last executing test programs: 38.814103527s ago: executing program 1 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) r2 = socket$igmp6(0xa, 0x3, 0x2) preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000080)=""/103, 0x67}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/51, 0x33}, {&(0x7f0000001280)=""/107, 0x6b}, {&(0x7f0000001300)=""/218, 0xda}, {&(0x7f0000001400)=""/85, 0x55}], 0x7, 0x80000001, 0xfffffffa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0xfffffffe}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x424b}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x48}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x8, 0x1, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000300000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 38.680056133s ago: executing program 0 (id=2135): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x24040880, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x65, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x0, [{@remote, 0x80}, {@empty}]}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1, 0x8}]}]}}}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x49e, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) (async) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x24040880, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x65, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x0, [{@remote, 0x80}, {@empty}]}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1, 0x8}]}]}}}}}}}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x49e, 0x4) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) 36.935315079s ago: executing program 2 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000000f9ff0920000000000a03000000000000000000070000100900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020280011800a00070071756f74610000001800028008000240000000010c0001400000000000000e4e140000001000010000000000000000000084000a33"], 0xac}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x15) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sendmsg$AUDIT_SET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x19, 0x0, 0x0, r5, 0x5, 0x7, 0x5, 0x9, 0x0, 0x80000000, 0xfffffffd}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 36.747472861s ago: executing program 0 (id=2137): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5aec}, {0x6, 0x0, 0x8, 0x2}]}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 36.240991575s ago: executing program 2 (id=2140): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d657461000000004f000280080001400000000c6cff03400000000008000140000000010800014000000009080001400000000b080001400000001208000140000000150800034000000004"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x35, 0x0, &(0x7f000000bac0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x1ce, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2b, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x88, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 35.426879906s ago: executing program 3 (id=2141): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x400000, &(0x7f0000000080)={@align=0xc4e, {0x730, 0x5, 0x0, 0x9}}, 0x401, &(0x7f00000000c0), &(0x7f0000000100)}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x6, 0x4) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, 0x0, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65edff0b000100000000000000000000000000000000000000000005"], &(0x7f0000000100)=0x2d) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}]}, 0x58}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r9, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 35.324250728s ago: executing program 0 (id=2142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000840), 0x2, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) close(r3) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xaf}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 35.323590639s ago: executing program 2 (id=2143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0x82, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 35.238519535s ago: executing program 1 (id=2144): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b36aa89aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154be"], &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x2004}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000003c0)={0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10, 0x800) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000280)={@loopback, @rand_addr=0x64010102}, 0x8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r10}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000002c0)={r10, 0xb1, "90a11b7abcac5f96c616ab3485455e529e101b50c4b2ff183cbf3917765ab9fb2e186bf5af8dbf8ffcd5d510f9234172ad59c258d0566d3a9342a43301d9927dbf734f326eb47bfa1ea0a4bd9418f589b1193d3e48fa335d4d3e519c15cb018bbac541fc85046b3088cfe4e005b714a0c912ab4e63a7a3db383057d750e1c52db6fda99d6a78d034cff94a9b07b85254dedeb3d270636ca9ab66b305d68d9e661b8b10331fd9e7d744eff4b2f86d5a4566"}, &(0x7f0000000380)=0xb9) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000081d26f92a175a0c3561190d5af1c0ee574693d87e83856c0040732ef36217cee82b047a83c02d77696a1f6c76055c5c312b7867668ec9a6998", @ANYRES16=r7, @ANYBLOB="050003000000fbdbdf252e00000008000300", @ANYRES32=r11, @ANYBLOB="0a003400010101010101000004004900"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 34.418063033s ago: executing program 0 (id=2146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @loopback}}}}}}, 0x26) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) 34.4169805s ago: executing program 2 (id=2147): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000300)={0x0, 'veth1_to_bridge\x00', 0x1}, 0x18) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x11e, 0x66, 0x0, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000008c0)={@loopback, @local, 0x0}, &(0x7f0000000900)=0xc) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="fd1b8c389eb1915ee2dd9b14e088a533f9cdeac2674cd885687a084d72dbfe3e5f98c8639be82f010d92aeade302fa335cee0173030f796f0d7d3929f37795661afe13285d5982fdb32417760c1fcc34fce7fd1b3c1b285e9aa2e7f769b9e41fd88aab4a31e96803427307c5e8fa1d98fdcb2948f9915d80838c8d07354aa09387ceb6fc74151f4d4204cfeeb67e9fff1c7d2ccbe519888613fc7c84654136aed6eb70a5851d6c7699a9c96945663035145c58402685e9d582822dfb7cf0134fd2c27f12641781960f59637dac8e21fff76db8c38bb4d4ac5ca862d269925c4f106e48bddd681f70b2aea8", 0xeb}, {&(0x7f00000002c0)="56e469f41fd6bac17338f0501e553c", 0xf}, {&(0x7f0000000400)="6cfd309f9671826d104c2ef38db6cd921227087c0c42425d6b83fa13550631293d09b82b4d0f83cfb730d29043ff45da37e263d92ace1889fd8d7436ba6520ed5e9c0195a0f84107ad6b9b5399f596d199f9d28481a9a77d79876f68f5a9fe3d109fe38efda22f4bbfefc1100e14896be2ec8051e16a5b1fd6e175839167b4e7237d33eeaad53f258ddf06d4beddb783a4d3a90f0814fa067fa7f16659601be521d5a259ec186c1b727e6836d08153e5a7cceed97d360b510cc2ae930ec1513ef3970e3c9041858fba1b68fe83b7d63d7c4c1ed0fd8e998799059e576d5b8d511e21405e95efbc6bcf82aaae8f0f078013abcf03915a2ca4", 0xf8}], 0x3, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x48}}, {{&(0x7f0000000680)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000880)=[{&(0x7f00000006c0)="12965aa4323d8a870917fd29adf482b1310b9950078cb8d2020dd74c46384c3ad4c3e80a5e7e967e8c4299c9ed0d8658ed93efcc6d57a7e136be8cafe67323614e5976f7e194ed2631713512088a5a149c4ff09adcf70afb", 0x58}, {&(0x7f0000000780)="d62798c5c83c33eb0d52e803aa501b39106b69b2848f58868b9a11d525f037fe23454ca3c708fa4b5344d181b8fb06688b11ae2b971dfe85269518cd1ff1de74157606be5a76d1efb4a02b70521620c2e5394dc51387978e2b5a4e091ddf08ceedc1081c48229d49234a5e0b324992e61ddbdb8c69f454d60c5aa9ce4aed25781d76cf684b060fefc5bedd6b83505420fdd0c54ece02307e904f4be0d9af50e9f09e5896c379891cc2244f4a3d56b33c5d4ff50ed2d6bf247ca429ab434b94cbd1d6099de4839b9df69f17fa0090e076f7bcf8e6f59665d23fefc8", 0xdb}], 0x2, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4a87}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}], 0xf8}}], 0x2, 0x800) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) socket$unix(0x1, 0x1, 0x0) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a30000000000c0020800800124000000002050005000a000000050001000600000015000300686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x4000040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'tgr160-generic\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) 34.243495912s ago: executing program 3 (id=2148): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d00000000000000000000000105000000030000000000000000000003000000000100000002"], 0x0, 0x4e}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff7ff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff7ff}, 0x94) 33.704437302s ago: executing program 3 (id=2150): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) recvmsg(r10, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000200002001dcdf25100e000008000300", @ANYRES32=r11], 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) 33.647396586s ago: executing program 1 (id=2151): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0x6, "fbb020b1c236"}}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r4, 0x5}, 0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={r4, 0x1}, &(0x7f00000003c0)=0x8) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0xa0, 0x28, 0x4, 0x4001, 0xff7ffe20, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0xffff, 0x7}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xe, 0x6, 0xd, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0xe, 0x1ff]}}, {{0x1c, 0x1, {0xfb, 0x6, 0x4, 0xf, 0x1, 0xff, 0x8001, 0x2}}, {0x8, 0x2, [0x5, 0x7fff]}}, {{0x1c, 0x1, {0x2, 0x7d, 0xe, 0x6, 0x0, 0x4, 0x5, 0x3}}, {0xa, 0x2, [0x7f, 0x8, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40440d8}, 0x20000019) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) (async) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) 33.055773168s ago: executing program 2 (id=2152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 32.794923694s ago: executing program 4 (id=2153): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @tipc={{0xe, 0x4, 0x2, 0x3b, 0x66, 0x66, 0x0, 0x8, 0x6, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x24, 0x6e, 0x0, 0x5, [0xf09, 0x80000000, 0x2, 0x2, 0x6, 0x1, 0xfffffffa, 0x1]}]}}, @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x8001, 0x0, 0x3, 0x9, 0x2, 0x1, 0x0, 0x3, 0x0, 0x4e22, 0x4e22}, 0x3}, 0x1, 0x4}, 0x2}}, [0x0, 0x0]}}}}}, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x0, 0x1e, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x80, 0xbf, "f0881f73f87fffd8a7c88c2c23ab70c63b0df24a3236c1c0dca3eee9654ba68bf06c851cb87c4ee31d12b3450876f57b4869dc7070054c9c7881764649fbecbba4fb0b00abe595ed2deb9f4b76dda6def91c2383e8481f18647ba5b5a954eebfc3aecadb72047dfbb711527b6a345f0a2500455be45b1487783971cfc2191e15994f668a32f2a9b509b839afba1f399803c9668743b77394147516a2a02bd0a67f20385372a29b8926ba2dd6baca2736c3cb4b446fb1e45bce808309e4bcf7"}, @ra={0x5, 0x2, 0x976}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x800}, @pad1]}, 0x100) 32.794390919s ago: executing program 3 (id=2154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]}}]}, 0x45c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000ba6122180020000000000000000b00000014000100fc0200"/40], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 32.535385374s ago: executing program 0 (id=2155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac000180100006"], 0xec}}, 0x4000844) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) recvmmsg(r3, &(0x7f0000006980)=[{{&(0x7f0000000140)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000280)=""/155, 0x9b}], 0x2, &(0x7f0000000380)=""/65, 0x41}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}, {&(0x7f00000004c0)=""/25, 0x19}, {&(0x7f0000000600)=""/144, 0x90}], 0x3}, 0x6}, {{&(0x7f0000000700)=@sco, 0x80, &(0x7f0000002400)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/123, 0x7b}, {&(0x7f0000002380)}, {&(0x7f00000023c0)=""/27, 0x1b}], 0x4, &(0x7f0000002440)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000003440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000034c0)=""/147, 0x93}, {&(0x7f0000003580)=""/232, 0xe8}, {&(0x7f0000003680)=""/161, 0xa1}], 0x3, &(0x7f0000003780)=""/85, 0x55}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003800)=""/219, 0xdb}, {&(0x7f0000003900)=""/7, 0x7}, {&(0x7f0000003940)=""/76, 0x4c}, {&(0x7f00000039c0)=""/250, 0xfa}], 0x4}, 0x30}, {{&(0x7f0000003b00)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003b80)=""/151, 0x97}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/201, 0xc9}, {&(0x7f0000004d40)=""/133, 0x85}, {&(0x7f0000004e00)=""/152, 0x98}, {&(0x7f0000004ec0)=""/241, 0xf1}, {&(0x7f0000004fc0)=""/189, 0xbd}, {&(0x7f0000005080)=""/234, 0xea}, {&(0x7f0000005180)=""/145, 0x91}], 0x9, &(0x7f0000005300)=""/115, 0x73}, 0xffffffff}, {{&(0x7f0000005380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006680)=[{&(0x7f0000005400)=""/72, 0x48}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/84, 0x54}, {&(0x7f0000006500)=""/185, 0xb9}, {&(0x7f00000065c0)=""/11, 0xb}, {&(0x7f0000006600)=""/127, 0x7f}], 0x6}, 0x10}, {{&(0x7f0000006700)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006780)=""/157, 0x9d}, {&(0x7f0000006840)}, {&(0x7f0000006880)=""/106, 0x6a}], 0x3, &(0x7f0000006940)=""/27, 0x1b}, 0x6d9c5c27}], 0x8, 0x122, &(0x7f0000006b80)={0x77359400}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 32.341521626s ago: executing program 4 (id=2156): syz_emit_ethernet(0x96, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x60, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x10, 0x6, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x5, 0xf989, "11"}, @generic={0x0, 0x12, "ef1e01885c8a71486bd34c6846f6d897"}, @timestamp={0x8, 0xa, 0x3, 0x5}, @mss={0x2, 0x4, 0x1}, @timestamp={0x8, 0xa, 0xfffffffd, 0x7}, @fastopen={0x22, 0x7, "0a619795f0"}, @mptcp=@generic={0x84, 0x2}, @eol]}}}}}}}}, 0x0) 32.327397002s ago: executing program 1 (id=2157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000d81272a7c9a53fd7e11628d2bc44f74e167091146c2da86b2319fc43c1dc3fc822f39e290657e4a7823712ff4e5d008d8c6c4ff923bdd7f1be04337916f4d999e8e0617d75d630ce166ddb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) r1 = socket(0x2b, 0x1, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0xfe4f, &(0x7f0000000000)={@broadcast, @random="0000460000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x9c, 0x0, @wg=@response={0x2, 0x4, 0x3, "f713203d034924cefb3aa4124204a80e3111a8cba78223135637b4140dd4830a", "f215dfded9b7597b3bd7262fd608be74", {"c67e3156519335a6439de2415e73c917", "ae097b1b51983edc73255f55b35fc41d"}}}}}}}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="0f198d", 0x3}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f00000000c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) 31.959424256s ago: executing program 4 (id=2158): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x80, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @local}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}]}, 0x74}, 0x1, 0x0, 0x0, 0x91}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x220, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc6, 0x1, "12f8e6c551311cfbce4225173c520cd6c7eca7a78ca616e2ea02616024f2105d2301a89670fdcc18d422b2904abbca71c4f1cb21bf4539ac30a30a214f2ac46f2a9b3d8206b8f432522771352aadd5e7a87c581078930128b194ba859f83fa1abd3d2d4fa7e6690374dd0c42206a57a6f6c2df4edef322a36f10617709b5d8e5d1578037ab109887e7392503576d467bcf730faa8ae2b5649c23fae33521e5e395d42bcfeb2aa00e7ca1ce61eed65279a65a3fbfe8a27017d9bc955e5242f1cf92be"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x118, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xec, 0x1, "47a6daf30c10e363dc29c65e7de3da3e62ec49e219b80ab4931fc412bfbf9e714e61dc7a4f8f9f9d4437883581c8ff6e672398a7fc73f796213a1c306945a557e74fef2f661ad1cbb6841b9b08b856cee262ed95beec84b773fecdf79fe974af3f64c435bbc1792741e2ef4aec8858e44bf573133a2196e30e53d7ce7a3133b2866758ae415a79ab9e4dd18b350361e49889821dda6bd98c18b6edcad6b495a9b615431ef95525740df6c5ccffdc4f4a4a6fd843332e161116ab28a267ca8defca3d0dbfee14de67815110ea398fa5a81d6549ec4b42fa01c723329f5f969b9bc7f23f80d1b5fc72"}}, {0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x11, 0x2, "e1f0f1f7d4791f33bdf6973b00"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfc}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20008000}, 0x4840) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r2) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000780)={0x0, 0x1, [0x6, 0x7e, 0x6, 0xfffffffffffffffa, 0x5, 0x4]}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x104, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200412}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x170, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa733f90}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59e74d82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d41e92f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x269f0c0b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3db8889a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b406818}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38ddc0bb}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ba905a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17f8847f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2433}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e889e3c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x329d0c52}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000d00)={r0, 0x0, 0x7fffffffffffffff, 0x7, 0xd1, 0x8, [0x9, 0x4, 0x401, 0x9, 0x2, 0x5]}) close(r6) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2d, 'devices'}, {0x2d, 'net_cls'}]}, 0x12) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e00), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000ec0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000f00)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r7, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x3c}}, 0xc801) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) write$nbd(r0, &(0x7f0000001100)={0x67446698, 0x0, 0x0, 0x2, 0x1, "ec67edb64f256b00c0be02d260e42185ac934f1938778d80b20fefb1bc2ae401a547bee8e644932753bcdb5351b8ab51cf41eef33d16b358d1ab567f6894cce1387760a493516f42e1f70170ca250832b76c699a177172e91a6fc7083fe979a55f116cb9502ea366fc4b5625e32296d9e335cf1690db5901935f"}, 0x8a) socket$key(0xf, 0x3, 0x2) 31.421551114s ago: executing program 4 (id=2159): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x81, 0x1, 0x1, @private1, @empty, 0x80, 0x0, 0x0, 0x3}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2b9, 0xffff, 0x0, 0x20000, r0, 0xf8b5, '\x00', r4, r5, 0x1, 0x4, 0x5, 0x1}, 0x50) 31.260991248s ago: executing program 3 (id=2160): r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70fd2c, 0x5dddbbd, {0x0, 0x0, 0x0, r1, {0xc}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7, 0xaa59, 0xb79}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12480, 0x5c83}}, 0x20}}, 0x48010) 30.73392439s ago: executing program 4 (id=2161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@map_fd={0x18, 0x9, 0x1, 0x0, r2}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x5, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 30.684425469s ago: executing program 1 (id=2162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001300)='highspeed', 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (rerun: 64) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x0) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/127, &(0x7f00000000c0)=0x7f) 30.328821087s ago: executing program 2 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073795a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}, 0x1, 0x0, 0x0, 0x20000850}, 0x20008840) socketpair(0x23, 0x4, 0x5, &(0x7f0000000000)) 30.023649558s ago: executing program 0 (id=2164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="18000300010003", 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write(r5, 0x0, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:75'], 0x9) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000a02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) 26.655474308s ago: executing program 3 (id=2165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x2000400c) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x7, &(0x7f0000000000), 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xbfffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, &(0x7f0000000000)={0xfff}) 23.947456408s ago: executing program 1 (id=2166): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000000200)=0x89) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r5, r5, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x8, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r6, {0xd, 0x10}, {0x0, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 23.86682834s ago: executing program 4 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 0s ago: executing program 32 (id=2164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="18000300010003", 0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write(r5, 0x0, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:75'], 0x9) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000a02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): in process `syz.2.252'. [ 103.942428][ T6805] netdevsim netdevsim1: Direct firmware load for ’ failed with error -2 [ 103.960571][ T6805] netdevsim netdevsim1: Falling back to sysfs fallback for: ’ [ 104.258595][ T6825] netlink: 'syz.0.260': attribute type 1 has an invalid length. [ 104.313930][ T6825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.462306][ T6829] bond5: (slave veth3): Enslaving as an active interface with a down link [ 104.563524][ T6837] netlink: 84 bytes leftover after parsing attributes in process `syz.3.263'. [ 104.574804][ T6837] netlink: 84 bytes leftover after parsing attributes in process `syz.3.263'. [ 104.584140][ T6837] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 104.757495][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 105.082798][ T6861] netlink: 'syz.1.272': attribute type 3 has an invalid length. [ 107.029530][ T6812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.039767][ T6818] netlink: 'syz.4.257': attribute type 11 has an invalid length. [ 107.050012][ T6818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.257'. [ 107.455009][ T6871] erspan0: entered promiscuous mode [ 107.476979][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 107.740889][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 108.141135][ T6910] x_tables: duplicate underflow at hook 1 [ 108.188502][ T6912] : renamed from bond0 (while UP) [ 108.361697][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.288'. [ 108.374730][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 108.385390][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.288'. [ 108.416553][ T6918] netlink: 'syz.1.289': attribute type 5 has an invalid length. [ 108.432791][ T6918] warning: `syz.1.289' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.514572][ T6923] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 108.540297][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.549442][ T6925] trusted_key: syz.1.290 sent an empty control message without MSG_MORE. [ 110.740619][ T6893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.955747][ T6929] block nbd0: not configured, cannot reconfigure [ 111.022627][ T5749] IPVS: starting estimator thread 0... [ 111.033642][ T6935] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20000 [ 111.035601][ T6932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.095935][ T6929] __nla_validate_parse: 2 callbacks suppressed [ 111.095951][ T6929] netlink: 576 bytes leftover after parsing attributes in process `syz.3.291'. [ 111.162357][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.295'. [ 111.167952][ T6936] IPVS: using max 30 ests per chain, 72000 per kthread [ 111.181315][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.295'. [ 111.270974][ T6948] netlink: 244 bytes leftover after parsing attributes in process `syz.1.298'. [ 111.310060][ T6950] xt_ecn: cannot match TCP bits for non-tcp packets [ 111.614862][ T6977] netlink: 9 bytes leftover after parsing attributes in process `syz.2.303'. [ 111.674277][ T6977] netlink: 9 bytes leftover after parsing attributes in process `syz.2.303'. [ 111.674411][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 112.032541][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 114.540951][ T6973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.026876][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 115.038168][ T7066] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 115.080828][ T7069] netlink: 'syz.2.326': attribute type 2 has an invalid length. [ 115.089644][ T7069] netlink: 244 bytes leftover after parsing attributes in process `syz.2.326'. [ 115.433156][ T7090] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 115.445147][ T7090] syzkaller1: entered promiscuous mode [ 115.450946][ T7090] syzkaller1: entered allmulticast mode [ 118.340011][ T7085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.553207][ T7131] netlink: 'syz.4.344': attribute type 58 has an invalid length. [ 118.553738][ T7127] 0: reclassify loop, rule prio 0, protocol 03 [ 118.572811][ T7131] __nla_validate_parse: 6 callbacks suppressed [ 118.572826][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.344'. [ 118.950561][ T7149] netlink: 68 bytes leftover after parsing attributes in process `syz.1.349'. [ 118.978122][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 119.005149][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 119.009370][ T7149] bridge_slave_0: left allmulticast mode [ 119.063610][ T7149] bridge_slave_0: left promiscuous mode [ 119.070940][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.089574][ T7149] bridge_slave_1: left allmulticast mode [ 119.096274][ T7149] bridge_slave_1: left promiscuous mode [ 119.102399][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.120787][ T7149] bond0: (slave bond_slave_0): Releasing backup interface [ 119.122485][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 119.158070][ T7149] bond0: (slave bond_slave_1): Releasing backup interface [ 119.217293][ T7149] team0: Port device team_slave_0 removed [ 119.251356][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 119.259973][ T7149] team0: Port device team_slave_1 removed [ 119.275871][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.287212][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.296344][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.309138][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.347930][ T7149] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.412826][ T7172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.483661][ T7172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.651389][ T7194] netdevsim netdevsim4: Direct firmware load for ’ failed with error -2 [ 119.670639][ T7194] netdevsim netdevsim4: Falling back to sysfs fallback for: ’ [ 122.508612][ T7184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.746838][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 122.767316][ T7235] syzkaller0: entered promiscuous mode [ 122.783265][ T7235] syzkaller0: entered allmulticast mode [ 122.783572][ T7237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.370'. [ 122.858210][ T7242] netlink: 52 bytes leftover after parsing attributes in process `syz.2.369'. [ 122.897949][ T7244] netlink: 'syz.3.371': attribute type 29 has an invalid length. [ 122.923340][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 123.128925][ T7250] syzkaller0: entered promiscuous mode [ 123.137745][ T7250] syzkaller0: entered allmulticast mode [ 123.211196][ T7262] syzkaller1: entered promiscuous mode [ 123.217333][ T7262] syzkaller1: entered allmulticast mode [ 123.934353][ T7254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.256988][ T7293] netlink: 'syz.1.382': attribute type 8 has an invalid length. [ 124.343271][ T7298] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 124.368064][ T7296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.428568][ T7298] bond1: entered promiscuous mode [ 124.435230][ T7298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.603907][ T7311] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 124.831963][ T7317] __nla_validate_parse: 1 callbacks suppressed [ 124.831976][ T7317] netlink: 104 bytes leftover after parsing attributes in process `syz.2.391'. [ 126.963024][ T7273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.231434][ T7323] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 127.257048][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 127.267995][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 127.273107][ T7334] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 127.285979][ T7323] nbd: error processing sock list [ 127.328096][ T7334] 8021q: adding VLAN 0 to HW filter on device bond6 [ 127.377724][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 127.394476][ T7334] bond6: (slave geneve2): making interface the new active one [ 127.424921][ T7334] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 127.791716][ T7361] pim6reg527: entered allmulticast mode [ 127.849893][ T7372] netdevsim netdevsim3: Direct firmware load for ’ failed with error -2 [ 127.884530][ T7372] netdevsim netdevsim3: Falling back to sysfs fallback for: ’ [ 127.994304][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 128.134672][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 128.401363][ T7379] hsr_slave_1 (unregistering): left promiscuous mode [ 129.076796][ T7421] bridge2: entered promiscuous mode [ 129.098278][ T7421] bridge2: entered allmulticast mode [ 129.130493][ T7421] team0: Port device bridge2 added [ 129.140729][ T7420] bridge0: port 3(team0) entered blocking state [ 129.160233][ T7420] bridge0: port 3(team0) entered disabled state [ 129.167989][ T7420] team0: entered allmulticast mode [ 129.174114][ T7420] team_slave_0: entered allmulticast mode [ 129.181147][ T7420] team_slave_1: entered allmulticast mode [ 129.190773][ T7420] team0: entered promiscuous mode [ 129.202996][ T7420] team_slave_0: entered promiscuous mode [ 129.219186][ T7420] team_slave_1: entered promiscuous mode [ 129.232572][ T7444] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 129.238631][ T7420] bridge0: port 3(team0) entered blocking state [ 129.247643][ T7420] bridge0: port 3(team0) entered forwarding state [ 129.291407][ T7444] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 129.360222][ T7436] netlink: 76 bytes leftover after parsing attributes in process `syz.4.425'. [ 129.523823][ T7454] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 129.684632][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.691364][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.697528][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.703695][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.709850][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.715926][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.722131][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.728270][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.734425][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.740604][ T7460] tc action pedit 'at' offset 5 out of bounds [ 129.746732][ T7460] 0: reclassify loop, rule prio 0, protocol 800 [ 129.871097][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 129.901898][ T7473] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 130.030517][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 130.116203][ T7490] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 130.176419][ T7492] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 130.183431][ T5626] IPVS: starting estimator thread 0... [ 130.220749][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 130.288559][ T7505] netlink: 52 bytes leftover after parsing attributes in process `syz.4.441'. [ 130.296242][ T7500] IPVS: using max 31 ests per chain, 74400 per kthread [ 130.466892][ T7497] bond1: (slave geneve2): making interface the new active one [ 130.489452][ T7497] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 130.541766][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.555993][ T5965] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.577100][ T5965] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.587889][ T5965] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.661408][ T5965] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 130.694913][ T7528] Cannot find del_set index 0 as target [ 130.750432][ T7530] syzkaller0: entered promiscuous mode [ 130.758122][ T7530] syzkaller0: entered allmulticast mode [ 130.890348][ T7537] syzkaller0: entered promiscuous mode [ 130.895895][ T7537] syzkaller0: entered allmulticast mode [ 130.912251][ T7537] tipc: Started in network mode [ 130.927834][ T7537] tipc: Node identity 4a186b6e7a01, cluster identity 4711 [ 130.945919][ T7537] tipc: Enabled bearer , priority 0 [ 130.964543][ T7537] tipc: Resetting bearer [ 130.996186][ T7536] tipc: Resetting bearer [ 131.057006][ T7536] tipc: Disabling bearer [ 131.090146][ T7551] netdevsim netdevsim1: Direct firmware load for ’ failed with error -2 [ 131.099422][ T7551] netdevsim netdevsim1: Falling back to sysfs fallback for: ’ [ 131.202600][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 131.428670][ T7567] netlink: 'syz.0.461': attribute type 2 has an invalid length. [ 131.477904][ T7571] netlink: 48 bytes leftover after parsing attributes in process `syz.4.463'. [ 131.645084][ T7577] netlink: 'syz.4.466': attribute type 2 has an invalid length. [ 131.662811][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.469'. [ 131.681317][ T7577] netlink: 'syz.4.466': attribute type 12 has an invalid length. [ 131.699741][ T7577] netlink: 132 bytes leftover after parsing attributes in process `syz.4.466'. [ 132.023312][ T7599] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 132.234364][ T7615] syzkaller0: entered promiscuous mode [ 132.242418][ T7615] syzkaller0: entered allmulticast mode [ 132.351614][ T7617] IPVS: Error connecting to the multicast addr [ 132.679265][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.485'. [ 132.753010][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.762913][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807927][ T7650] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 133.067738][ T7665] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 133.094178][ T7666] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 133.184887][ T7672] netlink: 'syz.4.496': attribute type 83 has an invalid length. [ 133.210487][ T7665] macvtap1: entered allmulticast mode [ 133.250715][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 133.264171][ T7670] macvtap2: entered allmulticast mode [ 133.301233][ T7665] bond1: (slave bridge1): making interface the new active one [ 133.319171][ T7665] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 133.335331][ T7686] xt_hashlimit: size too large, truncated to 1048576 [ 133.890878][ T7704] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 134.190103][ T7721] netdevsim netdevsim1: Direct firmware load for ’ failed with error -2 [ 134.210481][ T7721] netdevsim netdevsim1: Falling back to sysfs fallback for: ’ [ 134.244849][ T7722] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 134.952969][ T7761] __nla_validate_parse: 5 callbacks suppressed [ 134.952988][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 135.183719][ T7762] team0: Port device vlan2 added [ 135.213809][ T7773] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 135.338806][ T7773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.348857][ T7775] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 135.372880][ T7775] bond1: entered allmulticast mode [ 135.411463][ T7781] netlink: 64 bytes leftover after parsing attributes in process `syz.3.525'. [ 135.539181][ T46] IPVS: starting estimator thread 0... [ 135.549863][ T7785] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 135.646165][ T7786] IPVS: using max 33 ests per chain, 79200 per kthread [ 135.693015][ T7789] netlink: get zone limit has 4 unknown bytes [ 135.783424][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 135.840859][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 135.925554][ T7812] netdevsim netdevsim1: Direct firmware load for ’ failed with error -2 [ 135.947811][ T7812] netdevsim netdevsim1: Falling back to sysfs fallback for: ’ [ 136.168770][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 136.249223][ T7827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.539'. [ 136.650664][ T5965] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 137.010791][ T7871] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 137.060872][ T7871] xt_hashlimit: size too large, truncated to 1048576 [ 137.078182][ T7872] xt_hashlimit: size too large, truncated to 1048576 [ 137.215125][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 137.259241][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 137.301396][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 137.348750][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'. [ 137.672269][ T7898] netdevsim netdevsim4: Direct firmware load for ’ failed with error -2 [ 137.691509][ T7898] netdevsim netdevsim4: Falling back to sysfs fallback for: ’ [ 138.221603][ T7923] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 138.260386][ T7927] openvswitch: netlink: IPv4 tun info is not correct [ 138.312184][ T7928] syzkaller0: entered promiscuous mode [ 138.325030][ T7928] syzkaller0: entered allmulticast mode [ 138.429912][ T7935] xt_hashlimit: size too large, truncated to 1048576 [ 138.436970][ T7935] xt_hashlimit: max too large, truncated to 1048576 [ 138.443768][ T7935] xt_hashlimit: overflow, rate too high: 0 [ 138.472854][ T7930] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 138.624958][ T7930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.670390][ T7937] bond2: (slave gretap1): making interface the new active one [ 138.682298][ T7937] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 138.858970][ T7937] syz.1.568 (7937) used greatest stack depth: 19136 bytes left [ 139.311148][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.321028][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.497264][ T7980] netdevsim netdevsim3: Direct firmware load for ’ failed with error -2 [ 139.510326][ T7980] netdevsim netdevsim3: Falling back to sysfs fallback for: ’ [ 139.681605][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.695500][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.863322][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.883590][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.895526][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.915721][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.022385][ T7987] __nla_validate_parse: 1 callbacks suppressed [ 140.022419][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 140.573485][ T8015] IPVS: length: 239 != 24 [ 140.827542][ T8023] netlink: 'syz.2.596': attribute type 2 has an invalid length. [ 141.258156][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.604'. [ 141.561671][ T8062] syzkaller0: entered promiscuous mode [ 141.568262][ T8062] syzkaller0: entered allmulticast mode [ 143.044596][ T7992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.490057][ T5742] IPVS: starting estimator thread 0... [ 143.606293][ T8103] IPVS: using max 33 ests per chain, 79200 per kthread [ 143.834270][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'. [ 143.856544][ T8105] netlink: 'syz.2.617': attribute type 7 has an invalid length. [ 143.874370][ T8105] netlink: 'syz.2.617': attribute type 8 has an invalid length. [ 143.885921][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 143.927905][ T8108] netlink: 576 bytes leftover after parsing attributes in process `syz.2.617'. [ 144.108578][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 144.142582][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 144.191745][ T8119] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 144.338406][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 144.379405][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.425844][ T8124] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20000 [ 144.494447][ T8129] block nbd0: not configured, cannot reconfigure [ 144.502156][ T8129] xt_socket: unknown flags 0x8 [ 144.531129][ T8130] netlink: 'syz.4.626': attribute type 3 has an invalid length. [ 144.807943][ T8133] netlink: 52 bytes leftover after parsing attributes in process `syz.2.627'. [ 145.038323][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 145.065988][ T8146] bond7: entered allmulticast mode [ 145.071969][ T8146] 8021q: adding VLAN 0 to HW filter on device bond7 [ 145.544833][ T8172] syz.2.635: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.581285][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 145.603973][ T8172] CPU: 1 UID: 0 PID: 8172 Comm: syz.2.635 Not tainted syzkaller #0 PREEMPT(full) [ 145.603999][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.604018][ T8172] Call Trace: [ 145.604026][ T8172] [ 145.604035][ T8172] dump_stack_lvl+0xe8/0x150 [ 145.604076][ T8172] warn_alloc+0x24c/0x270 [ 145.604104][ T8172] ? stack_depot_save_flags+0x33/0x800 [ 145.604132][ T8172] ? __pfx_warn_alloc+0x10/0x10 [ 145.604159][ T8172] ? kasan_save_track+0x3e/0x80 [ 145.604184][ T8172] ? __kasan_kmalloc+0x93/0xb0 [ 145.604212][ T8172] ? xsk_setsockopt+0x52a/0x960 [ 145.604240][ T8172] ? do_sock_setsockopt+0x17c/0x1b0 [ 145.604259][ T8172] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 145.604278][ T8172] ? do_syscall_64+0x174/0x580 [ 145.604299][ T8172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.604329][ T8172] __vmalloc_node_range_noprof+0x12c/0x1730 [ 145.604382][ T8172] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.604411][ T8172] ? __kasan_kmalloc+0x93/0xb0 [ 145.604439][ T8172] ? __kmalloc_cache_noprof+0x32d/0x660 [ 145.604464][ T8172] ? __kmalloc_cache_noprof+0x150/0x660 [ 145.604492][ T8172] vmalloc_user_noprof+0xad/0xe0 [ 145.604523][ T8172] ? xskq_create+0xbf/0x170 [ 145.604544][ T8172] xskq_create+0xbf/0x170 [ 145.604566][ T8172] xsk_init_queue+0x8a/0xe0 [ 145.604589][ T8172] xsk_setsockopt+0x52a/0x960 [ 145.604616][ T8172] ? __fget_files+0x2a/0x420 [ 145.604644][ T8172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.604673][ T8172] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.604697][ T8172] ? aa_sock_opt_perm+0xff/0x1a0 [ 145.604721][ T8172] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 145.604742][ T8172] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.604770][ T8172] do_sock_setsockopt+0x17c/0x1b0 [ 145.604794][ T8172] __x64_sys_setsockopt+0x13d/0x1b0 [ 145.604817][ T8172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.604837][ T8172] do_syscall_64+0x174/0x580 [ 145.604857][ T8172] ? trace_irq_disable+0x3b/0x140 [ 145.604882][ T8172] ? clear_bhb_loop+0x40/0x90 [ 145.604906][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.604925][ T8172] RIP: 0033:0x7ff8b8f9de99 [ 145.604949][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.604965][ T8172] RSP: 002b:00007ff8b9e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.604986][ T8172] RAX: ffffffffffffffda RBX: 00007ff8b9226090 RCX: 00007ff8b8f9de99 [ 145.605000][ T8172] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 145.605012][ T8172] RBP: 00007ff8b9033eaf R08: 0000000000000004 R09: 0000000000000000 [ 145.605024][ T8172] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.605036][ T8172] R13: 00007ff8b9226128 R14: 00007ff8b9226090 R15: 00007ffc69032b98 [ 145.605068][ T8172] [ 145.605236][ T8172] Mem-Info: [ 145.976444][ T8172] active_anon:7569 inactive_anon:0 isolated_anon:0 [ 145.976444][ T8172] active_file:0 inactive_file:42797 isolated_file:0 [ 145.976444][ T8172] unevictable:768 dirty:86 writeback:0 [ 145.976444][ T8172] slab_reclaimable:10330 slab_unreclaimable:96158 [ 145.976444][ T8172] mapped:29244 shmem:2878 pagetables:1219 [ 145.976444][ T8172] sec_pagetables:0 bounce:0 [ 145.976444][ T8172] kernel_misc_reclaimable:0 [ 145.976444][ T8172] free:1330176 free_pcp:8416 free_cma:0 [ 146.086188][ T8172] Node 0 active_anon:24276kB inactive_anon:0kB active_file:0kB inactive_file:170988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116776kB dirty:344kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12832kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 146.128744][ T8172] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 146.274610][ T8172] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.311239][ T8172] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 146.319407][ T8172] Node 0 DMA32 free:1368872kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23876kB inactive_anon:0kB active_file:0kB inactive_file:170988kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2548584kB mlocked:0kB bounce:0kB free_pcp:33076kB local_pcp:19116kB free_cma:0kB [ 146.366578][ T8172] lowmem_reserve[]: 0 0 0 0 0 [ 146.374184][ T8172] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.441239][ T8172] lowmem_reserve[]: 0 0 0 0 0 [ 146.449723][ T8172] Node 1 Normal free:3943844kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.520626][ T8191] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 146.530004][ T8172] lowmem_reserve[]: 0 0 0 0 0 [ 146.543934][ T8172] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.562270][ T8172] Node 0 DMA32: 864*4kB (UME) 667*8kB (UME) 391*16kB (UME) 85*32kB (UME) 50*64kB (UME) 30*128kB (UM) 25*256kB (UM) 20*512kB (UME) 8*1024kB (UM) 12*2048kB (UME) 316*4096kB (UM) = 1368552kB [ 146.590731][ T8172] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 146.616232][ T8172] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 6*16kB (UM) 7*32kB (UM) 3*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943844kB [ 146.674078][ T8172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.707329][ T8172] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.736183][ T8172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.756018][ T8172] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.783513][ T8172] 44084 total pagecache pages [ 146.803791][ T8172] 0 pages in swap cache [ 146.814306][ T8172] Free swap = 124996kB [ 146.825843][ T8172] Total swap = 124996kB [ 146.834407][ T8172] 2097051 pages RAM [ 146.839507][ T8172] 0 pages HighMem/MovableOnly [ 146.844956][ T8172] 428225 pages reserved [ 146.849185][ T8172] 0 pages cma reserved [ 147.340966][ T8231] netlink: 176 bytes leftover after parsing attributes in process `syz.2.652'. [ 147.374972][ T8226] ip6gre2: entered allmulticast mode [ 147.385395][ T8232] netlink: 176 bytes leftover after parsing attributes in process `syz.2.652'. [ 147.504388][ T8233] netlink: 'syz.4.651': attribute type 21 has an invalid length. [ 147.520115][ T8233] netlink: 128 bytes leftover after parsing attributes in process `syz.4.651'. [ 147.531563][ T8233] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 147.542371][ T8233] netlink: 'syz.4.651': attribute type 5 has an invalid length. [ 147.553045][ T8233] netlink: 3 bytes leftover after parsing attributes in process `syz.4.651'. [ 147.566395][ T8233] netlink: 'syz.4.651': attribute type 21 has an invalid length. [ 147.575106][ T8233] netlink: 128 bytes leftover after parsing attributes in process `syz.4.651'. [ 147.586287][ T8233] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 147.596832][ T8233] netlink: 'syz.4.651': attribute type 5 has an invalid length. [ 147.606293][ T8233] netlink: 3 bytes leftover after parsing attributes in process `syz.4.651'. [ 147.695334][ T8241] syzkaller0: entered promiscuous mode [ 147.703262][ T8241] syzkaller0: entered allmulticast mode [ 147.833174][ T8248] netlink: 32 bytes leftover after parsing attributes in process `syz.0.657'. [ 150.403767][ T8236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.423436][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 150.456982][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 150.962673][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 150.977042][ T8291] netlink: 'syz.0.667': attribute type 58 has an invalid length. [ 151.017393][ T8291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'. [ 151.037997][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 151.173323][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 151.206344][ T8303] netlink: 'syz.3.670': attribute type 18 has an invalid length. [ 151.233548][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 151.287372][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 151.354660][ T8309] netlink: 104 bytes leftover after parsing attributes in process `syz.4.671'. [ 151.367754][ T8303] netlink: 'syz.3.670': attribute type 18 has an invalid length. [ 151.385063][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 151.414603][ T8317] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 154.259159][ T8309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.569665][ T8380] Cannot find set identified by id 0 to match [ 154.764304][ T8390] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.803622][ T8380] bond3: Removing last ns target with arp_interval on [ 155.184104][ T8405] macvtap1: entered promiscuous mode [ 155.213387][ T8405] macvtap1: entered allmulticast mode [ 155.243560][ T8405] veth1_vlan: entered allmulticast mode [ 155.781289][ T8441] __nla_validate_parse: 2 callbacks suppressed [ 155.781313][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 156.333806][ T8453] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 158.261867][ T8413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.811917][ T8483] netlink: 224 bytes leftover after parsing attributes in process `syz.0.715'. [ 159.190118][ T8491] netlink: 'syz.3.718': attribute type 19 has an invalid length. [ 159.899416][ T8513] syzkaller0: entered promiscuous mode [ 159.918590][ T8513] syzkaller0: entered allmulticast mode [ 159.938162][ T8515] syzkaller0: entered promiscuous mode [ 159.947867][ T8515] syzkaller0: entered allmulticast mode [ 160.010188][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 160.128067][ T8515] tipc: Enabled bearer , priority 0 [ 160.219428][ T8514] tipc: Resetting bearer [ 160.258942][ T8514] tipc: Disabling bearer [ 160.416722][ T8530] lo: entered allmulticast mode [ 160.443276][ T8530] tunl0: entered allmulticast mode [ 160.521863][ T8530] gre0: entered allmulticast mode [ 160.611200][ T8530] gretap0: entered allmulticast mode [ 160.633085][ T8530] erspan0: left promiscuous mode [ 160.644292][ T8530] erspan0: entered allmulticast mode [ 160.652542][ T8530] ip_vti0: entered allmulticast mode [ 160.662378][ T8530] ip6_vti0: entered allmulticast mode [ 160.670602][ T8530] sit0: entered allmulticast mode [ 160.687599][ T8530] ip6tnl0: entered allmulticast mode [ 160.698536][ T8530] ip6gre0: entered allmulticast mode [ 160.713669][ T8530] syz_tun: entered allmulticast mode [ 160.966685][ T8545] netlink: 156 bytes leftover after parsing attributes in process `syz.3.736'. [ 160.999970][ T8545] netlink: 156 bytes leftover after parsing attributes in process `syz.3.736'. [ 161.167485][ T8553] netlink: 104 bytes leftover after parsing attributes in process `syz.1.738'. [ 161.199717][ T8554] netlink: 'syz.4.739': attribute type 142 has an invalid length. [ 161.275604][ T8559] netlink: 'syz.0.742': attribute type 4 has an invalid length. [ 161.304348][ T8560] vlan3: entered allmulticast mode [ 161.310318][ T8560] bond0: entered allmulticast mode [ 161.330527][ T8563] netlink: 'syz.0.742': attribute type 4 has an invalid length. [ 161.335229][ T8561] ip6gre1: entered promiscuous mode [ 161.348159][ T8561] ip6gre1: entered allmulticast mode [ 161.602765][ T8571] syzkaller1: entered promiscuous mode [ 161.632231][ T8571] syzkaller1: entered allmulticast mode [ 161.984535][ T8581] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 162.062704][ T8581] bond8 (unregistering): Released all slaves [ 162.194901][ T8596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.747'. [ 162.283216][ T8600] netlink: 'syz.1.747': attribute type 178 has an invalid length. [ 162.335797][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 162.460192][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'. [ 162.812747][ T8616] syzkaller0: entered promiscuous mode [ 162.861726][ T8616] syzkaller0: entered allmulticast mode [ 162.898800][ T8619] netlink: 48 bytes leftover after parsing attributes in process `syz.0.757'. [ 162.944237][ T8625] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 162.984193][ T8625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.758'. [ 163.024187][ T8625] block nbd1: not configured, cannot reconfigure [ 163.680823][ T8651] syzkaller0: entered promiscuous mode [ 163.693243][ T8651] syzkaller0: entered allmulticast mode [ 163.722369][ T8650] syzkaller0: entered promiscuous mode [ 163.730899][ T8650] syzkaller0: entered allmulticast mode [ 163.998071][ T8667] netlink: 144 bytes leftover after parsing attributes in process `syz.1.772'. [ 164.483547][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'. [ 164.632058][ T8693] nbd: illegal input index -2147221532 [ 164.903832][ T8704] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 164.953558][ T8704] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 165.034531][ T8706] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 165.770884][ T8738] xt_hashlimit: size too large, truncated to 1048576 [ 165.931129][ T8757] syzkaller0: entered promiscuous mode [ 165.939559][ T8757] syzkaller0: entered allmulticast mode [ 166.238085][ T8761] geneve3: entered promiscuous mode [ 166.245842][ T5965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 55231 - 0 [ 166.256765][ T5965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 55231 - 0 [ 166.272315][ T5965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 55231 - 0 [ 166.283128][ T5965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 55231 - 0 [ 166.457385][ T8736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.469303][ T8752] netlink: 'syz.1.799': attribute type 23 has an invalid length. [ 166.652352][ T8767] __nla_validate_parse: 6 callbacks suppressed [ 166.652368][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 166.698703][ T8770] atomic_op ffff88802338a998 conn xmit_atomic 0000000000000000 [ 166.708433][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 166.742448][ T8767] macsec1: entered promiscuous mode [ 166.751087][ T8767] bridge0: entered promiscuous mode [ 166.759459][ T8767] macsec1: entered allmulticast mode [ 166.764968][ T8767] bridge0: entered allmulticast mode [ 166.781592][ T8767] bridge0: port 4(macsec1) entered blocking state [ 166.802889][ T8767] bridge0: port 4(macsec1) entered disabled state [ 166.823262][ T8767] bridge0: left allmulticast mode [ 166.858239][ T5729] bridge0: left promiscuous mode [ 166.885154][ T8780] netlink: 'syz.3.808': attribute type 83 has an invalid length. [ 167.070922][ T8786] netlink: 248 bytes leftover after parsing attributes in process `syz.2.810'. [ 167.100252][ T8787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.107212][ T8786] netlink: 140 bytes leftover after parsing attributes in process `syz.2.810'. [ 167.424985][ T8805] netlink: 92 bytes leftover after parsing attributes in process `syz.0.818'. [ 167.509671][ T8805] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.703166][ T8817] netlink: 'syz.1.820': attribute type 39 has an invalid length. [ 168.012089][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 168.074323][ T8828] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 168.117237][ T8828] netlink: 60 bytes leftover after parsing attributes in process `syz.0.824'. [ 168.188935][ T5742] IPVS: starting estimator thread 0... [ 168.205786][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'. [ 168.234058][ T8839] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 168.296905][ T8840] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 168.341289][ T8846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.350555][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'. [ 168.365962][ T8837] IPVS: using max 31 ests per chain, 74400 per kthread [ 168.572858][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 168.763086][ T5965] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 168.829047][ T8865] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 168.871327][ T5965] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.912220][ T5965] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.943900][ T8869] netlink: 'syz.3.834': attribute type 4 has an invalid length. [ 168.995204][ T5965] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.277036][ T8884] bond4 (unregistering): Released all slaves [ 170.213404][ T8931] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.114539][ T8943] syzkaller0: entered promiscuous mode [ 172.134498][ T8943] syzkaller0: entered allmulticast mode [ 172.175045][ T8943] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 172.205034][ T8943] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 172.220307][ T8954] __nla_validate_parse: 2 callbacks suppressed [ 172.220322][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 172.555629][ T8970] netlink: 72 bytes leftover after parsing attributes in process `syz.2.856'. [ 172.796619][ T8913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.824273][ T8949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.122089][ T8985] xfrm1: entered allmulticast mode [ 173.455266][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 173.669810][ T9013] syzkaller0: entered promiscuous mode [ 173.675332][ T9013] syzkaller0: entered allmulticast mode [ 173.815739][ T9022] tipc: Started in network mode [ 173.851352][ T9022] tipc: Node identity c2139b12ed1c, cluster identity 4711 [ 173.922635][ T9022] tipc: Enabled bearer , priority 0 [ 173.953209][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 174.010577][ T9012] tipc: Resetting bearer [ 174.085885][ T9012] tipc: Disabling bearer [ 174.132165][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 174.607596][ T9059] syzkaller0: entered promiscuous mode [ 174.625355][ T9059] syzkaller0: entered allmulticast mode [ 174.802379][ T9070] xt_TCPMSS: Only works on TCP SYN packets [ 175.309653][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.316657][ T5630] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 175.543323][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 175.911577][ T9119] netlink: 104 bytes leftover after parsing attributes in process `syz.3.887'. [ 176.052431][ T9125] netlink: 76 bytes leftover after parsing attributes in process `syz.2.889'. [ 176.070933][ T29] audit: type=1804 audit(1785187814.029:6): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.890" name="/newroot/138/cgroup.controllers" dev="tmpfs" ino=728 res=1 errno=0 [ 176.144411][ T29] audit: type=1800 audit(1785187814.029:7): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.890" name="cgroup.controllers" dev="tmpfs" ino=728 res=0 errno=0 [ 176.328839][ T9133] netlink: 48 bytes leftover after parsing attributes in process `syz.0.891'. [ 176.566965][ T9141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.622244][ T9146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.689520][ T9145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'. [ 177.413333][ T9176] syzkaller0: entered promiscuous mode [ 177.426415][ T9176] syzkaller0: entered allmulticast mode [ 177.804023][ T9198] __nla_validate_parse: 2 callbacks suppressed [ 177.804080][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 178.035678][ T9212] nbd: must specify a device to reconfigure [ 178.340186][ T9229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.474084][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 178.494339][ T9233] openvswitch: netlink: Missing key (keys=40, expected=80) [ 178.575617][ T9235] syzkaller0: entered promiscuous mode [ 178.584356][ T9235] syzkaller0: entered allmulticast mode [ 178.612274][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.924'. [ 178.691790][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.924'. [ 178.702945][ T9206] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 179.099629][ T9257] netlink: 248 bytes leftover after parsing attributes in process `syz.4.931'. [ 179.144177][ T9257] netlink: 52 bytes leftover after parsing attributes in process `syz.4.931'. [ 179.217412][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.932'. [ 179.225299][ T9261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'. [ 179.269899][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.932'. [ 179.491293][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.937'. [ 179.535549][ T9274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.626945][ T9276] syzkaller0: entered promiscuous mode [ 179.639760][ T9276] syzkaller0: entered allmulticast mode [ 179.946529][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 180.364504][ T9315] netlink: 'syz.2.950': attribute type 3 has an invalid length. [ 181.153736][ T9351] xt_hashlimit: size too large, truncated to 1048576 [ 181.188240][ T9351] xt_hashlimit: max too large, truncated to 1048576 [ 181.230747][ T9351] xt_hashlimit: overflow, rate too high: 0 [ 181.508048][ T9365] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 181.538189][ T9338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.569129][ T9347] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 181.847522][ T9375] netlink: 'syz.2.965': attribute type 11 has an invalid length. [ 181.874342][ T9375] netlink: 'syz.2.965': attribute type 11 has an invalid length. [ 181.883163][ T9365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 182.100919][ T9383] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 182.143348][ T5962] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.570801][ T9406] netlink: 'syz.0.971': attribute type 62 has an invalid length. [ 182.799383][ T9416] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 182.823817][ T9416] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 183.264998][ T9436] sctp: [Deprecated]: syz.4.982 (pid 9436) Use of int in max_burst socket option deprecated. [ 183.264998][ T9436] Use struct sctp_assoc_value instead [ 183.346720][ T9437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.604295][ T9414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.241445][ T9458] __nla_validate_parse: 6 callbacks suppressed [ 184.241463][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 184.439268][ T9484] xt_hashlimit: size too large, truncated to 1048576 [ 184.467427][ T9484] xt_hashlimit: max too large, truncated to 1048576 [ 184.505774][ T9484] xt_hashlimit: invalid rate [ 184.712298][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 185.029318][ T9502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.082058][ T9502] bond5 (unregistering): Released all slaves [ 185.155250][ T9515] bond3 (unregistering): Released all slaves [ 185.272798][ T9519] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 185.405651][ T9525] lo: entered allmulticast mode [ 185.414824][ T9525] tunl0: entered allmulticast mode [ 185.424312][ T9525] gre0: entered allmulticast mode [ 185.438544][ T9525] gretap0: entered allmulticast mode [ 185.449326][ T9525] erspan0: entered allmulticast mode [ 185.459420][ T9525] ip_vti0: entered allmulticast mode [ 185.468380][ T9525] ip6_vti0: entered allmulticast mode [ 185.479251][ T9525] sit0: entered allmulticast mode [ 185.494307][ T9525] ip6tnl0: entered allmulticast mode [ 185.505058][ T9525] ip6gre0: entered allmulticast mode [ 185.523307][ T9529] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 185.532341][ T9525] syz_tun: entered allmulticast mode [ 185.723328][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 186.026670][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.042589][ T9458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.714498][ T9573] netlink: 'syz.2.1013': attribute type 23 has an invalid length. [ 188.368323][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1020'. [ 188.401449][ T9610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1020'. [ 188.444939][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1021'. [ 188.476661][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1021'. [ 188.643283][ T9620] x_tables: unsorted underflow at hook 4 [ 188.701384][ T9624] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 1, id = 0 [ 188.834790][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 188.933483][ T9628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.942833][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 188.952647][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 188.965234][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 188.973990][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 188.983690][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 188.992530][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 189.001364][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 189.009844][ T9628] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 189.400170][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 189.412755][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1032'. [ 189.504837][ T9661] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 190.586524][ T9668] geneve4: entered promiscuous mode [ 190.592481][ T9668] geneve4: entered allmulticast mode [ 190.604413][ T3362] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.622208][ T3362] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.633059][ T3362] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.644093][ T3362] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 191.238585][ T9602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.489684][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1039'. [ 191.550783][ T9682] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1039'. [ 191.989448][ T9702] gretap0: refused to change device tx_queue_len [ 192.013172][ T9702] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 192.202894][ T9715] gtp1: entered promiscuous mode [ 192.226592][ T9715] gtp1: entered allmulticast mode [ 192.357237][ T9723] bond3: (slave veth0_to_bond): making interface the new active one [ 192.371082][ T9723] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.432799][ T9723] macvlan0: entered promiscuous mode [ 192.439251][ T9723] macvlan0: entered allmulticast mode [ 192.449089][ T9723] bond3: entered promiscuous mode [ 192.455670][ T9723] veth0_to_bond: entered promiscuous mode [ 192.489211][ T9723] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 192.529911][ T9723] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 192.551406][ T9723] bond3: left promiscuous mode [ 192.558790][ T9723] veth0_to_bond: left promiscuous mode [ 192.704899][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 194.098379][ T9787] ip_tables: iptables: counters copy to user failed while replacing table [ 194.189276][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.195017][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208473][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.280836][ T9790] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1067'. [ 194.319891][ T9792] validate_nla: 60 callbacks suppressed [ 194.319922][ T9792] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 194.353999][ T9794] openvswitch: netlink: Message has 8 unknown bytes. [ 194.367082][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 194.408016][ T9792] bond0: option mode: unable to set because the bond device has slaves [ 194.452864][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1068'. [ 194.494551][ T9798] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 194.899505][ T9799] veth3: entered allmulticast mode [ 194.920016][ T9799] bond5: (slave veth3): Enslaving as an active interface with a down link [ 194.982911][ T9815] sock: sock_set_timeout: `syz.0.1073' (pid 9815) tries to set negative timeout [ 195.259206][ T9823] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1075'. [ 195.572192][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 196.871307][ T9874] bond4: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 196.909679][ T9874] bond4 (unregistering): Released all slaves [ 197.072606][ T9878] bond6: invalid ARP target 0.0.0.0 specified for addition [ 197.079952][ T9878] bond6: option arp_ip_target: invalid value (0) [ 197.089653][ T9878] bond6 (unregistering): Released all slaves [ 197.545471][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'. [ 197.813048][ T9913] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1099'. [ 197.909023][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1101'. [ 198.103270][ T9928] netlink: 'syz.4.1103': attribute type 4 has an invalid length. [ 198.945526][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 199.091286][ T9965] netlink: 'syz.3.1113': attribute type 15 has an invalid length. [ 199.150820][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'. [ 199.261227][ T9974] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.013848][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.082593][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.124201][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.158172][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.189550][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.221511][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.299943][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.365507][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.378262][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 200.415290][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1123'. [ 200.435565][T10010] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 200.580565][T10013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.225335][T10038] openvswitch: netlink: Message has 252 unknown bytes. [ 201.391414][ T5629] Bluetooth: hci2: command 0x0401 tx timeout [ 201.392270][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 201.398515][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 201.403757][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.467295][ T5629] Bluetooth: hci4: command tx timeout [ 201.894032][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.969972][T10070] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 202.165001][T10078] tipc: Enabled bearer , priority 0 [ 202.191194][T10078] syzkaller0: entered promiscuous mode [ 202.206465][T10078] syzkaller0: entered allmulticast mode [ 202.239172][T10078] sctp: [Deprecated]: syz.4.1139 (pid 10078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.239172][T10078] Use struct sctp_sack_info instead [ 202.279444][T10074] netlink: 'syz.3.1135': attribute type 1 has an invalid length. [ 202.320212][T10078] tipc: Resetting bearer [ 202.498735][T10077] tipc: Resetting bearer [ 202.533696][T10077] tipc: Disabling bearer [ 202.859616][T10108] netlink: 'syz.4.1148': attribute type 18 has an invalid length. [ 202.909083][ T5962] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.942062][ T5962] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.963068][ T5962] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.979202][ T5962] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.209600][T10121] bond2: (slave erspan0): Releasing active interface [ 203.250722][T10121] bridge_slave_0: left allmulticast mode [ 203.273757][T10121] bridge_slave_0: left promiscuous mode [ 203.299737][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.347398][T10121] bridge_slave_1: left allmulticast mode [ 203.358164][T10121] bridge_slave_1: left promiscuous mode [ 203.364181][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.395592][T10121] bond0: (slave bond_slave_0): Releasing backup interface [ 203.435297][T10121] bond0: (slave bond_slave_1): Releasing backup interface [ 203.476591][T10121] team0: Port device team_slave_0 removed [ 203.544863][T10121] team0: Port device team_slave_1 removed [ 203.580144][T10121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.634902][T10121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.671985][T10142] openvswitch: netlink: Missing key (keys=40, expected=100) [ 203.851088][T10146] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.155828][T10199] erspan0: entered promiscuous mode [ 205.594869][T10223] __nla_validate_parse: 56 callbacks suppressed [ 205.594888][T10223] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1183'. [ 205.660691][T10227] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1184'. [ 205.683223][T10223] x_tables: unsorted underflow at hook 1 [ 205.753993][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 205.768097][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 205.899668][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 205.946499][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 206.228676][T10252] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ē–½mŌ%AÆśĘ’AZųZ“”ŒbĘŗ„ž ąų§%¹ [ 208.829319][T10292] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1197'. [ 209.089012][T10306] block nbd0: not configured, cannot reconfigure [ 209.158290][T10306] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 209.607278][T10324] macvlan2: entered promiscuous mode [ 209.630918][T10324] macvlan2: entered allmulticast mode [ 209.867928][T10329] netlink: 'syz.4.1210': attribute type 21 has an invalid length. [ 209.888373][T10329] netlink: 'syz.4.1210': attribute type 22 has an invalid length. [ 209.941064][T10329] netlink: 'syz.4.1210': attribute type 23 has an invalid length. [ 209.995165][T10329] netlink: 'syz.4.1210': attribute type 25 has an invalid length. [ 210.056936][T10329] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1210'. [ 210.103128][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 210.196438][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.225052][T10338] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1213'. [ 210.331155][T10343] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 210.397343][T10343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.616863][T10357] __nla_validate_parse: 1 callbacks suppressed [ 210.616880][T10357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1218'. [ 210.642555][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 210.721590][T10354] netlink: 'syz.0.1219': attribute type 2 has an invalid length. [ 211.053807][T10371] syzkaller0: entered promiscuous mode [ 211.067165][T10371] syzkaller0: entered allmulticast mode [ 211.252782][T10382] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 211.264134][T10381] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 211.278929][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 211.291548][T10379] block nbd0: Unsupported socket: should be TCP or UNIX. [ 211.727179][T10406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1231'. [ 211.765547][T10408] FAULT_INJECTION: forcing a failure. [ 211.765547][T10408] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 211.828101][T10408] CPU: 0 UID: 0 PID: 10408 Comm: syz.2.1232 Not tainted syzkaller #0 PREEMPT(full) [ 211.828131][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 211.828141][T10408] Call Trace: [ 211.828149][T10408] [ 211.828156][T10408] dump_stack_lvl+0xe8/0x150 [ 211.828189][T10408] should_fail_ex+0x40c/0x560 [ 211.828219][T10408] _copy_to_user+0x31/0xb0 [ 211.828241][T10408] simple_read_from_buffer+0xe1/0x170 [ 211.828273][T10408] proc_fail_nth_read+0x1bb/0x230 [ 211.828304][T10408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.828333][T10408] ? rw_verify_area+0x24a/0x4c0 [ 211.828364][T10408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.828400][T10408] vfs_read+0x213/0xa80 [ 211.828423][T10408] ? __pfx___mutex_lock+0x10/0x10 [ 211.828446][T10408] ? __pfx_vfs_read+0x10/0x10 [ 211.828467][T10408] ? __fget_files+0x2a/0x420 [ 211.828496][T10408] ? __fget_files+0x3a2/0x420 [ 211.828520][T10408] ? __fget_files+0x2a/0x420 [ 211.828554][T10408] ksys_read+0x150/0x270 [ 211.828575][T10408] ? __pfx_ksys_read+0x10/0x10 [ 211.828602][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.828623][T10408] do_syscall_64+0x174/0x580 [ 211.828642][T10408] ? trace_irq_disable+0x3b/0x140 [ 211.828667][T10408] ? clear_bhb_loop+0x40/0x90 [ 211.828691][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.828710][T10408] RIP: 0033:0x7ff8b8f5e6ce [ 211.828728][T10408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.828743][T10408] RSP: 002b:00007ff8b9e3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.828763][T10408] RAX: ffffffffffffffda RBX: 00007ff8b9e3e6c0 RCX: 00007ff8b8f5e6ce [ 211.828777][T10408] RDX: 000000000000000f RSI: 00007ff8b9e3e0a0 RDI: 0000000000000008 [ 211.828789][T10408] RBP: 00007ff8b9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.828801][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.828811][T10408] R13: 00007ff8b9226128 R14: 00007ff8b9226090 R15: 00007ffc69032b98 [ 211.828843][T10408] [ 212.062440][T10412] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 212.679576][T10440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 212.774400][T10444] netlink: 'syz.0.1242': attribute type 49 has an invalid length. [ 212.801115][T10447] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 212.952391][T10444] ip6gretap0: entered promiscuous mode [ 212.973167][T10444] ip6gretap0: entered allmulticast mode [ 213.433620][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 213.643576][T10477] xt_hashlimit: max too large, truncated to 1048576 [ 213.663210][T10477] No such timeout policy "syz1" [ 213.679759][T10477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 214.123154][T10495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.131243][T10495] IPv6: NLM_F_CREATE should be set when creating new route [ 214.138551][T10495] IPv6: NLM_F_CREATE should be set when creating new route [ 214.203853][T10495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.444862][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'. [ 214.883451][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 214.933892][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 215.030059][T10531] validate_nla: 1 callbacks suppressed [ 215.030090][T10531] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 215.080459][T10531] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 215.103265][T10542] netlink: 'syz.3.1264': attribute type 1 has an invalid length. [ 215.288722][T10542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.623270][T10565] openvswitch: netlink: nsh attr 200 is out of range max 3 [ 215.678288][T10565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.940958][T10584] __nla_validate_parse: 3 callbacks suppressed [ 215.940975][T10584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1278'. [ 216.002050][T10587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1279'. [ 216.359552][T10602] openvswitch: netlink: Key type 31 is not supported [ 216.535375][T10593] syz.1.1281 (10593) used greatest stack depth: 17544 bytes left [ 216.931300][T10618] netlink: 'syz.2.1291': attribute type 4 has an invalid length. [ 217.163741][T10632] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 217.220770][T10632] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 217.672416][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 218.083808][T10671] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1302'. [ 218.509743][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'. [ 218.723053][T10694] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 218.780544][T10700] netlink: 'syz.4.1311': attribute type 10 has an invalid length. [ 218.821460][T10690] macvlan2: entered promiscuous mode [ 218.848906][T10690] macvlan2: entered allmulticast mode [ 218.878491][T10690] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 218.926684][T10700] veth1_macvtap: left promiscuous mode [ 218.947876][T10700] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 218.962185][T10708] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 218.976794][T10708] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1312'. [ 218.997247][T10706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1313'. [ 219.319009][T10724] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1316'. [ 219.933399][T10749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1322'. [ 220.319607][T10762] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 220.545321][T10783] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 220.743632][T10795] netlink: 'syz.3.1330': attribute type 1 has an invalid length. [ 220.815270][T10799] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 220.935029][T10804] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 221.141541][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 221.246860][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 221.284673][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 221.342585][T10825] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 221.357109][T10823] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 221.372257][T10825] netlink: 'syz.0.1334': attribute type 2 has an invalid length. [ 221.888258][T10835] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 221.897606][T10835] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1341'. [ 221.908228][T10835] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 221.919841][T10837] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 222.078823][T10817] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 222.230423][T10846] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 222.242252][T10846] bond7 (unregistering): Released all slaves [ 222.273995][T10850] lo: entered promiscuous mode [ 222.299441][T10850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.494865][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 222.514324][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 222.521423][T10855] xt_bpf: check failed: parse error [ 222.661072][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'. [ 223.047248][T10875] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 223.121275][T10883] openvswitch: netlink: Missing key (keys=40, expected=100) [ 223.145673][T10881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.169885][T10884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.256551][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'. [ 223.288607][T10881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'. [ 223.346736][T10875] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.388727][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.419637][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1361'. [ 223.884597][T10918] block nbd0: not configured, cannot reconfigure [ 224.205128][T10930] syzkaller0: entered promiscuous mode [ 224.234517][T10930] syzkaller0: entered allmulticast mode [ 225.577648][T10995] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 225.597160][T10995] netlink: 'syz.3.1388': attribute type 2 has an invalid length. [ 225.667308][T10994] syzkaller0: entered promiscuous mode [ 225.698986][T10994] syzkaller0: entered allmulticast mode [ 225.872107][T11005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.495762][T11041] netlink: 'syz.0.1398': attribute type 1 has an invalid length. [ 226.662396][T11054] __nla_validate_parse: 12 callbacks suppressed [ 226.662412][T11054] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1401'. [ 226.793411][T11041] 8021q: adding VLAN 0 to HW filter on device bond10 [ 226.957350][T11047] syzkaller0: entered promiscuous mode [ 226.989134][T11047] syzkaller0: entered allmulticast mode [ 227.024986][T11061] syzkaller0: entered promiscuous mode [ 227.048471][T11061] syzkaller0: entered allmulticast mode [ 227.118137][T11047] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 227.181563][T11047] bond10: entered allmulticast mode [ 227.879415][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1408'. [ 228.064560][T11100] gtp1: entered promiscuous mode [ 228.432749][T11117] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1414'. [ 228.706730][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 228.737052][T11130] netlink: 'syz.3.1418': attribute type 1 has an invalid length. [ 228.919005][T11122] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 228.993535][T11122] bond5 (unregistering): Released all slaves [ 229.126742][T11154] x_tables: unsorted entry at hook 3 [ 229.175083][T11155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1420'. [ 229.528473][T11140] bridge5: entered promiscuous mode [ 229.545753][T11140] bond7: (slave bridge5): making interface the new active one [ 229.560195][T11140] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 229.572382][T11145] tap0: tun_chr_ioctl cmd 1074025672 [ 229.580278][T11145] tap0: ignored: set checksum disabled [ 229.612576][T11148] bridge6: entered promiscuous mode [ 229.625146][T11148] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 229.942617][T11174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.020531][T11179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.060122][T11179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.088132][T11178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'. [ 230.277381][T11188] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 230.353057][T11188] 8021q: adding VLAN 0 to HW filter on device bond11 [ 230.443622][T11194] bond11: (slave geneve5): making interface the new active one [ 230.452032][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 230.452084][T11188] openvswitch: netlink: Missing key (keys=40, expected=100) [ 230.479306][T11199] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1431'. [ 230.488511][T11194] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 230.505192][ T48] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 230.514313][ T5625] Bluetooth: hci4: link tx timeout [ 230.522858][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.542137][ T48] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 230.553557][ T48] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 230.573417][ T48] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 230.660168][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 230.674610][ T5962] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.685495][ T5962] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.695915][ T5962] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 230.708827][T11203] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1433'. [ 231.010874][T11213] bond0: (slave bond_slave_1): Releasing backup interface [ 231.898075][T11252] __nla_validate_parse: 2 callbacks suppressed [ 231.898127][T11252] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1445'. [ 232.141929][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 232.197933][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 232.513084][T11268] netlink: 'syz.3.1448': attribute type 12 has an invalid length. [ 232.596597][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 232.763111][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 233.109402][T11273] vlan3: entered promiscuous mode [ 233.132973][T11273] bridge0: entered promiscuous mode [ 233.569149][T11299] syzkaller1: entered promiscuous mode [ 233.599936][T11299] syzkaller1: entered allmulticast mode [ 233.758890][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 233.840421][T11315] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 234.533224][T11342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.876024][T11359] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1473'. [ 234.933248][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 234.949250][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1472'. [ 234.977841][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 235.549877][T11389] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 235.571184][T11390] netlink: 'syz.2.1481': attribute type 14 has an invalid length. [ 235.584685][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 235.603326][T11396] netlink: 'syz.0.1482': attribute type 32 has an invalid length. [ 235.679023][T11396] bond13: Setting coupled_control to off (0) [ 235.687079][T11390] netlink: 'syz.2.1481': attribute type 14 has an invalid length. [ 236.097741][T11416] netlink: 'syz.1.1486': attribute type 5 has an invalid length. [ 236.159261][T11416] geneve2: entered promiscuous mode [ 236.174956][T11416] geneve2: entered allmulticast mode [ 236.200182][ T5965] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 236.237113][ T5965] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 236.272722][ T5965] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 236.491452][T11428] netlink: 'syz.1.1490': attribute type 1 has an invalid length. [ 236.523645][T11428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.148383][T11450] __nla_validate_parse: 9 callbacks suppressed [ 237.148401][T11450] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1497'. [ 237.187287][T11450] netlink: 768 bytes leftover after parsing attributes in process `syz.1.1497'. [ 237.565899][T11459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.589904][T11466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1503'. [ 237.599797][T11464] batman_adv: batadv0: Adding interface: dummy0 [ 237.613159][T11464] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.639643][T11464] batman_adv: batadv0: Interface activated: dummy0 [ 238.058385][T11485] syzkaller0: entered promiscuous mode [ 238.071429][T11485] syzkaller0: entered allmulticast mode [ 238.104067][T11481] syzkaller0: entered promiscuous mode [ 238.129679][T11481] syzkaller0: entered allmulticast mode [ 238.191420][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'. [ 238.227200][T11481] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1507'. [ 238.246265][T11491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1509'. [ 238.276418][T11494] xt_bpf: check failed: parse error [ 238.278949][T11491] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1509'. [ 238.322886][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'. [ 238.718306][T11509] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 238.748662][T11509] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.1513'. [ 238.769890][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1513'. [ 239.234589][T11533] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 239.382609][T11543] netlink: 'syz.0.1523': attribute type 13 has an invalid length. [ 239.397798][T11545] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 240.559039][T11596] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 240.633041][T11596] netlink: 'syz.3.1539': attribute type 10 has an invalid length. [ 240.688607][T11596] dummy0: entered promiscuous mode [ 240.724956][T11604] x_tables: duplicate underflow at hook 1 [ 242.188317][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.445107][T11686] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 242.632574][T11686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.670280][T11697] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.697448][T11690] bond9: (slave veth0_to_bond): making interface the new active one [ 242.711446][T11690] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 242.799556][T11692] 8021q: adding VLAN 0 to HW filter on device bond10 [ 242.817841][T11692] bond9: (slave bond10): Enslaving as an active interface with a down link [ 242.966953][T11712] __nla_validate_parse: 7 callbacks suppressed [ 242.967002][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1568'. [ 243.015969][T11702] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 243.037360][T11702] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 243.057022][T11702] gretap2: entered promiscuous mode [ 243.071647][T11702] gretap2: entered allmulticast mode [ 243.103158][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 243.169833][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 243.208559][T11694] syzkaller0: entered promiscuous mode [ 243.224717][T11694] syzkaller0: entered allmulticast mode [ 243.300038][T11717] sctp: [Deprecated]: syz.0.1569 (pid 11717) Use of int in maxseg socket option. [ 243.300038][T11717] Use struct sctp_assoc_value instead [ 243.779795][T11747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1575'. [ 245.995232][T11769] sctp: [Deprecated]: syz.2.1581 (pid 11769) Use of int in max_burst socket option. [ 245.995232][T11769] Use struct sctp_assoc_value instead [ 246.094999][T11765] SET target dimension over the limit! [ 246.325041][T11785] netlink: 'syz.2.1585': attribute type 11 has an invalid length. [ 246.353366][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1587'. [ 246.951557][T11785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.974265][T11785] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 247.254245][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 247.264282][T11822] netlink: 'syz.2.1596': attribute type 5 has an invalid length. [ 247.293759][T11824] netlink: 'syz.1.1597': attribute type 21 has an invalid length. [ 247.296217][T11822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1596'. [ 247.433977][T11822] geneve3: entered promiscuous mode [ 247.468626][T11822] geneve3: entered allmulticast mode [ 247.495205][ T3362] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 256 - 0 [ 247.530755][ T3362] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 247.586718][ T3362] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 247.606145][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 247.622731][ T3362] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 247.676995][T11837] sctp: [Deprecated]: syz.3.1599 (pid 11837) Use of int in maxseg socket option. [ 247.676995][T11837] Use struct sctp_assoc_value instead [ 247.841054][ T29] audit: type=1800 audit(1785187885.809:8): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1604" name="memory.events" dev="tmpfs" ino=1667 res=0 errno=0 [ 247.918516][T11852] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 247.937325][T11852] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1605'. [ 247.967728][T11852] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1605'. [ 248.202043][T11856] geneve3: entered promiscuous mode [ 248.213800][T11856] geneve3: entered allmulticast mode [ 248.242865][ T3362] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 248.260192][ T3362] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 248.378232][ T3362] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 248.409902][T11870] netlink: 'syz.3.1611': attribute type 4 has an invalid length. [ 248.416859][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 248.434997][T11870] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1611'. [ 248.437036][T11867] macvtap0: entered allmulticast mode [ 248.455367][T11867] veth0_macvtap: entered allmulticast mode [ 248.497370][T11870] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 248.754204][T11881] netlink: 'syz.4.1616': attribute type 4 has an invalid length. [ 248.777951][T11882] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 248.811179][T11882] netlink: 'syz.2.1612': attribute type 2 has an invalid length. [ 248.851733][T11882] netlink: 'syz.2.1612': attribute type 5 has an invalid length. [ 248.905063][T11882] netlink: 'syz.2.1612': attribute type 2 has an invalid length. [ 248.940706][T11882] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1612'. [ 249.017876][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 249.042509][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 249.043682][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 249.614518][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1623'. [ 249.652810][T11919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1623'. [ 249.693695][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'. [ 249.726730][T11897] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1617'. [ 249.934320][ T5641] block nbd0: Receive control failed (result -32) [ 250.038716][T11929] xt_cluster: node mask cannot exceed total number of nodes [ 250.433494][T11946] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 250.472197][T11946] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 250.554097][T11937] syzkaller0: entered promiscuous mode [ 250.579437][T11937] syzkaller0: entered allmulticast mode [ 251.056965][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.126159][T11952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 253.140357][T11952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 253.187632][T11952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 253.323008][T11989] ip6gre3: entered promiscuous mode [ 253.348452][T11989] ip6gre3: entered allmulticast mode [ 253.391419][T11992] syzkaller1: entered promiscuous mode [ 253.447633][T11992] syzkaller1: entered allmulticast mode [ 253.515634][T11992] __nla_validate_parse: 5 callbacks suppressed [ 253.515662][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 253.586978][T11952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 253.610932][T11952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 253.649903][T11952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 253.692218][T12009] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1639'. [ 253.792571][T11952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 253.825499][T11952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 253.841651][T11952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 253.940477][T11952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 55231 - 0 [ 253.951708][T11952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 253.964553][T11952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 254.039116][T11969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.067121][T12015] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 254.184973][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.211781][ T48] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.226498][ T48] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 55231 - 0 [ 254.291425][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 254.331420][ T1163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.360704][ T1163] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.388109][ T1163] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 55231 - 0 [ 254.531936][ T5962] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.544765][ T5962] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.559596][ T5962] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 55231 - 0 [ 254.643176][ T3362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.669095][ T3362] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 254.690860][ T3362] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 55231 - 0 [ 254.910904][T12045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1651'. [ 254.942210][ T5641] block nbd1: Receive control failed (result -32) [ 255.202364][T12056] netlink: 'syz.4.1653': attribute type 13 has an invalid length. [ 255.415436][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1656'. [ 255.551155][T12071] Cannot find add_set index 0 as target [ 255.632420][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.639521][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.656652][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880798b1c00: rx timeout, send abort [ 255.667796][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880798b1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 256.159456][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 256.171689][T12092] netlink: 'syz.3.1664': attribute type 2 has an invalid length. [ 256.776726][T12121] dvmrp0: entered allmulticast mode [ 256.839278][T12125] bond7: entered promiscuous mode [ 256.844587][T12125] bond7: entered allmulticast mode [ 256.853724][T12125] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.076736][T12138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1675'. [ 257.449927][T12152] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1679'. [ 257.480163][T12152] batman_adv: batadv0: Interface deactivated: dummy0 [ 257.604007][T12152] batman_adv: batadv0: Removing interface: dummy0 [ 257.975248][T12170] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:0 [ 258.001553][T12173] netlink: 'syz.1.1687': attribute type 21 has an invalid length. [ 258.158493][T12173] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 258.178299][T12173] bond5 (unregistering): Released all slaves [ 258.196797][T12183] netlink: 'syz.0.1688': attribute type 21 has an invalid length. [ 258.209092][T12183] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.536011][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1693'. [ 258.558885][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 258.604155][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 258.675520][T12199] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1696'. [ 258.695991][T12199] xt_l2tp: v2 doesn't support IP mode [ 258.794146][T12203] netlink: 'syz.2.1697': attribute type 11 has an invalid length. [ 258.840184][T12203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1697'. [ 259.287465][T12224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.530721][T12232] netlink: 'syz.3.1706': attribute type 23 has an invalid length. [ 259.925905][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1712'. [ 260.158820][T12258] veth0: entered promiscuous mode [ 260.177754][T12258] veth0: left promiscuous mode [ 260.201168][T12258] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 260.434594][T12269] sctp: [Deprecated]: syz.0.1717 (pid 12269) Use of int in maxseg socket option. [ 260.434594][T12269] Use struct sctp_assoc_value instead [ 260.465323][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 260.793663][T12285] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1716'. [ 261.063084][T12296] openvswitch: netlink: Message has 1 unknown bytes. [ 261.118310][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 261.143750][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 261.224952][T12304] netlink: 'syz.1.1724': attribute type 1 has an invalid length. [ 261.268689][T12307] netlink: 'syz.1.1724': attribute type 1 has an invalid length. [ 261.621807][T12318] openvswitch: netlink: Flow key attr not present in new flow. [ 261.882366][T12330] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 263.006592][T12385] netlink: 'syz.3.1747': attribute type 11 has an invalid length. [ 263.099787][T12394] nftables ruleset with unbound set [ 263.284917][T12403] netlink: 'syz.4.1746': attribute type 4 has an invalid length. [ 263.485491][T12403] .`: renamed from bond0 (while UP) [ 263.610465][T12412] __nla_validate_parse: 9 callbacks suppressed [ 263.610499][T12412] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1752'. [ 263.637784][T12417] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 263.945326][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 264.340057][T12446] lo speed is unknown, defaulting to 1000 [ 264.346806][T12447] openvswitch: netlink: IPv4 tun info is not correct [ 264.404260][T12446] lo speed is unknown, defaulting to 1000 [ 264.445000][T12446] lo speed is unknown, defaulting to 1000 [ 264.450957][T12452] syzkaller0: entered promiscuous mode [ 264.457639][T12452] syzkaller0: entered allmulticast mode [ 264.492024][T12446] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 264.508889][T12446] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 264.528864][T12446] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 264.550832][T12446] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 264.577825][T12446] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 264.644876][T12446] lo speed is unknown, defaulting to 1000 [ 264.655679][T12446] lo speed is unknown, defaulting to 1000 [ 264.681016][T12446] lo speed is unknown, defaulting to 1000 [ 264.713068][T12446] lo speed is unknown, defaulting to 1000 [ 264.757813][T12446] lo speed is unknown, defaulting to 1000 [ 264.830157][T12458] netlink: 'syz.1.1766': attribute type 39 has an invalid length. [ 264.947275][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 265.104797][T12472] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 265.189319][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1772'. [ 265.345563][T12482] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 265.420896][T12482] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.444992][T12486] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 265.557695][T12488] netlink: 'syz.1.1776': attribute type 3 has an invalid length. [ 265.569332][T12488] netlink: 650 bytes leftover after parsing attributes in process `syz.1.1776'. [ 265.670956][T12492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1775'. [ 265.681768][T12492] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 265.751172][T12496] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1777'. [ 266.098888][T12476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.264827][T12510] netlink: zone id is out of range [ 266.282983][T12510] netlink: set zone limit has 4 unknown bytes [ 266.443862][T12522] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1786'. [ 266.816392][T12539] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 266.855247][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'. [ 267.206860][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 267.249987][T12563] netlink: 'syz.3.1800': attribute type 1 has an invalid length. [ 267.268890][T12563] netlink: 'syz.3.1800': attribute type 2 has an invalid length. [ 268.330704][T12619] netlink: 'syz.1.1811': attribute type 16 has an invalid length. [ 268.378799][T12619] netlink: 'syz.1.1811': attribute type 17 has an invalid length. [ 268.977038][T12619] lo: left allmulticast mode [ 268.995075][T12619] tunl0: left allmulticast mode [ 269.034388][T12619] gre0: left allmulticast mode [ 269.061352][T12619] gretap0: left allmulticast mode [ 269.089608][T12619] erspan0: left allmulticast mode [ 269.099998][T12619] ip_vti0: left allmulticast mode [ 269.117713][T12619] ip6_vti0: left allmulticast mode [ 269.124299][T12619] sit0: left allmulticast mode [ 269.131683][T12619] ip6tnl0: left allmulticast mode [ 269.145804][T12619] ip6gre0: left allmulticast mode [ 269.153530][T12619] syz_tun: left allmulticast mode [ 269.175634][T12619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.263673][T12619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.284233][T12631] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 269.288570][T12619] h: left promiscuous mode [ 269.340380][T12619] bond1: left allmulticast mode [ 269.346397][T12638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.384356][T12619] ip6gre2: left allmulticast mode [ 269.425903][T12619] xfrm1: left allmulticast mode [ 269.458714][T12641] netlink: 'syz.4.1819': attribute type 39 has an invalid length. [ 269.494685][T12619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.525362][T12619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.543425][T12619] vlan3: left promiscuous mode [ 269.551162][T12619] bridge0: left promiscuous mode [ 269.569214][T12619] geneve2: left promiscuous mode [ 269.574847][T12619] geneve2: left allmulticast mode [ 269.600461][T12619] gretap2: left promiscuous mode [ 269.605723][T12619] gretap2: left allmulticast mode [ 269.614461][T12619] geneve3: left promiscuous mode [ 269.621385][T12619] geneve3: left allmulticast mode [ 269.626669][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 269.636162][T12619] ip6gre3: left promiscuous mode [ 269.641600][T12619] ip6gre3: left allmulticast mode [ 270.091397][T12655] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 270.097866][T12659] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 270.202272][T12659] bond9: entered promiscuous mode [ 270.208557][T12659] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.231097][T12667] __nla_validate_parse: 3 callbacks suppressed [ 270.231114][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1829'. [ 270.321625][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1831'. [ 270.331300][T12673] netlink: 'syz.1.1831': attribute type 7 has an invalid length. [ 270.339565][T12673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1831'. [ 270.384125][T12674] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 270.405569][T12659] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.439086][T12659] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 270.471997][T12659] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 270.518514][T12659] bond9: (slave ip6gre2): making interface the new active one [ 270.541411][T12659] ip6gre2: entered promiscuous mode [ 270.558951][T12659] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 270.592962][T12672] ipvlan1: entered promiscuous mode [ 270.614065][T12672] ipvlan1: entered allmulticast mode [ 270.629951][T12672] veth0_vlan: entered allmulticast mode [ 270.654354][ T5962] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.698041][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.712234][ T5962] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.840437][T12682] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1832'. [ 270.924575][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.073255][T12688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.113094][T12693] netlink: 'syz.1.1835': attribute type 2 has an invalid length. [ 271.277662][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.432714][T12693] : entered promiscuous mode [ 272.033347][T12724] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1844'. [ 272.135227][T12728] xt_hashlimit: size too large, truncated to 1048576 [ 272.204015][T12728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.238949][T12728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.285760][T12731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.768870][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 272.834322][T12753] bond5: Invalid ad_actor_system MAC address. [ 272.843293][T12753] bond5: option ad_actor_system: invalid value (1) [ 272.858639][T12753] bond5 (unregistering): Released all slaves [ 272.942093][T12758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 273.160788][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 273.172096][T12767] xt_ipcomp: unknown flags 1D [ 273.189458][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 273.268406][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1854'. [ 273.414818][T12788] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 273.642892][T12788] 8021q: adding VLAN 0 to HW filter on device bond10 [ 273.807640][T12782] syzkaller0: entered promiscuous mode [ 273.814745][T12782] syzkaller0: entered allmulticast mode [ 275.146327][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 276.291311][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1867'. [ 276.867298][T12868] syzkaller1: entered promiscuous mode [ 276.892946][T12868] syzkaller1: entered allmulticast mode [ 277.105081][T12887] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 277.124676][T12887] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1878'. [ 277.185519][T12892] netlink: zone id is out of range [ 277.192145][T12892] netlink: del zone limit has 4 unknown bytes [ 277.382590][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1881'. [ 277.393802][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1881'. [ 277.674759][T12912] netlink: 'syz.0.1887': attribute type 21 has an invalid length. [ 277.683205][T12912] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1887'. [ 277.715901][T12912] netlink: 'syz.0.1887': attribute type 4 has an invalid length. [ 277.737380][T12912] netlink: 'syz.0.1887': attribute type 5 has an invalid length. [ 277.747029][T12912] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1887'. [ 277.840840][T12921] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1889'. [ 278.121194][T12933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 278.135242][T12932] xt_TCPMSS: Only works on TCP SYN packets [ 278.202455][T12929] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1891'. [ 278.650327][T12954] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 278.778948][T12961] netlink: 'syz.4.1902': attribute type 3 has an invalid length. [ 278.825898][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1902'. [ 278.993290][T12968] syzkaller1: entered allmulticast mode [ 279.425377][T12981] netlink: 'syz.4.1908': attribute type 4 has an invalid length. [ 279.445092][T12981] netlink: 'syz.4.1908': attribute type 4 has an invalid length. [ 279.881726][T12984] bond5 (unregistering): Released all slaves [ 280.067069][T12997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.266329][T12992] bond14 (unregistering): Released all slaves [ 280.309518][T13000] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 280.515682][T13000] bond5: entered promiscuous mode [ 280.539011][T13000] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.712570][T13005] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.734101][T13005] bond5: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 280.747018][T13005] bond5: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 280.771011][T13005] bond5: (slave ip6gre4): making interface the new active one [ 280.786496][T13005] ip6gre4: entered promiscuous mode [ 280.819198][T13005] bond5: (slave ip6gre4): Enslaving as an active interface with an up link [ 280.854195][T13016] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 281.010472][T13016] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.561423][T13041] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 281.628408][T13040] geneve2: entered promiscuous mode [ 281.633693][T13040] geneve2: entered allmulticast mode [ 281.898806][T13056] team0: mtu less than device minimum [ 281.925423][T13057] team0: mtu less than device minimum [ 281.945256][T13055] netlink: 'syz.3.1930': attribute type 4 has an invalid length. [ 282.006005][T13055] __nla_validate_parse: 4 callbacks suppressed [ 282.006022][T13055] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1930'. [ 282.389493][T13074] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1934'. [ 282.524566][T13083] openvswitch: netlink: Flow actions attr not present in new flow. [ 282.539638][T13075] syzkaller0: entered promiscuous mode [ 282.567258][T13075] syzkaller0: entered allmulticast mode [ 282.608657][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 283.102032][T13110] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 283.289641][T13121] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.738921][T13138] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1949'. [ 283.786750][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.860104][T13141] xt_hashlimit: size too large, truncated to 1048576 [ 284.055892][T13159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1954'. [ 284.139478][T13148] bridge8: entered promiscuous mode [ 284.170010][T13148] bridge8: entered allmulticast mode [ 284.192486][T13148] team0: Port device bridge8 added [ 284.211254][T13147] bridge9: entered promiscuous mode [ 284.219607][T13147] bridge9: entered allmulticast mode [ 284.239781][T13147] team0: Port device bridge9 added [ 284.311615][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.415011][T13155] bridge_slave_0 (unregistering): left allmulticast mode [ 284.429874][T13155] bridge_slave_0 (unregistering): left promiscuous mode [ 284.446990][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.794597][T13180] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1960'. [ 284.838034][T13183] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1960'. [ 284.880430][T13180] netlink: 'syz.2.1960': attribute type 2 has an invalid length. [ 284.919447][T13180] netlink: 'syz.2.1960': attribute type 11 has an invalid length. [ 284.962189][T13180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1960'. [ 284.988900][T13188] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1961'. [ 285.196960][T13193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.254729][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 285.275277][T13203] netlink: 'syz.0.1963': attribute type 1 has an invalid length. [ 285.402953][T13203] 8021q: adding VLAN 0 to HW filter on device bond14 [ 285.443385][T13214] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 285.550321][T13214] macvlan2: entered promiscuous mode [ 285.592375][T13214] macvlan2: entered allmulticast mode [ 285.633227][T13214] bond14: entered promiscuous mode [ 285.657272][T13214] veth0_to_bond: entered promiscuous mode [ 285.682270][T13214] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.702240][T13214] bond14: left promiscuous mode [ 285.733039][T13214] veth0_to_bond: left promiscuous mode [ 286.173761][T13234] netlink: 'syz.2.1968': attribute type 14 has an invalid length. [ 287.036935][T13284] netlink: 'syz.4.1973': attribute type 17 has an invalid length. [ 287.070710][T13284] __nla_validate_parse: 3 callbacks suppressed [ 287.070744][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'. [ 287.151119][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1973'. [ 287.324701][T13284] gretap0: entered promiscuous mode [ 287.341125][T13284] gretap0: left promiscuous mode [ 287.870299][T13313] sctp: [Deprecated]: syz.4.1983 (pid 13313) Use of int in maxseg socket option. [ 287.870299][T13313] Use struct sctp_assoc_value instead [ 287.929914][T13317] sctp: [Deprecated]: syz.4.1983 (pid 13317) Use of int in maxseg socket option. [ 287.929914][T13317] Use struct sctp_assoc_value instead [ 288.072121][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 288.101396][T13324] lo: Caught tx_queue_len zero misconfig [ 288.895325][T13360] netlink: 'syz.2.1998': attribute type 4 has an invalid length. [ 288.903898][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 288.922507][T13361] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2000'. [ 288.941076][ T10] lo speed is unknown, defaulting to 1000 [ 288.947879][T13360] netlink: 'syz.2.1998': attribute type 4 has an invalid length. [ 288.963985][ T10] syś2: Port: 1 Link DOWN [ 288.971839][T13361] netlink: 'syz.1.2000': attribute type 5 has an invalid length. [ 288.986385][ T5749] lo speed is unknown, defaulting to 1000 [ 289.005493][ T5749] syś2: Port: 1 Link ACTIVE [ 289.277296][T13378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2001'. [ 289.330895][T13381] netlink: 'syz.2.2001': attribute type 2 has an invalid length. [ 289.463763][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 289.520822][T13390] openvswitch: netlink: IP tunnel TTL not specified. [ 289.669261][T13396] openvswitch: netlink: Multiple metadata blocks provided [ 289.759167][T13400] netlink: 'syz.4.2006': attribute type 11 has an invalid length. [ 289.782391][T13400] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.2006'. [ 289.873658][T13407] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 290.040689][T13413] syzkaller0: entered promiscuous mode [ 290.074904][T13413] syzkaller0: entered allmulticast mode [ 290.905705][T13448] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.2014'. [ 290.948208][T13448] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 291.012193][T13448] openvswitch: netlink: Message has 512 unknown bytes. [ 291.738595][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.076002][T13496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.342274][T13524] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 292.415796][T13524] bond14: (slave veth0_to_bond): Releasing backup interface [ 292.918440][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.046708][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.026990][T13498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.056791][T13532] ksmbd: Daemon and kernel module version mismatch. ksmbd: 241, kernel module: 1. User-space ksmbd should terminate. [ 295.166691][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.286000][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 295.336840][T13575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 295.351783][T13581] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2038'. [ 295.814604][T13599] ipvlan1: Caught tx_queue_len zero misconfig [ 296.318292][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.587090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.599371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.903927][T13635] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 296.911865][T13636] xfrm0: Caught tx_queue_len zero misconfig [ 296.936694][T13641] SET target dimension over the limit! [ 296.943284][T13635] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 296.960435][T13636] xt_hashlimit: size too large, truncated to 1048576 [ 296.999943][T13635] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 297.059750][T13635] netlink: 'syz.3.2052': attribute type 2 has an invalid length. [ 297.094216][T13635] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2052'. [ 297.454919][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.508951][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 297.642926][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.926867][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.013290][T13674] Bluetooth: MGMT ver 1.23 [ 298.038893][T13677] syzkaller1: entered promiscuous mode [ 298.061419][T13677] syzkaller1: entered allmulticast mode [ 298.625593][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.858179][T13677] ip6tnl0: Caught tx_queue_len zero misconfig [ 299.347465][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'. [ 299.777603][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.797437][T13748] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 299.903580][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 300.249545][T13773] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2078'. [ 300.289757][T13773] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 300.314472][T13773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.750872][T13798] netlink: 'syz.3.2083': attribute type 4 has an invalid length. [ 300.808522][T13799] netlink: 'syz.3.2083': attribute type 4 has an invalid length. [ 300.897755][T13804] netlink: 'syz.1.2085': attribute type 1 has an invalid length. [ 300.948684][ T355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.995616][T13798] 8021q: adding VLAN 0 to HW filter on device bond13 [ 301.045047][T13798] bond0: (slave bond13): Enslaving as an active interface with a down link [ 301.067088][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.151655][T13818] netlink: 'syz.1.2085': attribute type 10 has an invalid length. [ 301.178118][T13818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 301.361682][T13804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.544664][T13807] bond6: (slave veth5): Enslaving as an active interface with a down link [ 301.645775][T13811] bond6: (slave dummy0): making interface the new active one [ 301.675132][T13811] dummy0: entered promiscuous mode [ 301.695525][T13811] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 301.712725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.749197][T13818] bond6: (slave dummy0): Releasing active interface [ 301.828816][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 302.080806][T13814] syzkaller0: entered promiscuous mode [ 302.098449][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.143016][T13814] syzkaller0: entered allmulticast mode [ 302.534764][T13864] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2092'. [ 302.735173][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 303.060761][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 303.152292][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 303.317748][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.519223][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.759620][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.904499][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.049709][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.205033][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.732610][T13873] vlan0: entered promiscuous mode [ 310.101523][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.189512][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.327911][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.388023][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.601797][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'. [ 311.215173][T13922] netlink: 'syz.4.2105': attribute type 15 has an invalid length. [ 311.335761][T13922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2105'. [ 311.568555][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 311.611210][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 311.677183][ T355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.488864][T13943] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2107'. [ 312.648852][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2107'. [ 312.766703][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2107'. [ 312.869017][ T3362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.252807][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 313.615340][T13958] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2111'. [ 313.676215][T13961] netlink: 'syz.1.2112': attribute type 33 has an invalid length. [ 314.067907][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.539488][T13961] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 314.794767][T13961] bond7 (unregistering): Released all slaves [ 315.360326][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.681524][T13986] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 316.875322][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2123'. [ 317.253481][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.268189][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 318.014247][T14021] bond6: option xmit_hash_policy: invalid value (64) [ 318.114713][T14021] bond6 (unregistering): Released all slaves [ 318.183930][T14032] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 318.204116][T14033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2127'. [ 318.231575][T14032] netlink: 'syz.0.2129': attribute type 2 has an invalid length. [ 319.175348][T14046] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2131'. [ 319.636483][T14059] netlink: 'syz.0.2135': attribute type 13 has an invalid length. [ 320.608302][T14058] netlink: zone id is out of range [ 320.614301][T14058] netlink: zone id is out of range [ 320.621806][T14058] netlink: zone id is out of range [ 320.629444][T14058] netlink: zone id is out of range [ 320.635388][T14058] netlink: zone id is out of range [ 320.645016][T14058] netlink: zone id is out of range [ 320.652940][T14058] netlink: zone id is out of range [ 320.662239][T14058] netlink: zone id is out of range [ 320.716400][T14051] erspan0: entered promiscuous mode [ 320.736362][T14051] erspan0: left allmulticast mode [ 320.767244][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 320.828481][T14056] geneve0: entered promiscuous mode [ 320.844837][T14056] geneve0: entered allmulticast mode [ 322.396551][T14081] netlink: 'syz.4.2139': attribute type 12 has an invalid length. [ 322.441539][T14081] netlink: 'syz.4.2139': attribute type 29 has an invalid length. [ 322.498785][T14081] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2139'. [ 322.579428][T14081] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 322.649455][T14081] netlink: 'syz.4.2139': attribute type 2 has an invalid length. [ 322.785869][T14081] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2139'. [ 323.639859][T14098] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 323.862565][T14108] netlink: 'syz.2.2147': attribute type 4 has an invalid length. [ 324.532422][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2149'. [ 324.569751][ T46] lo speed is unknown, defaulting to 1000 [ 324.620321][ T46] syś2: Port: 1 Link DOWN [ 325.338642][T14131] netlink: 'syz.2.2152': attribute type 1 has an invalid length. [ 325.505794][T14133] netlink: 'syz.2.2152': attribute type 12 has an invalid length. [ 325.550921][T14133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2152'. [ 325.700117][T14141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2152'. [ 325.750883][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 326.415163][T14137] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 326.478442][T14138] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 326.760420][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2159'. [ 326.912968][T14133] veth7: entered promiscuous mode [ 326.949278][T14133] bond11: (slave veth7): Enslaving as a backup interface with a down link [ 327.064190][ T78] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 327.101062][T14141] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.291129][ T5965] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 334.989156][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.466076][ C0] sched: DL replenish lagged too much [ 344.536639][T14172] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 378.956744][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.107702][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 434.871645][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 440.970559][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 485.836071][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 485.843058][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5610/3:b..l [ 485.851439][ C1] rcu: (detected by 1, t=10503 jiffies, g=65485, q=628 ncpus=2) [ 485.859220][ C1] task:sshd-session state:R running task stack:25392 pid:5610 tgid:5610 ppid:5608 task_flags:0x400140 flags:0x00080800 [ 485.874065][ C1] Call Trace: [ 485.877371][ C1] [ 485.880320][ C1] __schedule+0x17d9/0x56c0 [ 485.884857][ C1] ? dev_hard_start_xmit+0x7c7/0x830 [ 485.890160][ C1] ? __pfx___schedule+0x10/0x10 [ 485.895035][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 485.900176][ C1] ? _raw_spin_unlock+0x28/0x50 [ 485.905059][ C1] ? sch_direct_xmit+0x32e/0x4c0 [ 485.910017][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 485.915403][ C1] preempt_schedule_common+0x82/0xd0 [ 485.920703][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 485.925841][ C1] preempt_schedule_thunk+0x16/0x40 [ 485.931070][ C1] __local_bh_enable_ip+0xe1/0x130 [ 485.936206][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 485.941334][ C1] __dev_queue_xmit+0x1edc/0x3820 [ 485.946384][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 485.951527][ C1] ? __lock_acquire+0x683/0x2cf0 [ 485.956511][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 485.961915][ C1] ? nf_hook+0xa1/0x3a0 [ 485.966117][ C1] ? ip_finish_output2+0x972/0x10b0 [ 485.971336][ C1] ip_finish_output2+0xbda/0x10b0 [ 485.976374][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 485.981593][ C1] ip_output+0x29f/0x450 [ 485.985887][ C1] ? ip_output+0x5a/0x450 [ 485.990235][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 485.995193][ C1] __ip_queue_xmit+0x10df/0x1b10 [ 486.000174][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 486.005148][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 486.010277][ C1] __tcp_transmit_skb+0x2d18/0x47c0 [ 486.015512][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 486.021092][ C1] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 486.027267][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.032485][ C1] ? tcp_small_queue_check+0x1b9/0x3a0 [ 486.037967][ C1] tcp_write_xmit+0x1bfa/0x6400 [ 486.042978][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 486.049086][ C1] __tcp_push_pending_frames+0x96/0x380 [ 486.054688][ C1] tcp_sendmsg_locked+0x498e/0x55c0 [ 486.059920][ C1] ? __lock_acquire+0x683/0x2cf0 [ 486.064926][ C1] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 486.070489][ C1] ? tcp_sendmsg+0x21/0x50 [ 486.074930][ C1] ? __local_bh_enable_ip+0xd8/0x130 [ 486.080232][ C1] tcp_sendmsg+0x2f/0x50 [ 486.084482][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 486.089525][ C1] sock_sendmsg_nosec+0x10e/0x180 [ 486.094578][ C1] sock_write_iter+0x2de/0x3e0 [ 486.099356][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 486.104664][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 486.110050][ C1] ? security_file_permission+0x75/0x260 [ 486.115705][ C1] vfs_write+0x612/0xba0 [ 486.119961][ C1] ? __pfx_vfs_write+0x10/0x10 [ 486.124742][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 486.130063][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.135288][ C1] ksys_write+0x150/0x270 [ 486.139628][ C1] ? __pfx_ksys_write+0x10/0x10 [ 486.144497][ C1] ? __x64_sys_write+0x2d/0x90 [ 486.149272][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.155356][ C1] do_syscall_64+0x174/0x580 [ 486.159963][ C1] ? clear_bhb_loop+0x40/0x90 [ 486.164652][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.170557][ C1] RIP: 0033:0x7f8e5d8a7407 [ 486.174978][ C1] RSP: 002b:00007fff025b9680 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 486.183399][ C1] RAX: ffffffffffffffda RBX: 00007f8e5e022300 RCX: 00007f8e5d8a7407 [ 486.191376][ C1] RDX: 000000000000001c RSI: 0000559bcc332520 RDI: 0000000000000004 [ 486.199355][ C1] RBP: 0000559bcc336050 R08: 0000000000000000 R09: 0000000000000000 [ 486.207345][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559ba88945d9 [ 486.215330][ C1] R13: 0000559ba88a6190 R14: 0000559bcc3357d0 R15: 0000000000000003 [ 486.223335][ C1] [ 486.226359][ C1] rcu: rcu_preempt kthread starved for 9875 jiffies! g65485 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 486.237473][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 486.247455][ C1] rcu: RCU grace-period kthread stack dump: [ 486.253348][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 486.266859][ C1] Call Trace: [ 486.270145][ C1] [ 486.273078][ C1] __schedule+0x17d9/0x56c0 [ 486.277593][ C1] ? __lock_acquire+0x683/0x2cf0 [ 486.282577][ C1] ? __pfx___schedule+0x10/0x10 [ 486.287471][ C1] ? schedule+0x90/0x2b0 [ 486.291737][ C1] schedule+0x164/0x2b0 [ 486.295907][ C1] schedule_timeout+0x152/0x2c0 [ 486.300776][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 486.306173][ C1] ? __pfx_process_timeout+0x10/0x10 [ 486.311486][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.317302][ C1] ? prepare_to_swait_event+0x322/0x350 [ 486.322864][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 486.327739][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.332948][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 486.338766][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 486.344951][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 486.350257][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 486.355476][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 486.361296][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 486.365904][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 486.371117][ C1] ? __kthread_parkme+0x71/0x1f0 [ 486.376068][ C1] ? __kthread_parkme+0x196/0x1f0 [ 486.381111][ C1] kthread+0x388/0x470 [ 486.385205][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 486.390429][ C1] ? __pfx_kthread+0x10/0x10 [ 486.395048][ C1] ret_from_fork+0x514/0xb70 [ 486.399668][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 486.404805][ C1] ? __switch_to+0xc89/0x1420 [ 486.409506][ C1] ? __pfx_kthread+0x10/0x10 [ 486.414117][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.418910][ C1] [ 486.421932][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 486.428371][ C1] CPU: 1 UID: 0 PID: 11689 Comm: kworker/R-bond9 Not tainted syzkaller #0 PREEMPT(full) [ 486.438181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 486.448248][ C1] Workqueue: bond9 bond_alb_monitor [ 486.453474][ C1] RIP: 0010:unwind_next_frame+0x1b58/0x2550 [ 486.459393][ C1] Code: c0 0f 85 db 02 00 00 c6 03 01 4c 8b 6c 24 50 4c 8b 7c 24 10 43 0f b6 04 27 84 c0 0f 85 6d 02 00 00 41 c7 06 00 00 00 00 31 ed 43 6d 59 0a 85 c0 74 3a e8 ba 40 34 00 84 c0 75 31 e8 31 6d 59 [ 486.479016][ C1] RSP: 0018:ffffc90000a07ee8 EFLAGS: 00000212 [ 486.485102][ C1] RAX: ffffc90000a09000 RBX: ffffc90000a07ff8 RCX: ffffc90000a08088 [ 486.493088][ C1] RDX: ffffc90000a08001 RSI: dffffc0000000000 RDI: ffffc90000a07ff0 [ 486.501071][ C1] RBP: 1ffffffff21db701 R08: ffffc90000a08070 R09: 0000000000000000 [ 486.509050][ C1] R10: ffffc90000a08038 R11: fffff52000141009 R12: ffffc90000a01000 [ 486.517033][ C1] R13: ffffffff8177827f R14: ffffc90000a07fe8 R15: ffffc90000a08080 [ 486.525018][ C1] FS: 0000000000000000(0000) GS:ffff888125050000(0000) knlGS:0000000000000000 [ 486.534044][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.540639][ C1] CR2: 00007ff8b8faeb00 CR3: 000000007aa40000 CR4: 00000000003526f0 [ 486.548633][ C1] Call Trace: [ 486.551924][ C1] [ 486.554787][ C1] ? arch_stack_walk+0xe3/0x150 [ 486.559692][ C1] ? unwind_next_frame+0x8f/0x2550 [ 486.564938][ C1] __unwind_start+0x514/0x660 [ 486.569682][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.575905][ C1] arch_stack_walk+0xe3/0x150 [ 486.580623][ C1] ? stack_trace_save+0xa9/0x100 [ 486.585594][ C1] stack_trace_save+0xa9/0x100 [ 486.590431][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 486.595913][ C1] ? kfree+0x1c5/0x640 [ 486.600456][ C1] ? __lock_acquire+0x683/0x2cf0 [ 486.605512][ C1] kasan_save_track+0x3e/0x80 [ 486.610261][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 486.615653][ C1] kasan_save_free_info+0x40/0x50 [ 486.620778][ C1] __kasan_slab_free+0x5c/0x80 [ 486.626610][ C1] kmem_cache_free+0x182/0x650 [ 486.631494][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 486.636721][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 486.642637][ C1] ? nf_ip_checksum+0x13c/0x510 [ 486.647604][ C1] nft_synproxy_do_eval+0x335/0x550 [ 486.652832][ C1] ? lock_acquire+0x106/0x350 [ 486.657528][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 486.663283][ C1] nft_do_chain+0x48d/0x1b10 [ 486.667901][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 486.672949][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 486.678881][ C1] nft_do_chain_inet+0x360/0x4b0 [ 486.683934][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 486.689416][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 486.694810][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 486.700392][ C1] nf_hook_slow+0xc5/0x220 [ 486.704916][ C1] NF_HOOK+0x21f/0x3c0 [ 486.708998][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 486.714989][ C1] ? NF_HOOK+0x9e/0x3c0 [ 486.719177][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 486.723835][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 486.729830][ C1] ? ip_local_deliver+0x113/0x190 [ 486.734869][ C1] NF_HOOK+0x336/0x3c0 [ 486.738941][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.744145][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 486.749266][ C1] ? NF_HOOK+0x9e/0x3c0 [ 486.753430][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 486.758029][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 486.763145][ C1] ? ip_rcv_core+0x88d/0xd50 [ 486.767746][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 486.772254][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 486.776764][ C1] process_backlog+0xa34/0x1860 [ 486.781633][ C1] ? process_backlog+0x3c3/0x1860 [ 486.786681][ C1] __napi_poll+0xaa/0x330 [ 486.791029][ C1] net_rx_action+0x61d/0xf50 [ 486.795644][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 486.800767][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 486.805822][ C1] ? net_tx_action+0xbff/0xc30 [ 486.810602][ C1] handle_softirqs+0x225/0x840 [ 486.815382][ C1] ? __irq_exit_rcu+0xca/0x220 [ 486.820174][ C1] __irq_exit_rcu+0xca/0x220 [ 486.824805][ C1] irq_exit_rcu+0x9/0x30 [ 486.829062][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.834706][ C1] [ 486.837642][ C1] [ 486.840607][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.846603][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 486.851910][ C1] Code: ff ff ff e8 61 4f 2e 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 4a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 38 63 b8 [ 486.871525][ C1] RSP: 0018:ffffc900036a7188 EFLAGS: 00000286 [ 486.877605][ C1] RAX: c5480cae172f0500 RBX: 0000000000000000 RCX: 0000000000000046 [ 486.885595][ C1] RDX: 0000000061f0ac2b RSI: ffffffff8e4b1e80 RDI: ffffffff8c4bdb80 [ 486.893664][ C1] RBP: ffffffff8177827f R08: ffffffff8177827f R09: 0000000000000000 [ 486.901655][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 486.909638][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 486.917796][ C1] ? unwind_next_frame+0x8f/0x2550 [ 486.922927][ C1] ? unwind_next_frame+0x8f/0x2550 [ 486.928241][ C1] ? __unwind_start+0xed/0x660 [ 486.933120][ C1] ? unwind_next_frame+0x8f/0x2550 [ 486.938331][ C1] unwind_next_frame+0xac/0x2550 [ 486.943285][ C1] ? unwind_next_frame+0x8f/0x2550 [ 486.948413][ C1] ? kmem_cache_free+0x182/0x650 [ 486.953381][ C1] ? __tcf_kfree_skb_list+0x14b/0x300 [ 486.958833][ C1] ? __dev_queue_xmit+0x208d/0x3820 [ 486.964050][ C1] ? alb_send_lp_vid+0x348/0x550 [ 486.969012][ C1] ? bond_alb_monitor+0x3d0/0x17c0 [ 486.974154][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 486.979900][ C1] ? rescuer_thread+0x7b6/0x10b0 [ 486.984948][ C1] ? kthread+0x388/0x470 [ 486.989213][ C1] ? get_stack_info_noinstr+0x19/0x130 [ 486.994700][ C1] __unwind_start+0x514/0x660 [ 486.999400][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.005597][ C1] arch_stack_walk+0xe3/0x150 [ 487.010297][ C1] ? __unwind_start+0xed/0x660 [ 487.015078][ C1] stack_trace_save+0xa9/0x100 [ 487.019875][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 487.025268][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 487.030574][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 487.035788][ C1] kasan_save_track+0x3e/0x80 [ 487.040533][ C1] __kasan_slab_alloc+0x6c/0x80 [ 487.045423][ C1] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 487.051521][ C1] kmem_cache_alloc_node_noprof+0x355/0x610 [ 487.057453][ C1] ? local_lock_release+0x9c/0x160 [ 487.062680][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 487.068772][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 487.073379][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 487.077994][ C1] __alloc_skb+0x1d7/0x7a0 [ 487.082434][ C1] __netdev_alloc_skb+0xc1/0x810 [ 487.087441][ C1] alb_send_lp_vid+0x122/0x550 [ 487.092240][ C1] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 487.097592][ C1] alb_send_learning_packets+0x12c/0x300 [ 487.103248][ C1] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 487.109516][ C1] ? bond_alb_monitor+0xf3/0x17c0 [ 487.114575][ C1] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 487.121053][ C1] bond_alb_monitor+0x3d0/0x17c0 [ 487.126011][ C1] ? irqentry_exit+0x218/0x8f0 [ 487.130798][ C1] ? bond_alb_monitor+0xf3/0x17c0 [ 487.135847][ C1] ? __pfx_bond_alb_monitor+0x10/0x10 [ 487.141250][ C1] ? rcu_is_watching+0x15/0xb0 [ 487.146041][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 487.151772][ C1] process_scheduled_works+0xa8e/0x14e0 [ 487.157362][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.163354][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.168404][ C1] ? assign_work+0x3af/0x5d0 [ 487.173080][ C1] rescuer_thread+0x7b6/0x10b0 [ 487.177880][ C1] ? rescuer_thread+0xb8/0x10b0 [ 487.182782][ C1] kthread+0x388/0x470 [ 487.186966][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 487.192181][ C1] ? __pfx_kthread+0x10/0x10 [ 487.196789][ C1] ret_from_fork+0x514/0xb70 [ 487.201400][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 487.206529][ C1] ? __switch_to+0xc89/0x1420 [ 487.211243][ C1] ? __pfx_kthread+0x10/0x10 [ 487.215853][ C1] ret_from_fork_asm+0x1a/0x30 [ 487.220642][ C1]