] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 401.880649][T12538] : left promiscuous mode [ 402.023525][T17103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3015'. [ 402.056883][T17103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3015'. [ 402.066047][T12538] tipc: Left network mode [ 402.127193][T12538] IPVS: stopping master sync thread 11242 ... [ 402.179676][T17112] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3018'. [ 402.204644][ T5143] Bluetooth: hci2: command tx timeout [ 402.474639][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 402.817252][T17136] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3023'. [ 402.961272][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3025'. [ 402.983673][T17151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3025'. [ 403.037255][T17150] ip6tnl0: Caught tx_queue_len zero misconfig [ 403.432729][T12538] hsr_slave_0: left promiscuous mode [ 403.467931][T12538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.483851][T12538] batman_adv: batadv0: Removing interface: dummy0 [ 403.872068][T12538] team0 (unregistering): Port device team_slave_1 removed [ 403.898801][T12538] team0 (unregistering): Port device team_slave_0 removed [ 404.179417][T17205] netlink: 'syz.4.3034': attribute type 2 has an invalid length. [ 404.285029][ T5143] Bluetooth: hci2: command tx timeout [ 404.338181][T17209] netlink: 'syz.2.3036': attribute type 12 has an invalid length. [ 404.426731][ T29] audit: type=1804 audit(1771365288.136:6): pid=17211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3035" name="/newroot/35/cgroup.controllers" dev="tmpfs" ino=197 res=1 errno=0 [ 404.493320][ T29] audit: type=1800 audit(1771365288.136:7): pid=17211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3035" name="cgroup.controllers" dev="tmpfs" ino=197 res=0 errno=0 [ 404.553762][T16917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.573540][T16917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 404.655543][T16917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.668716][T17220] C: renamed from lo (while UP) [ 404.678235][T17220] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 404.707993][T16917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.887338][T17238] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 405.066956][T16917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.089769][T17245] geneve3: entered promiscuous mode [ 405.096629][T17245] geneve3: entered allmulticast mode [ 405.157199][T12510] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 405.186023][T12510] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 405.213798][T16917] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.245489][T12510] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 405.254015][T12510] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 405.289523][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.296855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.372739][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.380177][T12537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.551094][T17266] gre1: entered promiscuous mode [ 405.559474][T17269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3046'. [ 405.567425][T17271] IPVS: length: 8 != 1152 [ 405.575729][T17266] gre1: entered allmulticast mode [ 405.595579][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3047'. [ 405.891698][T17287] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.042915][T17295] IPVS: set_ctl: invalid protocol: 121 172.20.20.44:20004 [ 406.131845][T17300] netlink: 'syz.4.3057': attribute type 12 has an invalid length. [ 406.156967][T17298] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 406.241866][T12538] IPVS: stop unused estimator thread 0... [ 406.269283][T16917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.392379][T17309] netlink: 'syz.2.3059': attribute type 4 has an invalid length. [ 406.409576][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 406.435013][T17309] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3059'. [ 406.490064][T16917] veth0_vlan: entered promiscuous mode [ 406.500556][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3060'. [ 406.540091][T16917] veth1_vlan: entered promiscuous mode [ 406.551111][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 406.585945][T17312] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3060'. [ 406.597527][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 406.650367][T16917] veth0_macvtap: entered promiscuous mode [ 406.689358][T17327] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 406.723838][T16917] veth1_macvtap: entered promiscuous mode [ 406.771225][T16917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.818139][T16917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.866670][T12513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.896361][T12513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.943148][T12513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.961929][T12513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.340506][T12518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.347370][T17353] syzkaller1: entered promiscuous mode [ 407.354137][T17353] syzkaller1: entered allmulticast mode [ 407.366584][T12518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.398048][T17353] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3070'. [ 407.552888][T17367] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3073'. [ 407.577866][T12538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.596728][T12538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.660798][T17378] netlink: 'syz.1.3076': attribute type 7 has an invalid length. [ 407.681707][T17378] erspan0: entered promiscuous mode [ 407.701543][T17378] gretap0: entered promiscuous mode [ 407.951877][T17387] netem: change failed [ 408.220339][T17395] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 408.227808][T17395] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 408.266754][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.277882][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.287178][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.316931][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.336464][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.789108][T12513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.801981][T12513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.940128][T12513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.951031][T12513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.982504][T17397] chnl_net:caif_netlink_parms(): no params data found [ 409.052135][T12513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.062899][T12513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.162304][T12513] bond0: (slave netdevsim0): Releasing backup interface [ 409.295876][T17397] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.328551][T17397] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.355302][T17397] bridge_slave_0: entered allmulticast mode [ 409.383425][T17397] bridge_slave_0: entered promiscuous mode [ 409.409315][T17397] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.439175][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.447667][T17397] bridge_slave_1: entered allmulticast mode [ 409.467596][T17397] bridge_slave_1: entered promiscuous mode [ 409.698383][T17397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.728789][T17397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.938066][T17397] team0: Port device team_slave_0 added [ 410.014110][T17397] team0: Port device team_slave_1 added [ 410.059433][T17444] netlink: 'syz.0.3091': attribute type 10 has an invalid length. [ 410.137381][T12513] veth3: left allmulticast mode [ 410.144447][T12513] veth3: left promiscuous mode [ 410.150326][T12513] bridge1: port 1(veth3) entered disabled state [ 410.220537][T12513] tipc: Resetting bearer [ 410.445007][ T5143] Bluetooth: hci1: command tx timeout [ 410.634166][T12513] tipc: Disabling bearer [ 410.725129][T12513] bond5 (unregistering): (slave gretap2): Releasing active interface [ 410.808473][T12513] dvmrp0 (unregistering): left allmulticast mode [ 410.833655][T12513] bond1 (unregistering): (slave geneve2): Releasing active interface [ 411.263043][T12513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.279514][T12513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.292960][T12513] bond0 (unregistering): Released all slaves [ 411.308750][T12513] bond1 (unregistering): Released all slaves [ 411.329941][T12513] bond2 (unregistering): Released all slaves [ 411.351524][T12513] bond3 (unregistering): Released all slaves [ 411.376569][T12513] bond4 (unregistering): Released all slaves [ 411.400202][T12513] bond5 (unregistering): Released all slaves [ 411.429982][T12513] bond6 (unregistering): Released all slaves [ 411.454966][T12513] bond7 (unregistering): (slave veth5): Releasing active interface [ 411.468218][T12513] bond7 (unregistering): Released all slaves [ 411.494633][T12513] bond8 (unregistering): Released all slaves [ 411.514927][T12513] bond9 (unregistering): Released all slaves [ 411.543867][T17444] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 411.566805][T17397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.584517][T17397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.639270][T17397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.675608][T17397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.682695][T17397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.711080][T17397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.838109][T12513] tipc: Disabling bearer [ 411.868267][T12513] tipc: Left network mode [ 412.020670][T17397] hsr_slave_0: entered promiscuous mode [ 412.036154][T17397] hsr_slave_1: entered promiscuous mode [ 412.042553][T17397] debugfs: 'hsr0' already exists in 'hsr' [ 412.055985][T17397] Cannot create hsr debugfs directory [ 412.089646][T17478] : entered promiscuous mode [ 412.378485][T17496] netlink: zone id is out of range [ 412.397540][T17496] netlink: zone id is out of range [ 412.421683][T17496] netlink: zone id is out of range [ 412.457059][T17496] netlink: zone id is out of range [ 412.482428][T17496] netlink: zone id is out of range [ 412.505274][T17496] netlink: zone id is out of range [ 412.525377][ T5143] Bluetooth: hci1: command tx timeout [ 412.534603][T17496] netlink: zone id is out of range [ 412.548494][T17496] netlink: zone id is out of range [ 412.565593][T17496] netlink: zone id is out of range [ 412.601451][T17496] netlink: zone id is out of range [ 412.658371][T17508] __nla_validate_parse: 5 callbacks suppressed [ 412.658392][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 412.671869][T17513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3106'. [ 412.693721][T17508] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 412.715758][T17511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3106'. [ 412.746986][T17508] smc: adding net device team0 with user defined pnetid SYZ2 [ 412.765717][T17508] team0: entered promiscuous mode [ 412.772750][T17508] team0: entered allmulticast mode [ 412.834317][T17521] SET target dimension over the limit! [ 413.094274][T17536] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3111'. [ 413.111578][T12513] veth1_vlan: left allmulticast mode [ 413.129002][T12513] veth0_macvtap: left promiscuous mode [ 413.146078][T12513] veth1_vlan: left promiscuous mode [ 413.162717][T12513] veth0_vlan: left promiscuous mode [ 413.744941][T12513] team0 (unregistering): Port device team_slave_1 removed [ 413.774660][T12513] team0 (unregistering): Port device team_slave_0 removed [ 413.945020][T12513] lo (unregistering): left allmulticast mode [ 413.975695][T17541] bridge27: entered promiscuous mode [ 413.981253][T17541] bridge27: entered allmulticast mode [ 413.988908][T17551] tc_dump_action: action bad kind [ 414.118812][T17568] IPVS: length: 58 != 8 [ 414.128387][T17568] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3118'. [ 414.378386][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3122'. [ 414.427774][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3122'. [ 414.597371][T12513] IPVS: stop unused estimator thread 0... [ 414.608424][ T5831] Bluetooth: hci1: command tx timeout [ 414.617980][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3123'. [ 414.937245][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3127'. [ 415.027100][ T9] IPVS: starting estimator thread 0... [ 415.079457][T17397] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 415.128696][T17614] IPVS: using max 34 ests per chain, 81600 per kthread [ 415.129014][T17397] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 415.287806][T17397] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 415.329307][T17397] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 415.473741][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 415.720324][T17653] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.832522][T17397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.952713][T17397] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.006361][T12513] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.013563][T12513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.070832][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.078125][T12513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.188606][T17683] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 416.214629][T17683] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 416.476661][T17689] xt_CT: No such helper "snmp_trap" [ 416.688573][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 416.942481][T17397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.157459][T17397] veth0_vlan: entered promiscuous mode [ 417.213440][T17397] veth1_vlan: entered promiscuous mode [ 417.337773][T17397] veth0_macvtap: entered promiscuous mode [ 417.378727][T17397] veth1_macvtap: entered promiscuous mode [ 417.476220][T17397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.511854][T17397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.588125][T17740] tipc: Enabling of bearer rejected, failed to enable media [ 417.600422][T12536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.631534][T12536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.671034][T12536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.700541][T12536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.710486][T17748] x_tables: unsorted entry at hook 3 [ 417.848276][T17757] ipt_REJECT: TCP_RESET invalid for non-tcp [ 417.988030][T17750] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 418.047732][T17750] bond2 (unregistering): Released all slaves [ 418.258180][T12510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.285859][T12510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.313441][T17767] netlink: 'syz.3.3165': attribute type 21 has an invalid length. [ 418.325258][T17767] __nla_validate_parse: 3 callbacks suppressed [ 418.325277][T17767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3165'. [ 418.372274][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3166'. [ 418.400938][T17775] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3167'. [ 418.457409][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.467570][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3166'. [ 418.485901][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.601733][T17770] syzkaller0: entered promiscuous mode [ 418.634427][T17770] syzkaller0: entered allmulticast mode [ 418.767159][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 419.108592][T17812] x_tables: duplicate underflow at hook 2 [ 419.281384][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.302022][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.310919][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.328356][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.345567][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.134179][T15563] IPVS: starting estimator thread 0... [ 421.154979][T17833] netlink: 'syz.1.3173': attribute type 30 has an invalid length. [ 421.185578][T17838] net_ratelimit: 5 callbacks suppressed [ 421.185600][T17838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.234509][T17836] IPVS: using max 29 ests per chain, 69600 per kthread [ 421.280213][T17839] .: renamed from bridge_slave_1 (while UP) [ 421.408541][ T5143] Bluetooth: hci3: command tx timeout [ 421.542182][T17815] chnl_net:caif_netlink_parms(): no params data found [ 421.735001][T17815] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.742343][T17815] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.750292][T17815] bridge_slave_0: entered allmulticast mode [ 421.762798][T17866] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 421.763243][T17815] bridge_slave_0: entered promiscuous mode [ 421.782336][T17815] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.787289][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'. [ 421.790019][T17815] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.802846][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'. [ 421.807485][T17815] bridge_slave_1: entered allmulticast mode [ 421.824956][T17815] bridge_slave_1: entered promiscuous mode [ 421.868689][T17815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.878436][T17868] veth1_to_team: entered promiscuous mode [ 421.906899][T17815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.936023][T17866] netlink: 'syz.4.3182': attribute type 29 has an invalid length. [ 421.944889][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 421.969762][T17868] netlink: 'syz.4.3182': attribute type 29 has an invalid length. [ 421.980430][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 421.993149][T17815] team0: Port device team_slave_0 added [ 422.009810][T17869] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 422.017982][T17815] team0: Port device team_slave_1 added [ 422.023530][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'. [ 422.067205][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'. [ 422.141712][T17815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.159783][T17815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.186844][T17815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.227636][T17815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.268821][T17815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.335731][T17815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.366333][T17887] netlink: 'syz.4.3187': attribute type 1 has an invalid length. [ 422.499066][T17887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.514506][T17887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.536531][T17887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.544283][T17887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.670745][T17815] hsr_slave_0: entered promiscuous mode [ 422.678531][T17815] hsr_slave_1: entered promiscuous mode [ 422.687631][T17815] debugfs: 'hsr0' already exists in 'hsr' [ 422.693467][T17815] Cannot create hsr debugfs directory [ 422.797006][T17899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.853646][T17899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.865427][T17899] bond0 (unregistering): Released all slaves [ 422.952428][T17911] netlink: 'syz.1.3194': attribute type 1 has an invalid length. [ 423.205711][T17927] x_tables: duplicate entry at hook 3 [ 423.230455][T17815] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.248909][T17815] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 423.316523][T17932] nbd: must specify a size in bytes for the device [ 423.368021][T17815] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.423825][T17815] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 423.484724][ T5143] Bluetooth: hci3: command tx timeout [ 423.510205][T17815] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.520587][T17815] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 423.621948][T17815] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.659741][T17815] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 423.700075][T17946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.773287][T17966] __nla_validate_parse: 4 callbacks suppressed [ 423.773307][T17966] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3209'. [ 424.053184][T17973] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 424.129241][T17815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 424.149317][T17815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 424.178733][T17815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.208340][T17815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.289618][T17979] netlink: 'syz.4.3212': attribute type 49 has an invalid length. [ 424.423193][T17997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3215'. [ 424.439233][T17997] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3215'. [ 424.473052][T17997] veth3: entered promiscuous mode [ 424.600589][T17815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.657338][T17815] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.696556][T12518] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.704141][T12518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.886670][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.893893][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.939297][T18016] sctp: [Deprecated]: syz.2.3219 (pid 18016) Use of int in max_burst socket option. [ 424.939297][T18016] Use struct sctp_assoc_value instead [ 425.115677][T18025] netlink: 'syz.2.3222': attribute type 2 has an invalid length. [ 425.132643][T18025] netlink: 'syz.2.3222': attribute type 3 has an invalid length. [ 425.337549][T18036] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 425.348836][T18036] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 425.579860][ T5143] Bluetooth: hci3: command tx timeout [ 425.652382][T17815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.722435][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 425.746294][T17815] veth0_vlan: entered promiscuous mode [ 425.752408][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3230'. [ 425.774139][T17815] veth1_vlan: entered promiscuous mode [ 425.827486][T18061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3233'. [ 425.842045][T17815] veth0_macvtap: entered promiscuous mode [ 425.844881][T18061] netlink: 'syz.4.3233': attribute type 11 has an invalid length. [ 425.863648][T17815] veth1_macvtap: entered promiscuous mode [ 425.870429][T18061] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3233'. [ 425.888013][T17815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.926733][T17815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.953308][T12514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.975633][T12514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.994949][T12514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.011940][T12514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.088247][T18069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3235'. [ 426.107798][T12514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.132500][T12514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.147421][T18071] lo: Caught tx_queue_len zero misconfig [ 426.303746][T18072] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3237'. [ 426.314048][T18077] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3239'. [ 426.341538][T12514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.357737][T12514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.617963][T18095] tipc: Started in network mode [ 426.622999][T18095] tipc: Node identity 12c7570ef55b, cluster identity 4711 [ 426.631901][T18095] tipc: Enabled bearer , priority 0 [ 426.673958][T18087] tipc: Disabling bearer [ 426.888974][T18103] xt_hashlimit: size too large, truncated to 1048576 [ 427.393787][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.407564][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.483050][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.493727][T18126] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 427.502189][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.506797][T18126] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 427.528280][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.644487][ T5831] Bluetooth: hci3: command tx timeout [ 427.838452][T18138] tipc: Invalid UDP bearer configuration [ 427.838513][T18138] tipc: Enabling of bearer rejected, failed to enable media [ 428.000972][T12514] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.053398][T12514] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.111165][T12514] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.136579][T12514] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.454046][T18127] chnl_net:caif_netlink_parms(): no params data found [ 428.703066][T18127] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.710950][T18127] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.722721][T18127] bridge_slave_0: entered allmulticast mode [ 428.731374][T18127] bridge_slave_0: entered promiscuous mode [ 428.744591][T18127] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.755133][T18127] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.762933][T18127] bridge_slave_1: entered allmulticast mode [ 428.772291][T18127] bridge_slave_1: entered promiscuous mode [ 428.825581][T18127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.839320][T18127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.945269][T18127] team0: Port device team_slave_0 added [ 429.023673][T18189] __nla_validate_parse: 4 callbacks suppressed [ 429.023695][T18189] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3270'. [ 429.050022][T18187] bridge0: port 2(.) entered disabled state [ 429.056886][T18187] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.160048][T18187] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 429.160922][T18192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3271'. [ 429.182015][T18127] team0: Port device team_slave_1 added [ 429.274080][T18127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.283236][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.319881][T18127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.368368][T18127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.376392][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.390818][T18198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3273'. [ 429.405327][T18127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.514072][T18198] veth1: entered allmulticast mode [ 429.570998][ T5831] Bluetooth: hci0: command tx timeout [ 429.631973][T18127] hsr_slave_0: entered promiscuous mode [ 429.639827][T18127] hsr_slave_1: entered promiscuous mode [ 429.646749][T18127] debugfs: 'hsr0' already exists in 'hsr' [ 429.652698][T18127] Cannot create hsr debugfs directory [ 429.759359][T18209] bond1: entered promiscuous mode [ 429.773783][T18209] bond1: entered allmulticast mode [ 429.812206][T18209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.000606][T18230] netlink: 'syz.3.3280': attribute type 1 has an invalid length. [ 430.046395][T18230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.130442][T18235] bond2: (slave gretap1): making interface the new active one [ 430.147802][T18235] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 430.358292][T18242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.525830][T18242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.549434][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 430.633431][T18244] syzkaller0: entered promiscuous mode [ 430.640458][T18244] syzkaller0: entered allmulticast mode [ 430.708528][T18242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.761505][T18127] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 431.012131][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 431.046493][T18276] openvswitch: netlink: EtherType 50a is less than min 600 [ 431.646685][ T5831] Bluetooth: hci0: command tx timeout [ 432.560847][T18242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.582257][T18127] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 432.686600][T18127] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 432.793883][T12537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.826982][T18127] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 432.884636][T12513] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.929483][T12514] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.999607][T18301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3297'. [ 433.017754][T12514] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.059454][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3299'. [ 433.234004][T18309] netlink: 'syz.3.3301': attribute type 25 has an invalid length. [ 433.245867][T18309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3301'. [ 433.255501][T18127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.282752][T18127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.324456][T18127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.341005][T18309] syzkaller0: entered promiscuous mode [ 433.350465][T18309] syzkaller0: entered allmulticast mode [ 433.360636][T18127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.466528][T18314] syzkaller1: entered promiscuous mode [ 433.472221][T18314] syzkaller1: entered allmulticast mode [ 433.492408][T18317] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3304'. [ 433.515745][T18317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3304'. [ 433.619499][T18127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.658417][T18127] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.676788][T12510] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.684063][T12510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.706359][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.713765][T12513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.738153][ T5831] Bluetooth: hci0: command tx timeout [ 434.033644][T18342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.075927][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.101691][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.114668][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.130388][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.141158][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.155487][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.165932][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.177515][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.187426][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.198403][T18344] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 434.222920][T18127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.478423][T18359] __nla_validate_parse: 6 callbacks suppressed [ 434.478445][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'. [ 434.505129][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'. [ 434.736358][T18127] veth0_vlan: entered promiscuous mode [ 434.756355][T18127] veth1_vlan: entered promiscuous mode [ 434.778122][T18371] netlink: 'syz.2.3318': attribute type 10 has an invalid length. [ 434.809993][T18371] team0 (unregistering): Port device team_slave_0 removed [ 434.833785][T18371] team0 (unregistering): Port device team_slave_1 removed [ 434.868801][T18127] veth0_macvtap: entered promiscuous mode [ 434.908943][T18127] veth1_macvtap: entered promiscuous mode [ 434.958372][T18127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.000435][T18127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.027333][T12513] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.048224][T12513] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.060313][T12513] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.071700][T18384] tipc: Started in network mode [ 435.077913][T18384] tipc: Node identity 4, cluster identity 4711 [ 435.084109][T18384] tipc: Node number set to 4 [ 435.092656][T12513] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.191454][T12537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.207786][T12537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.240767][T12510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.250717][T12510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.340553][T18391] tipc: Started in network mode [ 435.345931][T18391] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 435.356512][T18391] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 435.367058][T18391] tipc: Enabled bearer , priority 10 [ 435.379244][T18391] tipc: Enabling of bearer rejected, already enabled [ 435.804967][ T5831] Bluetooth: hci0: command tx timeout [ 436.076165][T18417] bond0: Unable to set down delay as MII monitoring is disabled [ 436.088248][T18417] bond0 (unregistering): Released all slaves [ 436.170503][T18422] bond0: Unable to set down delay as MII monitoring is disabled [ 436.191133][T18422] bond0 (unregistering): Released all slaves [ 436.484483][T15564] tipc: Node number set to 1 [ 436.491901][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 436.963319][T18480] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.3349'. [ 436.978582][T18484] netlink: 'syz.1.3350': attribute type 24 has an invalid length. [ 436.997115][T18487] netlink: 'syz.1.3350': attribute type 24 has an invalid length. [ 437.200689][T18502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3354'. [ 437.286568][T18505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3353'. [ 437.397686][T18509] netlink: 'syz.0.3355': attribute type 2 has an invalid length. [ 437.520347][T18511] syzkaller0: entered promiscuous mode [ 437.527896][T18511] syzkaller0: entered allmulticast mode [ 437.794187][T18521] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3359'. [ 438.056254][T18534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3364'. [ 438.071630][T18530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3363'. [ 438.084084][T18534] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3364'. [ 438.299596][T18541] tap0: tun_chr_ioctl cmd 1074025678 [ 438.313437][T18541] tap0: group set to 0 [ 438.363668][T18550] netlink: 'syz.2.3370': attribute type 12 has an invalid length. [ 438.373344][T18550] netlink: 'syz.2.3370': attribute type 29 has an invalid length. [ 438.801319][T18577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.426988][T18599] netlink: 'syz.4.3387': attribute type 33 has an invalid length. [ 439.579364][T18614] sit0: entered promiscuous mode [ 439.600604][T18608] __nla_validate_parse: 7 callbacks suppressed [ 439.600625][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 439.617625][T18614] netlink: 'syz.3.3392': attribute type 1 has an invalid length. [ 439.627741][T18614] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3392'. [ 439.654631][T18608] netlink: 'syz.1.3390': attribute type 13 has an invalid length. [ 439.860920][T18623] ipvlan0: mtu less than device minimum [ 439.903155][T18631] syzkaller1: entered promiscuous mode [ 439.914842][T18631] syzkaller1: entered allmulticast mode [ 439.930755][T18635] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3396'. [ 440.218518][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.232433][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.326560][T18656] erspan0: entered promiscuous mode [ 440.334705][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 440.349271][T18653] bond2: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.387815][T18653] bond2: (slave C): Enslaving as an active interface with an up link [ 440.403942][T18663] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 440.417501][T18653] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 440.462020][T18651] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 440.499353][T18663] veth0_macvtap: left promiscuous mode [ 440.550030][T18669] netlink: 'syz.4.3406': attribute type 2 has an invalid length. [ 440.583470][T18669] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3406'. [ 440.986165][T18706] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3414'. [ 441.372626][T18731] IPv4: Oversized IP packet from 172.20.20.10 [ 441.387907][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 441.395648][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 441.463251][T18724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.480016][T18739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3424'. [ 441.519134][T18738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3424'. [ 441.681358][T18744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3426'. [ 441.803714][T18755] netlink: zone id is out of range [ 441.814269][T18753] netlink: zone id is out of range [ 441.925665][T18760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3431'. [ 441.954224][T18764] wireguard0: entered promiscuous mode [ 441.960238][T18764] wireguard0: entered allmulticast mode [ 441.979079][T18764] team0: Device wireguard0 is of different type [ 442.117717][T18777] validate_nla: 2 callbacks suppressed [ 442.117737][T18777] netlink: 'syz.2.3437': attribute type 5 has an invalid length. [ 442.208523][T18784] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 442.246699][T18786] netlink: 'syz.0.3438': attribute type 1 has an invalid length. [ 442.361104][T18786] bond1: entered promiscuous mode [ 442.370675][T18786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.420400][T18792] bond1: (slave bridge1): making interface the new active one [ 442.454262][T18792] bridge1: entered promiscuous mode [ 442.500611][T18792] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 442.553275][T18786] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 442.620661][T18805] macvlan2: entered promiscuous mode [ 442.627631][T18805] macvlan2: entered allmulticast mode [ 442.635682][T18805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 442.801053][T18825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.841155][T18830] IPv6: Can't replace route, no match found [ 443.132509][T18849] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 443.148933][T18849] bond3 (unregistering): Released all slaves [ 443.349909][T18859] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 443.374747][T18859] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 443.464967][T18866] Bluetooth: MGMT ver 1.23 [ 443.946727][T18866] bond2 (unregistering): Released all slaves [ 444.009781][T18876] tc_dump_action: action bad kind [ 444.184919][T18881] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 444.264415][T18889] netlink: 'syz.1.3467': attribute type 39 has an invalid length. [ 444.586415][T18895] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 444.632779][T18898] xt_hashlimit: size too large, truncated to 1048576 [ 444.888878][T18924] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 445.032817][T18933] tipc: Enabled bearer , priority 0 [ 445.033090][T18934] __nla_validate_parse: 6 callbacks suppressed [ 445.033105][T18934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3478'. [ 445.080648][T18934] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3478'. [ 445.095740][T18936] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3481'. [ 445.114871][T18938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'. [ 445.136324][T18933] syzkaller0: entered promiscuous mode [ 445.141992][T18933] syzkaller0: entered allmulticast mode [ 445.151375][T18933] tipc: Resetting bearer [ 445.205434][T18934] veth7: entered promiscuous mode [ 445.871249][T12536] tipc: Resetting bearer [ 445.906265][T18927] gre1: entered promiscuous mode [ 445.913964][T18927] gre1: entered allmulticast mode [ 445.934679][T18931] tipc: Resetting bearer [ 447.918430][T18931] tipc: Disabling bearer [ 447.929122][T15563] tipc: Node number set to 3885782798 [ 448.305919][T18996] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3496'. [ 448.618904][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 448.799112][T19024] net_ratelimit: 2 callbacks suppressed [ 448.799132][T19024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.300587][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'. [ 449.394168][T19067] netlink: 'syz.3.3517': attribute type 23 has an invalid length. [ 449.575265][T19081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.600593][T19075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3519'. [ 449.610118][T19075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3519'. [ 449.624262][T19081] erspan0: left promiscuous mode [ 449.631872][T19075] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3519'. [ 449.649362][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.657756][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.695539][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.701023][T19088] syzkaller0: entered promiscuous mode [ 449.709451][T19088] syzkaller0: entered allmulticast mode [ 449.965964][T19096] netlink: 'syz.0.3528': attribute type 33 has an invalid length. [ 449.993774][T19096] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 450.229593][T19111] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 450.262299][T19111] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 450.316383][T19081] infiniband syz2: set down [ 450.321059][T15562] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.332818][T19116] netlink: 'syz.0.3534': attribute type 2 has an invalid length. [ 450.341605][T19081] infiniband syz2: added ip6_vti0 [ 450.352057][T19116] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 450.528517][T19081] RDS/IB: syz2: added [ 450.541589][T19081] smc: adding ib device syz2 with port count 1 [ 450.551538][T19122] sctp: [Deprecated]: syz.3.3537 (pid 19122) Use of int in max_burst socket option. [ 450.551538][T19122] Use struct sctp_assoc_value instead [ 450.575459][T19081] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 450.589162][T15562] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.603035][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.895921][T19135] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 450.937710][T19135] bond3 (unregistering): Released all slaves [ 451.069739][T19140] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 451.105025][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.144698][T19146] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.177403][T19149] xt_nat: multiple ranges no longer supported [ 451.612596][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.660868][T19151] __nla_validate_parse: 4 callbacks suppressed [ 451.660889][T19151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3546'. [ 452.383653][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.404137][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.411577][T19184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.421463][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.695689][T19210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3561'. [ 452.776388][T19216] netlink: 'syz.1.3559': attribute type 9 has an invalid length. [ 452.974615][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.229672][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 453.246417][T19234] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3567'. [ 453.283335][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 453.322918][T19238] netlink: 'syz.1.3567': attribute type 21 has an invalid length. [ 453.348866][T19238] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3567'. [ 453.557792][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'. [ 453.573739][T19252] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3572'. [ 453.595843][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3570'. [ 453.674883][T19249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.682342][T19249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.736582][T19249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.753669][T19249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.766972][T19259] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3572'. [ 453.815694][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 454.899660][T19316] netlink: 'syz.1.3582': attribute type 3 has an invalid length. [ 454.948678][T19316] netlink: 'syz.1.3582': attribute type 3 has an invalid length. [ 454.969324][T19081] ip6_vti0 speed is unknown, defaulting to 1000 [ 457.837294][T19329] __nla_validate_parse: 1 callbacks suppressed [ 457.837319][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3584'. [ 457.865791][T19330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3584'. [ 457.930371][T19326] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.014955][T19351] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3591'. [ 458.151196][T19360] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 458.170143][T19360] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3595'. [ 458.258963][T19365] netlink: 'syz.0.3596': attribute type 2 has an invalid length. [ 458.289628][ T29] audit: type=1800 audit(1771365341.996:8): pid=19360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3595" name="memory.events" dev="tmpfs" ino=493 res=0 errno=0 [ 458.336698][T19371] FAULT_INJECTION: forcing a failure. [ 458.336698][T19371] name failslab, interval 1, probability 0, space 0, times 0 [ 458.357926][T19364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3596'. [ 458.372095][T19371] CPU: 1 UID: 0 PID: 19371 Comm: syz.4.3598 Not tainted syzkaller #0 PREEMPT(full) [ 458.372123][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.372134][T19371] Call Trace: [ 458.372143][T19371] [ 458.372152][T19371] dump_stack_lvl+0xe8/0x150 [ 458.372184][T19371] should_fail_ex+0x412/0x560 [ 458.372218][T19371] should_failslab+0xa8/0x100 [ 458.372246][T19371] __kmalloc_noprof+0xe8/0x760 [ 458.372271][T19371] ? tomoyo_encode+0x28b/0x550 [ 458.372304][T19371] tomoyo_encode+0x28b/0x550 [ 458.372336][T19371] tomoyo_realpath_from_path+0x58d/0x5d0 [ 458.372367][T19371] ? tomoyo_domain+0xd7/0x130 [ 458.372391][T19371] ? tomoyo_path_number_perm+0x219/0x630 [ 458.372415][T19371] tomoyo_path_number_perm+0x246/0x630 [ 458.372443][T19371] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.372466][T19371] ? __lock_acquire+0x6b5/0x2cf0 [ 458.372504][T19371] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 458.372554][T19371] ? __fget_files+0x2a/0x420 [ 458.372576][T19371] ? __fget_files+0x2a/0x420 [ 458.372592][T19371] ? __fget_files+0x3a0/0x420 [ 458.372609][T19371] ? __fget_files+0x2a/0x420 [ 458.372632][T19371] security_file_ioctl+0xc3/0x2a0 [ 458.372659][T19371] __se_sys_ioctl+0x47/0x170 [ 458.372687][T19371] do_syscall_64+0x14d/0xf80 [ 458.372713][T19371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.372731][T19371] ? trace_irq_disable+0x37/0x100 [ 458.372753][T19371] ? clear_bhb_loop+0x40/0x90 [ 458.372775][T19371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.372792][T19371] RIP: 0033:0x7f57a1d9c629 [ 458.372810][T19371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.372827][T19371] RSP: 002b:00007f57a2c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.372848][T19371] RAX: ffffffffffffffda RBX: 00007f57a2015fa0 RCX: 00007f57a1d9c629 [ 458.372862][T19371] RDX: 0000200000000180 RSI: 0000000000008953 RDI: 0000000000000004 [ 458.372875][T19371] RBP: 00007f57a2c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 458.372887][T19371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.372898][T19371] R13: 00007f57a2016038 R14: 00007f57a2015fa0 R15: 00007ffda439ab88 [ 458.372932][T19371] [ 458.372956][T19371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.679775][T19380] tunl0: entered promiscuous mode [ 458.704285][T19380] netlink: 'syz.2.3600': attribute type 3 has an invalid length. [ 458.713572][T19380] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3600'. [ 458.725042][T19382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.781898][T19385] netlink: 'syz.4.3602': attribute type 9 has an invalid length. [ 458.895251][T19390] openvswitch: netlink: EtherType 50a is less than min 600 [ 458.930517][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3602'. [ 458.954928][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3602'. [ 459.018207][T19395] netlink: 'syz.0.3605': attribute type 11 has an invalid length. [ 459.047726][T19395] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3605'. [ 459.267579][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.275519][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.559948][T19413] bridge0: entered allmulticast mode [ 459.601269][T12537] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.652801][T12537] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.705026][T12537] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.706126][T19428] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3612'. [ 459.714049][T12537] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.714104][T12537] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.750339][T12537] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.762074][T12536] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.774068][T12536] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.589276][T19468] vlan2: entered allmulticast mode [ 460.871609][T19478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.900217][T19478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.040956][T19478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.051741][T19478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.150810][T19478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.162089][T19478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.245244][T15564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.309203][T19478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.326284][T19478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.446916][T12513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.456423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.559382][T12537] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.596491][T12537] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.615033][T12537] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.624628][T12537] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.653928][T12537] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.676201][T12537] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.711280][T12537] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.728180][T12537] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.728800][T19532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.992363][T19550] netlink: 'syz.1.3652': attribute type 15 has an invalid length. [ 462.057227][T19556] xt_addrtype: ipv6 does not support BROADCAST matching [ 462.170885][T19553] bond2: entered promiscuous mode [ 462.206674][T19553] bond2: entered allmulticast mode [ 462.212354][T19553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.366854][T19553] bond3: entered promiscuous mode [ 462.372193][T19553] bond3: entered allmulticast mode [ 462.378341][T19553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.411931][T19553] bond4: entered promiscuous mode [ 462.418319][T19553] bond4: entered allmulticast mode [ 462.429136][T19553] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.533888][T19577] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 462.606406][T19553] bond5: entered promiscuous mode [ 462.624763][T19553] bond5: entered allmulticast mode [ 462.630599][T19553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 462.678666][T19553] bond6: entered promiscuous mode [ 462.684074][T19553] bond6: entered allmulticast mode [ 462.693964][T19553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.736747][T19553] bond7: entered promiscuous mode [ 462.741936][T19553] bond7: entered allmulticast mode [ 462.748794][T19553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 462.793490][T19553] bond8: entered promiscuous mode [ 462.800355][T19553] bond8: entered allmulticast mode [ 462.806036][T19553] 8021q: adding VLAN 0 to HW filter on device bond8 [ 462.845973][T19553] bond9: entered promiscuous mode [ 462.851083][T19553] bond9: entered allmulticast mode [ 462.856878][T19553] 8021q: adding VLAN 0 to HW filter on device bond9 [ 463.075254][T19621] syzkaller0: entered promiscuous mode [ 463.106474][T19621] syzkaller0: entered allmulticast mode [ 463.442071][T19640] __nla_validate_parse: 7 callbacks suppressed [ 463.442093][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'. [ 463.470323][T19640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.530640][T19640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.968798][T19676] netlink: 'syz.4.3679': attribute type 3 has an invalid length. [ 463.993409][T19677] netlink: 'syz.4.3679': attribute type 3 has an invalid length. [ 464.061252][T19681] veth1_macvtap: left promiscuous mode [ 464.382426][T19692] vcan0: tx drop: invalid da for name 0x0000000000000082 [ 464.394219][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 464.606797][T19699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3685'. [ 464.676957][T19701] netlink: 'syz.4.3686': attribute type 1 has an invalid length. [ 465.178496][ T5143] Bluetooth: hci0: command 0x0405 tx timeout [ 465.678199][T19767] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.708581][T19771] netlink: 'syz.3.3702': attribute type 10 has an invalid length. [ 465.709511][T19767] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.799209][T19771] veth0_macvtap: left promiscuous mode [ 465.880737][T19767] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.913406][T19767] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.024721][T19767] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.040524][T19767] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.229611][T19790] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 466.238571][ T5903] IPVS: starting estimator thread 0... [ 466.266082][T19767] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.273023][T19790] syz.1.3705: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 466.291223][T19767] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.299791][T19790] ,cpuset=/,mems_allowed=0-1 [ 466.354434][T19802] IPVS: using max 36 ests per chain, 86400 per kthread [ 466.392474][T19790] CPU: 1 UID: 0 PID: 19790 Comm: syz.1.3705 Not tainted syzkaller #0 PREEMPT(full) [ 466.392505][T19790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.392517][T19790] Call Trace: [ 466.392525][T19790] [ 466.392534][T19790] dump_stack_lvl+0xe8/0x150 [ 466.392568][T19790] warn_alloc+0x249/0x340 [ 466.392597][T19790] ? stack_trace_save+0xa9/0x100 [ 466.392628][T19790] ? __pfx_warn_alloc+0x10/0x10 [ 466.392662][T19790] ? kasan_save_track+0x4f/0x80 [ 466.392686][T19790] ? kasan_save_track+0x3e/0x80 [ 466.392718][T19790] ? __kasan_kmalloc+0x93/0xb0 [ 466.392740][T19790] ? __kmalloc_cache_noprof+0x31c/0x660 [ 466.392762][T19790] ? xskq_create+0x56/0x170 [ 466.392782][T19790] ? xsk_setsockopt+0x54c/0x990 [ 466.392801][T19790] ? do_sock_setsockopt+0x17c/0x1b0 [ 466.392823][T19790] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 466.392843][T19790] ? do_syscall_64+0x14d/0xf80 [ 466.392873][T19790] __vmalloc_node_range_noprof+0x132/0x1730 [ 466.392935][T19790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 466.392967][T19790] ? __kasan_kmalloc+0x93/0xb0 [ 466.392998][T19790] vmalloc_user_noprof+0xad/0xe0 [ 466.393024][T19790] ? xskq_create+0xbf/0x170 [ 466.393048][T19790] xskq_create+0xbf/0x170 [ 466.393075][T19790] xsk_init_queue+0xad/0x110 [ 466.393101][T19790] xsk_setsockopt+0x54c/0x990 [ 466.393125][T19790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 466.393144][T19790] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.393173][T19790] ? aa_sock_opt_perm+0xff/0x1a0 [ 466.393202][T19790] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 466.393225][T19790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 466.393248][T19790] do_sock_setsockopt+0x17c/0x1b0 [ 466.393277][T19790] __x64_sys_setsockopt+0x13d/0x1b0 [ 466.393307][T19790] do_syscall_64+0x14d/0xf80 [ 466.393331][T19790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.393348][T19790] ? trace_irq_disable+0x37/0x100 [ 466.393368][T19790] ? clear_bhb_loop+0x40/0x90 [ 466.393390][T19790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.393407][T19790] RIP: 0033:0x7f0d4bb9c629 [ 466.393426][T19790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.393442][T19790] RSP: 002b:00007f0d4cafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 466.393466][T19790] RAX: ffffffffffffffda RBX: 00007f0d4be15fa0 RCX: 00007f0d4bb9c629 [ 466.393481][T19790] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 466.393494][T19790] RBP: 00007f0d4bc32b39 R08: 0000000000000004 R09: 0000000000000000 [ 466.393505][T19790] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.393518][T19790] R13: 00007f0d4be16038 R14: 00007f0d4be15fa0 R15: 00007ffec33c11a8 [ 466.393552][T19790] [ 466.393561][T19790] Mem-Info: [ 466.511855][T19813] netlink: 'syz.3.3709': attribute type 39 has an invalid length. [ 466.515084][T19790] active_anon:5976 inactive_anon:0 isolated_anon:0 [ 466.515084][T19790] active_file:3272 inactive_file:40074 isolated_file:0 [ 466.515084][T19790] unevictable:768 dirty:61 writeback:0 [ 466.515084][T19790] slab_reclaimable:12255 slab_unreclaimable:116951 [ 466.515084][T19790] mapped:29591 shmem:1361 pagetables:1239 [ 466.515084][T19790] sec_pagetables:0 bounce:0 [ 466.515084][T19790] kernel_misc_reclaimable:0 [ 466.515084][T19790] free:1311448 free_pcp:7503 free_cma:0 [ 466.745408][T19790] Node 0 active_anon:24104kB inactive_anon:0kB active_file:13088kB inactive_file:160092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118364kB dirty:244kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14952kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 466.805227][T19790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 466.836850][T19790] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.869806][T19790] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 466.875825][T19790] Node 0 DMA32 free:1281416kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24104kB inactive_anon:0kB active_file:13088kB inactive_file:160092kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2554008kB mlocked:0kB bounce:0kB free_pcp:29484kB local_pcp:13480kB free_cma:0kB [ 466.910774][T19790] lowmem_reserve[]: 0 0 0 0 0 [ 466.946041][T19790] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:920kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 467.027982][T19790] lowmem_reserve[]: 0 0 0 0 0 [ 467.038144][T19790] Node 1 Normal free:3949016kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:0kB free_cma:0kB [ 467.135115][T12530] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.137562][T19790] lowmem_reserve[]: 0 0 0 0 0 [ 467.143788][T12530] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.158245][T19790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 467.180206][T12530] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.195783][T12530] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.204989][T19790] Node 0 DMA32: 4824*4kB (UM) 5049*8kB (UME) 458*16kB (UME) 722*32kB (UME) 790*64kB (UME) 430*128kB (UME) 232*256kB (UME) 149*512kB (UME) 90*1024kB (UME) 37*2048kB (UM) 191*4096kB (UM) = 1281672kB [ 467.227770][T19790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 467.240997][T19790] Node 1 Normal: 0*4kB 1*8kB (M) 7*16kB (ME) 3*32kB (ME) 6*64kB (UME) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 961*4096kB (M) = 3949016kB [ 467.279367][T19832] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 467.280166][T19790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.311093][T19790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.327658][T19790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 467.340562][T19790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 467.351356][T19790] 44702 total pagecache pages [ 467.357001][T19790] 0 pages in swap cache [ 467.361192][T19790] Free swap = 124996kB [ 467.366366][T19790] Total swap = 124996kB [ 467.370900][T19790] 2097051 pages RAM [ 467.374905][T19790] 0 pages HighMem/MovableOnly [ 467.381859][T19790] 426704 pages reserved [ 467.386520][T19790] 0 pages cma reserved [ 469.112806][T12536] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.122156][T12536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.178125][T12514] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.204528][T12514] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.243974][T19858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.285412][T19858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.579104][T19876] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 469.605108][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3727'. [ 469.785803][T19885] veth5: entered allmulticast mode [ 469.809420][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'. [ 469.985160][T19904] netlink: 464 bytes leftover after parsing attributes in process `syz.3.3737'. [ 469.997092][T19885] team0: Port device team_slave_0 removed [ 470.274726][T19916] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.345111][T19923] netlink: 'syz.3.3742': attribute type 2 has an invalid length. [ 470.354134][T19923] netlink: 'syz.3.3742': attribute type 1 has an invalid length. [ 470.399377][T19926] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 470.414757][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3743'. [ 470.558178][T19929] syzkaller0: entered promiscuous mode [ 470.563737][T19929] syzkaller0: entered allmulticast mode [ 470.625021][T19929] tipc: Enabled bearer , priority 0 [ 470.644965][T19928] tipc: Resetting bearer [ 470.645210][T19938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3746'. [ 470.686999][T19941] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3749'. [ 470.717519][T19928] tipc: Disabling bearer [ 470.922655][T19956] netlink: 'syz.2.3752': attribute type 11 has an invalid length. [ 471.013197][T19955] netlink: 'syz.4.3753': attribute type 3 has an invalid length. [ 471.015525][T19956] netlink: 'syz.2.3752': attribute type 11 has an invalid length. [ 471.030531][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'. [ 471.062863][T19963] syzkaller1: entered promiscuous mode [ 471.112968][T19963] syzkaller1: entered allmulticast mode [ 471.133606][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 471.319211][T19968] tipc: Started in network mode [ 471.324247][T19968] tipc: Node identity 1656062546b1, cluster identity 4711 [ 471.334835][T19969] netlink: 'syz.2.3755': attribute type 26 has an invalid length. [ 471.342782][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 471.358502][T19968] tipc: Enabled bearer , priority 0 [ 471.367564][T19977] syzkaller0: MTU too low for tipc bearer [ 471.385826][T19977] tipc: Disabling bearer [ 471.465840][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3756'. [ 471.476781][T19968] block nbd2: Unsupported socket: should be TCP or UNIX. [ 471.483740][T19982] netlink: 'syz.0.3758': attribute type 21 has an invalid length. [ 471.832457][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.862000][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.879869][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.904970][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.956310][T19997] geneve2: entered promiscuous mode [ 471.967899][T19997] geneve2: entered allmulticast mode [ 472.077219][T20007] netlink: zone id is out of range [ 472.091596][T20007] netlink: zone id is out of range [ 472.121810][T20006] netlink: set zone limit has 4 unknown bytes [ 472.240625][T20019] netlink: 'syz.0.3769': attribute type 4 has an invalid length. [ 472.507589][T20029] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 472.526384][T20029] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 472.534593][T20029] gretap3: entered promiscuous mode [ 472.539921][T20029] gretap3: entered allmulticast mode [ 472.583110][T20035] netlink: 'syz.0.3775': attribute type 5 has an invalid length. [ 472.681574][T20039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.695590][T20042] veth0_virt_wifi: entered promiscuous mode [ 472.732238][T20045] netlink: 'syz.0.3778': attribute type 11 has an invalid length. [ 472.756912][T20046] netlink: 'syz.0.3778': attribute type 1 has an invalid length. [ 472.769799][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.886129][T20050] netlink: 'syz.2.3779': attribute type 4 has an invalid length. [ 472.894063][T20050] netlink: 'syz.2.3779': attribute type 1 has an invalid length. [ 472.905087][T20050] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.980593][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.991299][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.012814][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.030903][T20063] netlink: 'syz.1.3784': attribute type 39 has an invalid length. [ 473.049381][T20055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 473.058697][T20055] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 473.070246][T20055] team0: Failed to send options change via netlink (err -105) [ 473.090448][T20055] team0: Port device batadv1 added [ 473.500992][T20095] netlink: 'syz.3.3792': attribute type 6 has an invalid length. [ 473.543010][T20097] netlink: 'syz.2.3793': attribute type 1 has an invalid length. [ 473.657622][T20100] IPVS: ip_vs_edit_dest(): server weight less than zero [ 473.751070][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.763870][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.810916][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.853749][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.672555][T20142] __nla_validate_parse: 24 callbacks suppressed [ 474.672576][T20142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3808'. [ 474.729815][T20146] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3808'. [ 474.892979][T20154] netlink: 'syz.4.3810': attribute type 1 has an invalid length. [ 475.508713][T20172] ipvlan0: entered promiscuous mode [ 475.559278][T20178] ipvlan1: entered promiscuous mode [ 475.769601][T20195] bond4: option miimon: invalid value (18446744073709551585) [ 475.780431][T20195] bond4: option miimon: allowed values 0 - 2147483647 [ 475.839610][T20195] bond4 (unregistering): Released all slaves [ 475.995571][T20204] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3823'. [ 476.019682][T20204] Cannot find del_set index 1 as target [ 476.170367][T20209] gretap0: entered promiscuous mode [ 477.117062][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'. [ 477.250052][T20273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.318388][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3848'. [ 477.375082][T20285] tipc: New replicast peer: 255.255.255.255 [ 477.393899][T20285] tipc: Enabled bearer , priority 10 [ 477.495302][T20293] xt_TCPMSS: Only works on TCP SYN packets [ 477.570223][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'. [ 477.628805][T20299] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 477.667760][T20299] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3853'. [ 477.695675][T20304] netlink: 'syz.4.3855': attribute type 1 has an invalid length. [ 478.015919][T20327] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.251075][T20343] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 478.332856][T20345] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3867'. [ 478.400809][T20351] tipc: Enabled bearer , priority 0 [ 478.556725][T20351] tipc: Disabling bearer [ 478.939071][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 479.109923][T20383] bond4: Invalid ad_actor_system MAC address. [ 479.123865][T20383] bond4: option ad_actor_system: invalid value (1) [ 479.141550][T20383] bond4 (unregistering): Released all slaves [ 479.233974][T20384] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.696337][T20425] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3886'. [ 480.292347][T20432] ipt_REJECT: TCP_RESET invalid for non-tcp [ 480.492289][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 480.738230][T20450] tipc: Started in network mode [ 480.743356][T20450] tipc: Node identity , cluster identity 4711 [ 480.768212][T20450] tipc: Failed to set node id, please configure manually [ 480.775945][T20450] tipc: Enabling of bearer rejected, failed to enable media [ 480.800123][T20450] block nbd2: not configured, cannot reconfigure [ 481.002711][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3896'. [ 481.135499][T20464] x_tables: duplicate underflow at hook 1 [ 481.146073][T20464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.157003][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 481.166461][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 481.347419][T20473] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 481.366274][T20473] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 481.375267][T20473] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.3903'. [ 481.637308][T20494] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3910'. [ 481.664177][T20493] ieee802154 phy0 wpan0: encryption failed: -126 [ 481.685468][T20494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3910'. [ 481.768181][T20502] netlink: 'syz.3.3914': attribute type 2 has an invalid length. [ 481.821226][T20502] : entered promiscuous mode [ 482.031585][T20518] netlink: 'syz.4.3919': attribute type 7 has an invalid length. [ 482.079070][T20518] netlink: 'syz.4.3919': attribute type 8 has an invalid length. [ 482.120362][T20518] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3919'. [ 482.331178][T20535] syzkaller0: entered promiscuous mode [ 482.341683][T20535] syzkaller0: entered allmulticast mode [ 482.489591][T20551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3930'. [ 482.837471][T20569] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 482.868605][T20569] gretap2: entered promiscuous mode [ 482.884191][T20569] gretap2: entered allmulticast mode [ 483.394135][T15563] IPVS: starting estimator thread 0... [ 483.485300][T20597] IPVS: using max 30 ests per chain, 72000 per kthread [ 483.532468][ T5903] IPVS: starting estimator thread 0... [ 483.568169][T20601] vlan2: entered allmulticast mode [ 483.650997][T20604] IPVS: using max 28 ests per chain, 67200 per kthread [ 484.168797][T20634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.280632][T20640] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 484.362395][T20640] bond4: entered promiscuous mode [ 484.369126][T20640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.393387][T20642] bond4: (slave bridge29): making interface the new active one [ 484.406029][T20642] bridge29: entered promiscuous mode [ 484.413014][T20642] bond4: (slave bridge29): Enslaving as an active interface with an up link [ 484.430667][T20648] gtp0: entered promiscuous mode [ 484.449395][T20648] gtp0: entered allmulticast mode [ 484.464065][T20648] gtp1: entered promiscuous mode [ 484.469204][T20648] gtp1: entered allmulticast mode [ 484.507157][T20648] gtp2: entered promiscuous mode [ 484.512266][T20648] gtp2: entered allmulticast mode [ 484.538737][T20648] gtp3: entered promiscuous mode [ 484.543854][T20648] gtp3: entered allmulticast mode [ 484.566800][T20656] syzkaller0: entered promiscuous mode [ 484.579884][T20656] syzkaller0: entered allmulticast mode [ 484.598607][T20648] gtp4: entered promiscuous mode [ 484.603878][T20648] gtp4: entered allmulticast mode [ 484.628092][T20648] gtp5: entered promiscuous mode [ 484.633099][T20648] gtp5: entered allmulticast mode [ 484.635001][T20665] xt_socket: unknown flags 0x50 [ 484.680199][T20648] gtp6: entered promiscuous mode [ 484.686575][T20648] gtp6: entered allmulticast mode [ 484.851781][T20648] gtp7: entered promiscuous mode [ 484.857072][T20648] gtp7: entered allmulticast mode [ 484.897668][T20648] gtp8: entered promiscuous mode [ 484.903070][T20648] gtp8: entered allmulticast mode [ 484.930053][T20648] gtp9: entered promiscuous mode [ 484.936788][T20648] gtp9: entered allmulticast mode [ 484.967047][T20648] gtp10: entered promiscuous mode [ 484.978370][T20648] gtp10: entered allmulticast mode [ 485.017696][T20648] gtp11: entered promiscuous mode [ 485.043316][T20648] gtp11: entered allmulticast mode [ 485.099710][T20675] bond5: entered promiscuous mode [ 485.105194][T20684] __nla_validate_parse: 13 callbacks suppressed [ 485.105213][T20684] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3972'. [ 485.105220][T20675] bond5: entered allmulticast mode [ 485.112184][T20675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 485.146309][T20648] gtp12: entered promiscuous mode [ 485.151576][T20648] gtp12: entered allmulticast mode [ 485.174090][T20648] gtp13: entered promiscuous mode [ 485.179614][T20648] gtp13: entered allmulticast mode [ 485.456321][T20703] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3976'. [ 485.496055][T20699] bond10 (unregistering): Released all slaves [ 485.648524][T20699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3975'. [ 485.677760][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3975'. [ 485.854158][T20734] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3982'. [ 486.368195][T20775] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3992'. [ 486.568436][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3996'. [ 486.800570][T20787] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 486.858664][T20789] netlink: 'syz.4.3999': attribute type 1 has an invalid length. [ 486.866657][T20789] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3999'. [ 487.330212][T20803] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 487.534088][T20814] netlink: 'syz.1.4006': attribute type 1 has an invalid length. [ 487.546914][T20814] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4006'. [ 487.634666][T20816] netlink: 'syz.0.4008': attribute type 1 has an invalid length. [ 488.143522][T20852] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4017'. [ 488.220906][T20852] : entered promiscuous mode [ 488.388111][T20868] netlink: 'syz.1.4023': attribute type 39 has an invalid length. [ 488.545086][T20872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.577513][T20872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.598305][T20872] bond0 (unregistering): Released all slaves [ 488.666031][T20876] vlan2: entered promiscuous mode [ 488.675335][T20876] geneve1: entered promiscuous mode [ 488.694892][T20876] vlan2: entered allmulticast mode [ 488.719535][T20876] geneve1: entered allmulticast mode [ 488.988441][T20889] syzkaller0: entered promiscuous mode [ 488.994172][T20889] syzkaller0: entered allmulticast mode [ 489.172508][T20913] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 489.617066][T20920] xt_ecn: cannot match TCP bits for non-tcp packets [ 491.048279][T20932] __nla_validate_parse: 7 callbacks suppressed [ 491.048299][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4042'. [ 491.124637][T20936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4045'. [ 491.228690][T20941] sctp: [Deprecated]: syz.0.4046 (pid 20941) Use of int in max_burst socket option. [ 491.228690][T20941] Use struct sctp_assoc_value instead [ 491.246015][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4047'. [ 491.261920][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4047'. [ 491.352755][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 491.427179][T20957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.472653][T20957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.567330][T20966] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 491.567430][T20961] netlink: 'syz.0.4055': attribute type 1 has an invalid length. [ 491.614447][T20971] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 491.686608][T20972] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.697068][T20972] bond4: (slave bond5): making interface the new active one [ 491.706145][T20972] bond4: (slave bond5): Enslaving as an active interface with an up link [ 491.737434][T20972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4055'. [ 491.775524][T20978] bond6: (slave geneve2): making interface the new active one [ 491.783926][T20978] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 491.806013][T20972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.817689][T12537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 491.830131][T12537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 491.840244][T20971] netlink: 'syz.1.4053': attribute type 29 has an invalid length. [ 491.856070][T12537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 491.867405][T20971] netlink: 'syz.1.4053': attribute type 29 has an invalid length. [ 491.882656][T20971] netlink: 'syz.1.4053': attribute type 29 has an invalid length. [ 491.892928][T12537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 492.162392][T21003] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.510055][T20963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 494.691722][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4064'. [ 494.860324][T21029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4069'. [ 494.910542][T21029] erspan0: entered promiscuous mode [ 494.927731][T21029] macvtap1: entered promiscuous mode [ 494.933278][T21029] macvtap1: entered allmulticast mode [ 494.966199][T21036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4069'. [ 494.978489][T21029] erspan0: entered allmulticast mode [ 495.010686][T21029] erspan0: left allmulticast mode [ 495.016257][T21029] erspan0: left promiscuous mode [ 495.022860][T21037] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4071'. [ 495.062829][T21028] delete_channel: no stack [ 495.250991][T21051] openvswitch: netlink: IP tunnel dst address not specified [ 495.468635][T21063] syzkaller0: entered promiscuous mode [ 495.474830][T21063] syzkaller0: entered allmulticast mode [ 496.827297][T21120] netlink: 'syz.0.4097': attribute type 1 has an invalid length. [ 496.880426][T21120] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.146679][T21140] bond7: Removing last arp target with arp_interval on [ 497.352795][T21169] __nla_validate_parse: 5 callbacks suppressed [ 497.352814][T21169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4110'. [ 497.962485][T21197] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 498.205211][T21206] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4124'. [ 498.228151][T21206] netlink: 'syz.2.4124': attribute type 32 has an invalid length. [ 498.263105][T21206] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 498.275069][T21207] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 498.282930][T21207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 498.319801][T21206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 498.402289][T21206] dummy0: entered promiscuous mode [ 498.425378][T21196] infiniband : set down [ 498.427796][T21206] bridge0: port 3(dummy0) entered blocking state [ 498.429755][T21196] infiniband : added ipvlan0 [ 498.447149][T21206] bridge0: port 3(dummy0) entered disabled state [ 498.460623][T21206] dummy0: entered allmulticast mode [ 498.495849][T21196] RDS/IB: : added [ 498.499747][T21196] smc: adding ib device  with port count 1 [ 498.505788][T21196] smc: ib device  port 1 has no pnetid [ 498.606953][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 498.808259][T21228] syzkaller0: entered promiscuous mode [ 498.840980][T21228] syzkaller0: entered allmulticast mode [ 498.875477][T21234] tipc: Enabling of bearer rejected, failed to enable media [ 499.355386][T21258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4135'. [ 499.702202][T21267] netlink: 'syz.0.4138': attribute type 2 has an invalid length. [ 499.711001][T21267] netlink: 'syz.0.4138': attribute type 1 has an invalid length. [ 499.720869][T21268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4137'. [ 499.880990][T21272] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4140'. [ 499.891219][T21272] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 500.018241][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4141'. [ 500.170547][T21279] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4143'. [ 500.602837][T21298] syzkaller0: entered promiscuous mode [ 500.624077][T21298] syzkaller0: entered allmulticast mode [ 500.652347][T21298] netlink: 4120 bytes leftover after parsing attributes in process `syz.4.4148'. [ 500.678361][T21298] openvswitch: netlink: Flow key attr not present in new flow. [ 501.036414][T21320] netlink: 'syz.3.4155': attribute type 1 has an invalid length. [ 501.159775][T21322] gretap4: entered promiscuous mode [ 501.181289][T21322] bond0: (slave gretap4): making interface the new active one [ 501.195860][T21322] bond0: (slave gretap4): Enslaving as an active interface with an up link [ 501.321234][T21333] netlink: 'syz.0.4158': attribute type 178 has an invalid length. [ 501.426826][T21341] netlink: 'syz.2.4160': attribute type 39 has an invalid length. [ 501.648681][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.994192][T21356] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 502.478982][T21379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4168'. [ 502.489578][T21379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4168'. [ 502.557586][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4168'. [ 502.659771][T21387] ipvlan2: entered allmulticast mode [ 502.665730][T21387] batadv_slave_1: entered allmulticast mode [ 502.674848][T21387] batman_adv: batadv0: Adding interface: ipvlan2 [ 502.681534][T21387] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.712902][T21387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.756009][T21387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.779237][T21387] batman_adv: batadv0: Interface activated: ipvlan2 [ 502.796522][T21392] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4172'. [ 503.096588][T21414] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 503.265114][T21427] FAULT_INJECTION: forcing a failure. [ 503.265114][T21427] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 503.310401][T21427] CPU: 1 UID: 0 PID: 21427 Comm: syz.1.4183 Not tainted syzkaller #0 PREEMPT(full) [ 503.310431][T21427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.310444][T21427] Call Trace: [ 503.310452][T21427] [ 503.310461][T21427] dump_stack_lvl+0xe8/0x150 [ 503.310494][T21427] should_fail_ex+0x412/0x560 [ 503.310527][T21427] _copy_from_iter+0x1d3/0x1670 [ 503.310565][T21427] ? rcu_is_watching+0x15/0xb0 [ 503.310590][T21427] ? __pfx__copy_from_iter+0x10/0x10 [ 503.310628][T21427] ? netlink_sendmsg+0x650/0xb40 [ 503.310648][T21427] ? skb_put+0x11b/0x210 [ 503.310675][T21427] netlink_sendmsg+0x6c0/0xb40 [ 503.310715][T21427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.310740][T21427] ? aa_sock_msg_perm+0xf1/0x1b0 [ 503.310769][T21427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.310799][T21427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.310817][T21427] ____sys_sendmsg+0xa68/0xad0 [ 503.310842][T21427] ? __might_fault+0xaf/0x130 [ 503.310872][T21427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.310907][T21427] ? import_iovec+0x73/0xa0 [ 503.310931][T21427] ___sys_sendmsg+0x2a5/0x360 [ 503.310953][T21427] ? __lock_acquire+0x6b5/0x2cf0 [ 503.310978][T21427] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.311042][T21427] ? __fget_files+0x2a/0x420 [ 503.311061][T21427] ? __fget_files+0x3a0/0x420 [ 503.311092][T21427] __x64_sys_sendmsg+0x1bd/0x2a0 [ 503.311119][T21427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.311154][T21427] ? __pfx_ksys_write+0x10/0x10 [ 503.311191][T21427] do_syscall_64+0x14d/0xf80 [ 503.311217][T21427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.311235][T21427] ? trace_irq_disable+0x37/0x100 [ 503.311257][T21427] ? clear_bhb_loop+0x40/0x90 [ 503.311281][T21427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.311299][T21427] RIP: 0033:0x7f0d4bb9c629 [ 503.311319][T21427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.311335][T21427] RSP: 002b:00007f0d4cafd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.311358][T21427] RAX: ffffffffffffffda RBX: 00007f0d4be15fa0 RCX: 00007f0d4bb9c629 [ 503.311371][T21427] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 503.311384][T21427] RBP: 00007f0d4cafd090 R08: 0000000000000000 R09: 0000000000000000 [ 503.311401][T21427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.311413][T21427] R13: 00007f0d4be16038 R14: 00007f0d4be15fa0 R15: 00007ffec33c11a8 [ 503.311446][T21427] [ 503.739533][T21399] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 503.816147][T21447] syzkaller1: entered promiscuous mode [ 503.821683][T21447] syzkaller1: entered allmulticast mode [ 503.884222][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 503.894699][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 504.112122][T21459] netlink: 'syz.1.4193': attribute type 10 has an invalid length. [ 504.125554][T21459] veth1_macvtap: left promiscuous mode [ 504.136680][T21459] team0: Device veth1_macvtap failed to register rx_handler [ 504.168238][T21466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4193'. [ 504.219021][T21468] ip6t_srh: unknown srh invflags 4000 [ 504.342437][T21478] sctp: [Deprecated]: syz.1.4198 (pid 21478) Use of int in max_burst socket option. [ 504.342437][T21478] Use struct sctp_assoc_value instead [ 504.623150][T21489] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 504.966749][T21500] geneve3: entered promiscuous mode [ 504.976294][T12537] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 59082 - 0 [ 504.991833][T12537] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 59082 - 0 [ 504.999376][T21505] netlink: 'syz.1.4205': attribute type 4 has an invalid length. [ 505.012638][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 505.115153][T21501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.127316][T21501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.156640][T12537] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 59082 - 0 [ 505.262456][T21508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4207'. [ 505.307906][T21511] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 505.317997][T21511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4208'. [ 505.397629][T21515] tipc: Enabled bearer , priority 0 [ 505.478780][T21515] syzkaller0: entered promiscuous mode [ 505.485255][T21515] syzkaller0: entered allmulticast mode [ 505.491699][T21515] tipc: Resetting bearer [ 505.498051][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 505.508132][T21514] tipc: Resetting bearer [ 507.241561][T21514] tipc: Disabling bearer [ 507.620408][T21501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.632035][T21501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.643202][T21501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59082 - 0 [ 507.736349][T21501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.747403][T21501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.758988][T21501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59082 - 0 [ 507.837038][T21501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.847554][T21501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.858021][T21501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59082 - 0 [ 507.948128][T12537] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.957720][T12537] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 59082 - 0 [ 507.966249][T12537] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 507.985065][T12537] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.993358][T12537] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 59082 - 0 [ 508.002274][T12537] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 508.019356][T12527] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.028644][T12527] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 59082 - 0 [ 508.038508][T12527] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 508.057875][T12527] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.066800][T12527] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 59082 - 0 [ 508.075438][T12527] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 519.085048][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 534.444550][ T5831] Bluetooth: hci1: command 0x0419 tx timeout [ 541.802446][T21535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4215'. [ 542.063501][T21555] geneve2: entered promiscuous mode [ 542.080048][T21555] geneve2: entered allmulticast mode [ 542.092750][T12537] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.113918][T12537] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.143526][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 542.154159][T12537] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.175282][T12537] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 542.186372][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 542.551730][T21588] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4232'. [ 542.640937][T21586] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4214'. [ 542.920414][T21612] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 542.952109][T21612] vcan0: tx address claim with different name [ 543.055377][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4235'. [ 543.256938][T21626] syzkaller0: entered promiscuous mode [ 543.263855][T21626] syzkaller0: entered allmulticast mode [ 543.272407][T21626] TC_ACT_REPEAT abuse ? [ 543.449663][T21644] netlink: 'syz.0.4244': attribute type 1 has an invalid length. [ 543.468476][T21641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4243'. [ 543.742919][T21660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4248'. [ 544.120577][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4255'. [ 544.181767][T21637] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 544.236064][T21693] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4259'. [ 544.464201][T21714] bond0: entered promiscuous mode [ 544.478566][T21714] batadv0: entered promiscuous mode [ 544.492102][T21714] debugfs: 'hsr1' already exists in 'hsr' [ 544.507403][T21714] Cannot create hsr debugfs directory [ 544.520971][T21714] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 544.581231][T21714] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 544.605834][T21714] hsr1: entered promiscuous mode [ 544.611373][T21714] hsr1: entered allmulticast mode [ 544.617741][T21714] bond0: entered allmulticast mode [ 544.623020][T21714] batadv0: entered allmulticast mode [ 544.630522][T21714] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 544.639378][T21714] bond0: left promiscuous mode [ 544.645569][T21714] batadv0: left promiscuous mode [ 544.677684][T21732] chnl_net:caif_netlink_parms(): no params data found [ 544.695568][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 545.230376][T21761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.365352][T21773] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 545.405338][ T5143] Bluetooth: hci1: command 0x0419 tx timeout [ 545.597032][T21785] openvswitch: netlink: Duplicate or invalid key (type 0). [ 545.604676][T21785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.901190][T21791] erspan0: entered promiscuous mode [ 545.909752][T21791] debugfs: 'hsr1' already exists in 'hsr' [ 545.916900][T21791] Cannot create hsr debugfs directory [ 545.923889][T21791] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 545.946454][T21800] netlink: 'syz.3.4292': attribute type 1 has an invalid length. [ 546.498899][T21828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.578777][T21833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.866908][T21841] __nla_validate_parse: 8 callbacks suppressed [ 546.866929][T21841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4304'. [ 547.603972][T21887] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 547.702756][T21891] netlink: 'syz.2.4322': attribute type 4 has an invalid length. [ 547.714863][T21891] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4322'. [ 548.096089][T21909] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 548.155746][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4328'. [ 548.628237][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4339'. [ 548.662932][T21946] syzkaller0: entered promiscuous mode [ 548.691433][T21946] syzkaller0: entered allmulticast mode [ 548.937550][T21967] wg1: entered promiscuous mode [ 548.942913][T21967] wg1: entered allmulticast mode [ 549.261500][T21990] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4352'. [ 549.274190][T21990] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4352'. [ 549.455587][T22002] netlink: 696 bytes leftover after parsing attributes in process `syz.2.4356'. [ 549.473822][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'. [ 549.588772][T21994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.619045][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'. [ 549.631433][T22009] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 549.667233][T22017] vlan2: entered promiscuous mode [ 549.672412][T22017] geneve1: entered promiscuous mode [ 549.678195][T22017] vlan2: entered allmulticast mode [ 549.688613][T22017] geneve1: entered allmulticast mode [ 549.757008][T21994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.761651][T22027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4361'. [ 549.952486][T22038] netlink: 'syz.2.4364': attribute type 11 has an invalid length. [ 549.952642][T22037] atomic_op ffff888034eb5998 conn xmit_atomic 0000000000000000 [ 549.970456][T22038] netlink: 'syz.2.4364': attribute type 11 has an invalid length. [ 550.232708][T22009] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.240379][T22009] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.384131][T22009] wg1: left promiscuous mode [ 550.389829][T22009] wg1: left allmulticast mode [ 550.520911][T22009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.546883][T22009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.701360][T22009] bond1: left promiscuous mode [ 550.706885][T22009] bridge1: left promiscuous mode [ 550.731057][T22009] gretap2: left promiscuous mode [ 550.737972][T22009] gretap2: left allmulticast mode [ 550.751645][T22009] macvtap1: left promiscuous mode [ 550.758621][T22009] macvtap1: left allmulticast mode [ 550.775784][T22009] geneve3: left promiscuous mode [ 550.888131][T21994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.933316][T12530] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.957275][T12530] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 59082 - 0 [ 550.966519][T12530] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.975348][T12530] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.983795][T12530] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 59082 - 0 [ 550.993118][T12530] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 551.018336][T12530] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.030761][T12530] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 59082 - 0 [ 551.040967][T12530] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 551.049962][T12530] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.060360][T12530] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 59082 - 0 [ 551.069626][T12530] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 551.108182][T21994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.493454][T12537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.587576][T12537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.692167][T12537] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.760570][T12538] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.792433][T22111] netlink: 'syz.0.4378': attribute type 2 has an invalid length. [ 551.956562][T22121] __nla_validate_parse: 6 callbacks suppressed [ 551.956582][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 552.044011][T22125] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.4382'. [ 552.348681][T22145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4389'. [ 552.371381][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4388'. [ 552.548011][T22153] netlink: 'syz.4.4391': attribute type 30 has an invalid length. [ 553.045027][T22181] netlink: 'syz.1.4397': attribute type 11 has an invalid length. [ 553.281618][T22193] netlink: 'syz.1.4401': attribute type 1 has an invalid length. [ 553.314408][T22193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4401'. [ 553.323279][T22198] netlink: 'syz.1.4401': attribute type 1 has an invalid length. [ 553.358363][T22200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4403'. [ 553.375180][T22198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4401'. [ 553.421645][T22203] sctp: [Deprecated]: syz.3.4404 (pid 22203) Use of int in max_burst socket option deprecated. [ 553.421645][T22203] Use struct sctp_assoc_value instead [ 553.450853][T22199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4402'. [ 553.536293][T22211] netlink: 'syz.4.4407': attribute type 1 has an invalid length. [ 553.564112][T22208] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4405'. [ 553.594217][T22209] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4405'. [ 553.678144][T22211] bond2: entered promiscuous mode [ 553.727644][T22211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.817046][T22229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.919482][T22215] bond2: (slave bridge1): making interface the new active one [ 553.934494][T22215] bridge1: entered promiscuous mode [ 553.969831][T22215] bridge1: left promiscuous mode [ 554.478492][T22264] pim6reg: entered allmulticast mode [ 554.722662][T22278] netlink: 'syz.0.4426': attribute type 10 has an invalid length. [ 554.729264][T22280] bond7: option min_links: invalid value (18446744073709551614) [ 554.739424][T22280] bond7: option min_links: allowed values 0 - 2147483647 [ 554.760164][T22280] bond7 (unregistering): Released all slaves [ 554.794190][T22278] dummy0: entered promiscuous mode [ 554.802923][T22278] bridge0: port 3(dummy0) entered blocking state [ 554.809900][T22278] bridge0: port 3(dummy0) entered disabled state [ 554.818732][T22278] dummy0: entered allmulticast mode [ 554.951662][T22298] netlink: 'syz.1.4430': attribute type 1 has an invalid length. [ 555.012942][T22289] syzkaller0: entered promiscuous mode [ 555.020683][T22289] syzkaller0: entered allmulticast mode [ 555.310496][T22319] netlink: 'syz.3.4436': attribute type 12 has an invalid length. [ 555.542358][T22332] netlink: 'syz.1.4440': attribute type 13 has an invalid length. [ 555.574739][T22332] netlink: 'syz.1.4440': attribute type 27 has an invalid length. [ 555.651944][T22341] IPVS: length: 121 != 8 [ 557.403426][T22352] netlink: 'syz.0.4445': attribute type 10 has an invalid length. [ 557.431821][T22352] veth0_vlan: left promiscuous mode [ 557.465508][T22352] veth0_vlan: entered promiscuous mode [ 557.468351][T22354] __nla_validate_parse: 8 callbacks suppressed [ 557.468367][T22354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4446'. [ 557.473317][T22352] team0: Device veth0_vlan failed to register rx_handler [ 557.526934][T22356] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4447'. [ 557.542079][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4449'. [ 557.546478][T22361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4448'. [ 557.673496][T22363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4451'. [ 557.764501][T22375] netlink: 'syz.2.4453': attribute type 1 has an invalid length. [ 557.767781][T22369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.793282][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4452'. [ 557.817399][T22367] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.824683][T22367] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.880943][T22367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.891928][T22379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4453'. [ 557.902768][T22367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.016731][T22375] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 558.053385][T22383] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4455'. [ 558.093166][T12537] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.102021][T12537] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.146062][T22383] bond7 (unregistering): Released all slaves [ 558.197045][T12537] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.206983][T12537] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.316278][T22393] ip6gre1: entered promiscuous mode [ 558.321683][T22393] ip6gre1: entered allmulticast mode [ 558.479592][T22407] xt_l2tp: wrong L2TP version: 0 [ 558.505022][T22399] netlink: 'syz.1.4460': attribute type 39 has an invalid length. [ 558.701753][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4466'. [ 558.836797][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4471'. [ 558.888350][T22433] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 559.228110][T22453] sctp: [Deprecated]: syz.0.4480 (pid 22453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 559.228110][T22453] Use struct sctp_sack_info instead [ 559.336079][T22457] syz_tun: entered allmulticast mode [ 559.370139][T22456] syz_tun: left allmulticast mode [ 559.413082][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.448488][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.488080][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.511349][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.530278][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.558274][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.581952][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.591538][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.613384][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.626110][T22470] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 559.950793][T22499] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.039150][T22498] can: request_module (can-proto-5) failed. [ 560.336603][T22518] xt_l2tp: v2 doesn't support IP mode [ 560.346494][T22519] xt_TPROXY: Can be used only with -p tcp or -p udp [ 560.563722][T22528] tap0: tun_chr_ioctl cmd 2148553947 [ 560.896219][T22548] netlink: 'syz.3.4510': attribute type 1 has an invalid length. [ 561.017567][T22553] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 561.040934][T22558] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 561.071291][T22549] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.517652][T22581] netlink: 'syz.2.4518': attribute type 4 has an invalid length. [ 562.112730][T22596] pimreg: entered allmulticast mode [ 562.121428][T22595] pimreg: left allmulticast mode [ 562.390463][T22598] syzkaller0: entered promiscuous mode [ 562.396206][T22598] syzkaller0: entered allmulticast mode [ 562.452606][T22599] gretap1: entered promiscuous mode [ 562.494412][T22599] gretap1: entered allmulticast mode [ 564.411103][T22613] __nla_validate_parse: 46 callbacks suppressed [ 564.411127][T22613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4529'. [ 564.937064][T22646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4539'. [ 565.505679][T22649] xt_bpf: check failed: parse error [ 565.530293][T22649] xt_bpf: check failed: parse error [ 565.575999][T22656] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 565.719990][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4545'. [ 565.757787][T22674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4546'. [ 565.993047][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4551'. [ 566.021820][T22692] bridge_slave_1: left allmulticast mode [ 566.043898][T22692] bridge_slave_1: left promiscuous mode [ 566.060701][T22692] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.148380][T22692] bridge_slave_0: left allmulticast mode [ 566.157245][T22692] bridge_slave_0: left promiscuous mode [ 566.163564][T22692] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.194238][T22712] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 566.212797][T22712] netlink: 'syz.0.4555': attribute type 30 has an invalid length. [ 566.238932][T12538] smc: removing ib device  [ 566.436646][ T945] ================================================================== [ 566.444856][ T945] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 566.453650][ T945] Read of size 8 at addr ffff8880501842f0 by task kworker/1:2/945 [ 566.461462][ T945] [ 566.463800][ T945] CPU: 1 UID: 0 PID: 945 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 566.463819][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.463829][ T945] Workqueue: infiniband ib_cache_event_task [ 566.463857][ T945] Call Trace: [ 566.463863][ T945] [ 566.463869][ T945] dump_stack_lvl+0xe8/0x150 [ 566.463890][ T945] print_report+0xba/0x230 [ 566.463906][ T945] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 566.463924][ T945] kasan_report+0x117/0x150 [ 566.463945][ T945] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 566.463965][ T945] __ethtool_get_link_ksettings+0x5e/0x170 [ 566.463983][ T945] ib_get_eth_speed+0x180/0x7f0 [ 566.463998][ T945] ? rxe_query_port+0x7e/0x3d0 [ 566.464019][ T945] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 566.464039][ T945] ? do_raw_spin_unlock+0xf5/0x210 [ 566.464060][ T945] ? rxe_query_port+0x6b/0x3d0 [ 566.464081][ T945] rxe_query_port+0x93/0x3d0 [ 566.464103][ T945] ib_query_port+0x170/0x830 [ 566.464121][ T945] ib_cache_update+0x1ba/0xc70 [ 566.464144][ T945] ? finish_task_switch+0x161/0x920 [ 566.464158][ T945] ? do_raw_spin_lock+0x12b/0x2f0 [ 566.464177][ T945] ? __pfx_ib_cache_update+0x10/0x10 [ 566.464198][ T945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 566.464218][ T945] ? process_scheduled_works+0xa0f/0x17a0 [ 566.464235][ T945] ? process_scheduled_works+0xa0f/0x17a0 [ 566.464252][ T945] ib_cache_event_task+0xd8/0x1c0 [ 566.464275][ T945] ? process_scheduled_works+0xa0f/0x17a0 [ 566.464295][ T945] process_scheduled_works+0xaec/0x17a0 [ 566.464320][ T945] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.464337][ T945] ? assign_work+0x3d5/0x5e0 [ 566.464353][ T945] worker_thread+0xa50/0xfc0 [ 566.464386][ T945] kthread+0x388/0x470 [ 566.464404][ T945] ? __pfx_worker_thread+0x10/0x10 [ 566.464419][ T945] ? __pfx_kthread+0x10/0x10 [ 566.464438][ T945] ret_from_fork+0x51e/0xb90 [ 566.464455][ T945] ? __pfx_ret_from_fork+0x10/0x10 [ 566.464471][ T945] ? __switch_to+0xc7d/0x1400 [ 566.464485][ T945] ? __pfx_kthread+0x10/0x10 [ 566.464504][ T945] ret_from_fork_asm+0x1a/0x30 [ 566.464529][ T945] [ 566.464535][ T945] [ 566.673541][ T945] Allocated by task 16090: [ 566.677970][ T945] kasan_save_track+0x3e/0x80 [ 566.682664][ T945] __kasan_kmalloc+0x93/0xb0 [ 566.687272][ T945] __kvmalloc_node_noprof+0x528/0x8a0 [ 566.692648][ T945] alloc_netdev_mqs+0xa6/0x11b0 [ 566.697508][ T945] rtnl_create_link+0x31f/0xd70 [ 566.702366][ T945] rtnl_newlink_create+0x277/0xb70 [ 566.707571][ T945] rtnl_newlink+0x1666/0x1be0 [ 566.712347][ T945] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 566.717313][ T945] netlink_rcv_skb+0x232/0x4b0 [ 566.722094][ T945] netlink_unicast+0x80f/0x9b0 [ 566.726892][ T945] netlink_sendmsg+0x813/0xb40 [ 566.731687][ T945] __sys_sendto+0x709/0x7a0 [ 566.736308][ T945] __x64_sys_sendto+0xde/0x100 [ 566.741105][ T945] do_syscall_64+0x14d/0xf80 [ 566.745807][ T945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.751877][ T945] [ 566.754195][ T945] Freed by task 22692: [ 566.758509][ T945] kasan_save_track+0x3e/0x80 [ 566.763194][ T945] kasan_save_free_info+0x46/0x50 [ 566.768221][ T945] __kasan_slab_free+0x5c/0x80 [ 566.772990][ T945] kfree+0x1c1/0x610 [ 566.776973][ T945] device_release+0x9e/0x1d0 [ 566.781865][ T945] kobject_put+0x228/0x560 [ 566.786285][ T945] netdev_run_todo+0xc75/0xde0 [ 566.791138][ T945] rtnl_dellink+0x6a7/0x820 [ 566.795732][ T945] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 566.800687][ T945] netlink_rcv_skb+0x232/0x4b0 [ 566.805467][ T945] netlink_unicast+0x80f/0x9b0 [ 566.810247][ T945] netlink_sendmsg+0x813/0xb40 [ 566.815021][ T945] ____sys_sendmsg+0xa68/0xad0 [ 566.819831][ T945] ___sys_sendmsg+0x2a5/0x360 [ 566.824831][ T945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 566.829780][ T945] do_syscall_64+0x14d/0xf80 [ 566.834384][ T945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.840284][ T945] [ 566.842612][ T945] Last potentially related work creation: [ 566.848340][ T945] kasan_save_stack+0x3e/0x60 [ 566.853024][ T945] kasan_record_aux_stack+0xbd/0xd0 [ 566.858221][ T945] insert_work+0x3d/0x330 [ 566.862555][ T945] __queue_work+0xccf/0xf90 [ 566.867145][ T945] queue_work_on+0x106/0x1d0 [ 566.871732][ T945] br_multicast_dev_del+0xf0/0x350 [ 566.876964][ T945] br_dev_uninit+0x1c/0x40 [ 566.881479][ T945] unregister_netdevice_many_notify+0x1d16/0x2370 [ 566.887901][ T945] rtnl_dellink+0x5d4/0x820 [ 566.892494][ T945] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 566.897438][ T945] netlink_rcv_skb+0x232/0x4b0 [ 566.902201][ T945] netlink_unicast+0x80f/0x9b0 [ 566.906972][ T945] netlink_sendmsg+0x813/0xb40 [ 566.911731][ T945] ____sys_sendmsg+0xa68/0xad0 [ 566.916505][ T945] ___sys_sendmsg+0x2a5/0x360 [ 566.921194][ T945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 566.926308][ T945] do_syscall_64+0x14d/0xf80 [ 566.930900][ T945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.936875][ T945] [ 566.939290][ T945] Second to last potentially related work creation: [ 566.945870][ T945] kasan_save_stack+0x3e/0x60 [ 566.950637][ T945] kasan_record_aux_stack+0xbd/0xd0 [ 566.955840][ T945] insert_work+0x3d/0x330 [ 566.960172][ T945] __queue_work+0xccf/0xf90 [ 566.964673][ T945] queue_work_on+0x106/0x1d0 [ 566.969262][ T945] br_multicast_del_mdb_entry+0xbea/0xc70 [ 566.974993][ T945] br_multicast_dev_del+0xf0/0x350 [ 566.980111][ T945] br_dev_uninit+0x1c/0x40 [ 566.984527][ T945] unregister_netdevice_many_notify+0x1d16/0x2370 [ 566.990945][ T945] rtnl_dellink+0x5d4/0x820 [ 566.995470][ T945] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 567.000440][ T945] netlink_rcv_skb+0x232/0x4b0 [ 567.005231][ T945] netlink_unicast+0x80f/0x9b0 [ 567.010002][ T945] netlink_sendmsg+0x813/0xb40 [ 567.014768][ T945] ____sys_sendmsg+0xa68/0xad0 [ 567.019543][ T945] ___sys_sendmsg+0x2a5/0x360 [ 567.024663][ T945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 567.029613][ T945] do_syscall_64+0x14d/0xf80 [ 567.034295][ T945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.040230][ T945] [ 567.042556][ T945] The buggy address belongs to the object at ffff888050184000 [ 567.042556][ T945] which belongs to the cache kmalloc-cg-8k of size 8192 [ 567.056887][ T945] The buggy address is located 752 bytes inside of [ 567.056887][ T945] freed 8192-byte region [ffff888050184000, ffff888050186000) [ 567.071060][ T945] [ 567.073404][ T945] The buggy address belongs to the physical page: [ 567.079815][ T945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50180 [ 567.088668][ T945] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 567.097342][ T945] memcg:ffff888050182011 [ 567.101585][ T945] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 567.110721][ T945] page_type: f5(slab) [ 567.115094][ T945] raw: 00fff00000000040 ffff88813feb7640 dead000000000100 dead000000000122 [ 567.123946][ T945] raw: 0000000000000000 0000400000020002 00000000f5000000 ffff888050182011 [ 567.132536][ T945] head: 00fff00000000040 ffff88813feb7640 dead000000000100 dead000000000122 [ 567.141292][ T945] head: 0000000000000000 0000400000020002 00000000f5000000 ffff888050182011 [ 567.149970][ T945] head: 00fff00000000003 ffffea0001406001 00000000ffffffff 00000000ffffffff [ 567.158645][ T945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 567.167402][ T945] page dumped because: kasan: bad access detected [ 567.173844][ T945] page_owner tracks the page as allocated [ 567.179554][ T945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13877, tgid 13873 (syz.0.2152), ts 329194645414, free_ts 329101015351 [ 567.203021][ T945] post_alloc_hook+0x228/0x280 [ 567.207809][ T945] get_page_from_freelist+0x24dc/0x2580 [ 567.213365][ T945] __alloc_frozen_pages_noprof+0x18d/0x380 [ 567.219248][ T945] allocate_slab+0x77/0x660 [ 567.223838][ T945] refill_objects+0x331/0x3c0 [ 567.228513][ T945] __pcs_replace_empty_main+0x2b9/0x620 [ 567.234056][ T945] __kvmalloc_node_noprof+0x657/0x8a0 [ 567.239442][ T945] alloc_netdev_mqs+0xa6/0x11b0 [ 567.244312][ T945] rtnl_create_link+0x31f/0xd70 [ 567.249266][ T945] rtnl_newlink_create+0x277/0xb70 [ 567.254389][ T945] rtnl_newlink+0x1666/0x1be0 [ 567.259097][ T945] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 567.264130][ T945] netlink_rcv_skb+0x232/0x4b0 [ 567.269083][ T945] netlink_unicast+0x80f/0x9b0 [ 567.273912][ T945] netlink_sendmsg+0x813/0xb40 [ 567.278783][ T945] ____sys_sendmsg+0xa68/0xad0 [ 567.283731][ T945] page last free pid 5192 tgid 5192 stack trace: [ 567.290154][ T945] __free_frozen_pages+0xbf8/0xd70 [ 567.295294][ T945] __slab_free+0x263/0x2b0 [ 567.299747][ T945] qlist_free_all+0x97/0x100 [ 567.304435][ T945] kasan_quarantine_reduce+0x148/0x160 [ 567.309940][ T945] __kasan_slab_alloc+0x22/0x80 [ 567.314826][ T945] kmem_cache_alloc_noprof+0x2bc/0x650 [ 567.320381][ T945] do_getname+0x2e/0x250 [ 567.324647][ T945] do_readlinkat+0xc8/0x510 [ 567.329152][ T945] __x64_sys_readlink+0x7f/0x90 [ 567.334000][ T945] do_syscall_64+0x14d/0xf80 [ 567.338690][ T945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.344585][ T945] [ 567.346921][ T945] Memory state around the buggy address: [ 567.352604][ T945] ffff888050184180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 567.360678][ T945] ffff888050184200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 567.368738][ T945] >ffff888050184280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 567.376797][ T945] ^ [ 567.384504][ T945] ffff888050184300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 567.392559][ T945] ffff888050184380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 567.401225][ T945] ================================================================== [ 567.464663][ T945] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 567.471945][ T945] CPU: 1 UID: 0 PID: 945 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 567.481249][ T945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 567.491422][ T945] Workqueue: infiniband ib_cache_event_task [ 567.497373][ T945] Call Trace: [ 567.500684][ T945] [ 567.503647][ T945] vpanic+0x1e0/0x670 [ 567.507940][ T945] panic+0xc5/0xd0 [ 567.511966][ T945] ? __pfx_panic+0x10/0x10 [ 567.516505][ T945] ? preempt_schedule_thunk+0x16/0x30 [ 567.522002][ T945] ? preempt_schedule_thunk+0x16/0x30 [ 567.527593][ T945] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 567.533718][ T945] check_panic_on_warn+0x89/0xb0 [ 567.538794][ T945] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 567.544811][ T945] end_report+0x6f/0x140 [ 567.549103][ T945] kasan_report+0x128/0x150 [ 567.553653][ T945] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 567.559771][ T945] __ethtool_get_link_ksettings+0x5e/0x170 [ 567.565715][ T945] ib_get_eth_speed+0x180/0x7f0 [ 567.570691][ T945] ? rxe_query_port+0x7e/0x3d0 [ 567.575501][ T945] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 567.581090][ T945] ? do_raw_spin_unlock+0xf5/0x210 [ 567.586344][ T945] ? rxe_query_port+0x6b/0x3d0 [ 567.591163][ T945] rxe_query_port+0x93/0x3d0 [ 567.595797][ T945] ib_query_port+0x170/0x830 [ 567.600462][ T945] ib_cache_update+0x1ba/0xc70 [ 567.605263][ T945] ? finish_task_switch+0x161/0x920 [ 567.610488][ T945] ? do_raw_spin_lock+0x12b/0x2f0 [ 567.615630][ T945] ? __pfx_ib_cache_update+0x10/0x10 [ 567.620945][ T945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 567.626412][ T945] ? process_scheduled_works+0xa0f/0x17a0 [ 567.632148][ T945] ? process_scheduled_works+0xa0f/0x17a0 [ 567.637962][ T945] ib_cache_event_task+0xd8/0x1c0 [ 567.643010][ T945] ? process_scheduled_works+0xa0f/0x17a0 [ 567.648730][ T945] process_scheduled_works+0xaec/0x17a0 [ 567.654293][ T945] ? __pfx_process_scheduled_works+0x10/0x10 [ 567.660284][ T945] ? assign_work+0x3d5/0x5e0 [ 567.664874][ T945] worker_thread+0xa50/0xfc0 [ 567.669477][ T945] kthread+0x388/0x470 [ 567.673560][ T945] ? __pfx_worker_thread+0x10/0x10 [ 567.678759][ T945] ? __pfx_kthread+0x10/0x10 [ 567.683361][ T945] ret_from_fork+0x51e/0xb90 [ 567.687954][ T945] ? __pfx_ret_from_fork+0x10/0x10 [ 567.693252][ T945] ? __switch_to+0xc7d/0x1400 [ 567.698104][ T945] ? __pfx_kthread+0x10/0x10 [ 567.702707][ T945] ret_from_fork_asm+0x1a/0x30 [ 567.707482][ T945] [ 567.711041][ T945] Kernel Offset: disabled [ 567.715480][ T945] Rebooting in 86400 seconds..