last executing test programs: 4.225725052s ago: executing program 0 (id=2465): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x509, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8f}, 0x1c, 0x0}}], 0x1, 0x20004808) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) (async) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 3.096844035s ago: executing program 3 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="b982639e3d09", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x24}}, 0x8000) 3.086168677s ago: executing program 0 (id=2480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2.829451343s ago: executing program 3 (id=2483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010778cb99e0d00482f086e00010000000000000000000000000a44000000090a0108000000000000000000000000080005400000000c0900020073797a300000000008000c400000000008000a40000000000900010073797a3000000000140000001100010000000000000000000000000a5f3862f9888eff24a51ef528345b4021644f1ea1bf433eae6dab42834beb148afbaba04cf3d04b918a649a94799309a9a0cb433ddfd12b2b9683e36217bdfe177930f4585eb90792a92be2b769368ca7f2b20aaeec14d8d9c019276a4de3cf4fb442fbe30bad00a08249061bf193a9cee2fc8cd6df9c638c4f8e2f0682b85a3f8fad24ac0989406b4229dd25b39699c8dc44ba1aa50c33a5419fa5"], 0x6c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) 2.640245437s ago: executing program 3 (id=2486): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x4004040) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80fc9700", @ANYRES16=r4, @ANYBLOB="00032bbd7000fbdbdf257700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099002a000000380000000800ef00000000000800ef00120000000800ef00040000000800ef00080000000500ee00040000000500ee00030000000500ee00060000000500ee00030000000500ee00000000000500ee00fa000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYBLOB="1aec918c46bc6ae07f41dd2c508e4abead080a09dca13495b7bb0ad7f9a5cd8153b0c4385518fae432ca5053e1712e655da326b448c8b462ba445b250f70f537a75f", @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r14, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) writev(r12, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) 2.54523718s ago: executing program 3 (id=2488): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x6, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}, @sadb_x_nat_t_type={0x1}]}, 0x60}, 0x1, 0x7}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x4e22, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in=@local, 0x8000, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0x1d, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x8004) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2e, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x698472dc6a8b23b9, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0) r11 = socket$phonet(0x23, 0x2, 0x1) r12 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt(r12, 0x1, 0x6, 0x0, &(0x7f00000008c0)) recvmmsg(r11, &(0x7f00000016c0)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @local}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/132}, {&(0x7f0000000780)=""/149}, {&(0x7f0000001f00)=""/4096}, {&(0x7f0000002f00)=""/4096}, {&(0x7f0000000840)=""/170, 0x27}, {&(0x7f0000000900)=""/230}, {&(0x7f00000004c0)=""/59, 0x10}, {&(0x7f0000000a00)=""/208}, {&(0x7f0000000b00)=""/204}, {&(0x7f00000006c0)}]}, 0x1ff}, {{&(0x7f0000000cc0)=@xdp, 0x0, &(0x7f0000000700)=[{&(0x7f00000017c0)=""/115}, {&(0x7f0000000dc0)=""/191}, {&(0x7f0000000e80)=""/242}], 0x0, &(0x7f0000000f80)=""/119}, 0x7}, {{&(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x0, &(0x7f0000001080)=[{&(0x7f0000001180)=""/238}], 0x0, &(0x7f00000010c0)=""/112}, 0x7fff}, {{&(0x7f0000001280)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000001600)=[{&(0x7f0000001300)=""/251}, {&(0x7f0000001400)=""/149}, {&(0x7f00000014c0)=""/86}, {&(0x7f0000004f00)=""/4096}, {&(0x7f0000001540)=""/140}], 0x0, &(0x7f0000001680)=""/16}, 0x400}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) recvmmsg(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/233, 0xe9}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2}, 0x3}, {{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {0x0}, {&(0x7f0000001c00)=""/156, 0x9c}, {0x0}, {&(0x7f0000001e40)=""/31, 0x1f}], 0x5}, 0xd27}, {{0x0, 0x0, 0x0}, 0x1}], 0x5, 0x3, 0x0) 1.956373965s ago: executing program 0 (id=2497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) 1.815816099s ago: executing program 2 (id=2499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0x9e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.814670936s ago: executing program 1 (id=2500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000880)={0x68, r3, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x280c00c0}, 0x90) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'ipvlan1\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xfffc}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4080) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$can_j1939(r10, &(0x7f0000000380)={0x1d, r12, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x100, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x100}}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@setneightbl={0x50, 0x43, 0x10, 0x70bd2a, 0x25dfdbff, {0x7}, [@NDTA_THRESH3={0x8, 0x4, 0x7e}, @NDTA_THRESH1={0x8, 0x2, 0x2}, @NDTA_THRESH3={0x8, 0x4, 0x3}, @NDTA_THRESH1={0x8, 0x2, 0xa9b9}, @NDTA_THRESH3={0x8, 0x4, 0x5}, @NDTA_THRESH2={0x8, 0x3, 0x6}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x48085) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x20, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}}, 0x20}, 0x1, 0x0, 0x0, 0x180}, 0x4040800) r16 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r16, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRESHEX=r16], 0x5c}}, 0x40) 1.777790106s ago: executing program 0 (id=2501): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x2, 0x8, {{0x5, 0x4, 0x1, 0x7, 0x14, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "7cd14a4c3d50ebdf"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x6, 0x2ef, 0x150, 0x783]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg(r1, &(0x7f0000001480)={&(0x7f0000000140)=@nfc={0x27, r2, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="69a17b4767608922a2e1d04e7dd872a159058073907fb39ca14bc16a596d8ff9b84324bf710f79472d6eecb312662a878d527c86552fc8244f58cc00bce18f0a357255c866e35f089cb66d6f02bf14005dae3e1e52ff608b6a10a9a8504d066e786e00e0c6a04619a8148d18d99c6a985555e3a3d5faca992c3ab5babe8329002b422bab474a23c7f6e261c390f192fe901bce34c8682b374970d41c7edc933f53353103d5a13091b19a3582134ddcdf0027d364c51c54cf580c6028faac079a3dbd98ae839641d7021d", 0xca}, {&(0x7f00000012c0)="a13679e1a012c05bd41fcd8a52854d7eac24050842c394c2e07f85c6939d4735452016c28045a70154971811b20fad0e405e65741babca676862096849bd66f03d8fe1c47a350c92cc9cfd4960250671d41d84c26e1d8115cc2f454779636c602b16b9d428ac9e1addd7643ea590f98efba4740672d64055cdce0f34a6e67e962f8c46df2d615f16542d1859b9790830be257d1f0c051cf5b539f24bca87ee4fd1496ba70334c9aeda2bf5adf655fef5d68d3dbeab91e9915c7fbe5202bcd6c4c25ddb21386f5b323e613e01682bcac3", 0xd0}], 0x3, &(0x7f0000001400)=[{0x58, 0x114, 0x3, "dd90439c8d0209557a6f0ff43b2f061dfd06f501187dc2c85179bebbdac350529d87ffe9e8241ed73eeee34dbbc0f4ff7a5fc0e612d66ed4a0d12b628d6139837cceec89"}], 0x58}, 0x4000000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x926a1000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000001600)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0}, &(0x7f0000001680)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000001900)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)=@delsa={0x1f0, 0x11, 0x10, 0x70bd2c, 0x25dfdbfb, {@in=@multicast1, 0x4d3, 0x2, 0x33}, [@sa={0xe4, 0x6, {{@in6=@mcast1, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e22, 0xf, 0xa, 0x0, 0x20, 0x73, r0, r4}, {@in=@multicast2, 0x4d2, 0x32}, @in=@empty, {0x5d0, 0x7ff, 0x4f, 0x5, 0x4, 0xc46, 0x1, 0x3}, {0x9a37, 0x323, 0x3, 0x8}, {0x4, 0x0, 0x4e}, 0x70bd25, 0x3507, 0xa, 0x3, 0xa, 0x69}}, @sa={0xe4, 0x6, {{@in6=@mcast1, @in=@remote, 0x4e23, 0xeb, 0x4e20, 0x7, 0x0, 0x0, 0x80, 0xff, 0x0, r5}, {@in=@private=0xa010101, 0x4d3, 0x33}, @in6=@empty, {0x3, 0x7, 0x200, 0x8, 0xf7, 0x9, 0x2, 0xb4a}, {0x5ef19f7d, 0x4, 0x1, 0x384}, {0x0, 0xfffffffd, 0x4}, 0x70bd29, 0x34ff, 0x8, 0x1, 0x81, 0x48}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x10}, 0x4044080) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000001940)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001ac0)={'tunl0\x00', &(0x7f00000019c0)={'syztnl0\x00', r3, 0x80, 0x10, 0x8, 0x0, {{0x2d, 0x4, 0x2, 0x0, 0xb4, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0xf, 0x6f, [@broadcast, @multicast2, @empty]}, @lsrr={0x83, 0xf, 0xe, [@private=0xa010100, @rand_addr=0x64010100, @multicast1]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x12, "a6bbba4787bddc1bd583a31764940371"}]}, @timestamp_prespec={0x44, 0x44, 0x12, 0x3, 0x3, [{@remote, 0xd9b}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x101}, {@multicast2, 0x7f}, {@remote, 0x6}, {@multicast2, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010100, 0xfffffff9}]}, @cipso={0x86, 0x24, 0x3, [{0x5, 0x3, '\\'}, {0x2, 0x6, "d31143bd"}, {0x0, 0xc, "6bf1627aa882c1c67585"}, {0x1, 0x9, "2aefc1b2b9f2be"}]}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)=@ipv6_getnetconf={0x5c, 0x52, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r0}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r0}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x800}, @NETCONFA_FORWARDING={0x8, 0x2, 0xecca}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x109}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000011) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001c00)={r6}) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001c40)={0x7, 0xd5, 0x3, 0x100}, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) bind$xdp(r8, &(0x7f0000001d00)={0x2c, 0x9, r0, 0x9, r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000001d80)={'sit0\x00', &(0x7f0000001d40)={@private=0xa010101, 0x1, 0x0, 0x30, 0x0, [{@local}, {@remote}, {@multicast2}]}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e00), r8) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x14201004}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r9, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xae, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000001f40), &(0x7f0000001f80)=0x4) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r10, 0x4002f516, &(0x7f0000001fc0)={0x6, 0x70}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000002000)={0x0, 0x0, 0x1ff, 0x400, 0x1, 0xf}, &(0x7f0000002040)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000002080)={r11, @in6={{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}}, 0xb4d, 0xbac7, 0x3, 0x3, 0x6}, &(0x7f0000002140)=0x98) r13 = accept(r1, 0x0, &(0x7f0000002180)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f00000021c0)={r12, 0x5bc}, 0x8) getsockopt(r1, 0xfffff801, 0xd, &(0x7f0000002200)=""/161, &(0x7f00000022c0)=0xa1) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000002300)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r14, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0xac, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x27}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0xac}, 0x1, 0x0, 0x0, 0xa0}, 0x20040000) 1.757313194s ago: executing program 4 (id=2502): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000800000000000000000000000008500abf0000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.676100338s ago: executing program 2 (id=2503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) listen(r0, 0x0) (async) listen(r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) (async) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 1.644390119s ago: executing program 0 (id=2504): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2167}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, [{0x6}, {0x6c, 0x1}, {0x2, 0x1}, {0x6c}, {0x3, 0x1}, {0x60}, {0x30}, {0x2, 0x1}, {0x3}, {0xb}, {0x5, 0x1}, {0x1, 0x1}, {0x24, 0x1}, {0x1b, 0x1}, {0x30c4a6341992ffdb}, {0x60, 0x1}, {0x16, 0x1}, {0x4}, {0x67}, {0x6c, 0x1}]}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40041) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x1ff, 0xa, [0x2d3, 0x8, 0x8, 0x4, 0x8001, 0x8000, 0xfffb, 0x6, 0x5, 0x8]}, &(0x7f0000000280)=0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x8ae}, &(0x7f0000000300)=0x8) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @mcast2, 0xfffff607}}, 0x24) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xa}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc890}, 0x40000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000640)={'geneve1\x00', {0x2, 0x4e21, @empty}}) r7 = socket$inet(0x2, 0x2, 0x25) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000680)={{0x0, @remote, 0x4, 0x0, 'none\x00', 0x6aa510f268c006e6, 0x71, 0x1e}, {@broadcast, 0x4e20, 0x3, 0x1d45, 0xd, 0xc0}}, 0x44) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x83}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) sendmmsg$sock(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)="b8152eca6fd50eee98c52a126656678fd40cb69698e62f38ea13317c4c2ccbd6b836ffa073066bf4010ed8220dd0a47bd07f3873943e1a719e7dc0e16e8daa010e948e7565", 0x45}, {&(0x7f0000000a00)="5ef91cf151b90df6c44d5b90af5f1319d9dd245931792412a934fa52358e765fa975744052b9b8b9381117bc", 0x2c}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="34af492d305a8f9905cd55c80fd16dff171d0b2587fec690f52a0ba1fdaf89c9763831dfb263b67a89603f5c01608f4b28e1b289651f2c6e45403116a5c3c3628aadc0b4da3b67880966489b8c6c95960501ef16c9b203669090b7916641fe342372d5a568470ba4ed79d5fc190f10c53a81714a59c11279daf1e3ffcfc0adab5c0a364487f734e8d3cda06e4e682cbac1ce0412af46b30ae1bac4fe0b24c56cb42cf9f5ef6dcde1d5fa195726ececc5d2d6436e35ad7864ae4926fadc291cf2e1a7de5b3b0774f8e7c463e856a67c8d09713392ed0134e4dd165c4a9c0ccde2", 0xe0}], 0x4, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xa5d6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xd8}}, {{&(0x7f0000000cc0)=@l2={0x1f, 0x5, @any, 0xe5, 0x2}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000d40)="8f13fb0e6b2a0098cc9fb6d157d2d0049218544bda1c8260f6328fac3a519500519960f75071ab55048c7a897f1e32403e4e81def2e06acaeaa35ea8ffd401c1d1bf0bf5a1e42df2b56866b942c1392b", 0x50}, {&(0x7f0000000dc0)="b5e5f500e7337b7d641b334f19724e5671313df2feeb65bcd6df7385e9ad16cddb29c0b3bf73caf98d99bf953168c0e71057134b3a47b01be4962dcf28fb4099ddbf25cb5fc933e59382f4f53a4d9879d9f5bc80ca63153050128cd8a51762ae4ceb6a", 0x63}, {&(0x7f0000000e40)="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", 0x1000}], 0x3, &(0x7f0000001e80)}}], 0x2, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001f40), r1) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000002100)={'syztnl0\x00', &(0x7f0000002000)={'syztnl1\x00', 0x0, 0x20, 0x1, 0x8000, 0x80000000, {{0x2a, 0x4, 0x1, 0x29, 0xa8, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0x59, 0x0, 0x2, [0xfe000000, 0xfffffffc, 0x6, 0x8, 0x80]}, @lsrr={0x83, 0xf, 0xe8, [@multicast1, @remote, @private=0xa010100]}, @lsrr={0x83, 0x7, 0xde, [@broadcast]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x13, 0x0, 0x2, [0x7, 0x9, 0x0, 0x80000001]}, @timestamp_prespec={0x44, 0x4c, 0x24, 0x3, 0x4, [{@multicast1, 0x3}, {@local, 0x4}, {@broadcast, 0x10}, {@empty, 0x800}, {@loopback, 0x200}, {@loopback, 0x84}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@broadcast}, {@private=0xa010100}]}]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000021c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x28}}, 0x40) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000023c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0x84, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4841}, 0x40804) 1.614314004s ago: executing program 4 (id=2505): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x4, 0x0, &(0x7f0000000080)) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/91, 0x5b, 0x0, &(0x7f0000000840)=""/138, 0x8a}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f00000007c0)=""/91, 0x5b, 0x0, &(0x7f0000000840)=""/138, 0x8a}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x1b, &(0x7f0000000980)=@raw=[@exit, @ldst={0x1, 0x2, 0x0, 0xa, 0x7, 0x6, 0x10}, @jmp={0x5, 0x0, 0x2, 0x2, 0x5, 0x1, 0x8}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7be}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit], &(0x7f0000000a80)='GPL\x00', 0xd, 0xb9, &(0x7f0000000ac0)=""/185, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0xffffffffffffffff], &(0x7f0000000c00)=[{0x0, 0x1, 0x8, 0x8}, {0x4, 0x2, 0x1, 0xb}, {0x2, 0x4, 0xc, 0xa}], 0x10, 0xffffffca}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0xffffffffffffffff, 0x3e9, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pK \x00'}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x18}, 0x18) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x18}, 0x18) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0x0, 0x3}, 0xc) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0xcb5, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@bloom_filter={0x1e, 0x7f, 0x4e, 0x401, 0x18001, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x8, 0x2e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x7, 0x0, 0x1, 0xa, 0xa, 0x2, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xed, &(0x7f0000000440)=""/237, 0x41000, 0x1, '\x00', r6, @fallback=0x37, r7, 0x8, &(0x7f0000000780)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x4, &(0x7f0000000fc0)=[r10, r11, r12, 0x1, r13, r14, r15], &(0x7f0000001000)=[{0x5, 0x4, 0x733fc7e0, 0x7}, {0x3, 0x2, 0x4, 0x8}, {0x0, 0x1, 0x6, 0x6}, {0x5, 0x3, 0xb, 0xa}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x8, 0x2e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x7, 0x0, 0x1, 0xa, 0xa, 0x2, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0xed, &(0x7f0000000440)=""/237, 0x41000, 0x1, '\x00', r6, @fallback=0x37, r7, 0x8, &(0x7f0000000780)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x4, &(0x7f0000000fc0)=[r10, r11, r12, 0x1, r13, r14, r15], &(0x7f0000001000)=[{0x5, 0x4, 0x733fc7e0, 0x7}, {0x3, 0x2, 0x4, 0x8}, {0x0, 0x1, 0x6, 0x6}, {0x5, 0x3, 0xb, 0xa}], 0x10, 0x3}, 0x94) 1.53600874s ago: executing program 2 (id=2506): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r2, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x11, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}, "e1"}}}}}}}}, 0x4b) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.487796398s ago: executing program 3 (id=2507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f56e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ecf81ec62b2a6452d5524e4d5be034", 0x81}, {&(0x7f00000000c0)}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055", 0x2c}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6", 0x64}, {&(0x7f0000000a40)="3136404cd2dfd466c7112bf7868a6eb55e9e65c1add22a81e134a471ef4da37ff913a2b1f3f6de5c74e42b2accc803bceee52b34633f4e7ea4", 0x39}], 0x5}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.41398428s ago: executing program 4 (id=2508): socket$nl_rdma(0x10, 0x3, 0x14) (async) socketpair(0xa, 0x3, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0xffffffffffffff24) ioctl$sock_bt_hci(r3, 0x800448d7, 0x0) (async, rerun: 32) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (rerun: 32) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a84f00a370b71dd3c20ade00ed425b9dd135fa2ec3c38ca099e7cf24ad9a00686caf85a08e76310042976e0222c20000000000000000000000a7a84024d70c5e4ef9d15e1bfe9e3a6b07a0553ba6b86bc865de8db7d36a75588461efc5fb69197483fc19a297bcfa20db12e7d2a7dd763d7f32b0c5dce25f717db9c799f37d13bef65b92f0c0e5746c7c3f7d4feea9e1f5212a1ffad4524274cd8db33861c252b6098b019ad75103d82c159a05f9696843d066c9ff898f85d8d00fc600"/202, @ANYRES16=r7, @ANYBLOB="010129bd7000fddbdf2531000000050036001000000005003300030000000a0001007770616e310000000500350007000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) r8 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="2b7069647320af490cf57b97b5c986e6aed8b086c193688c764611c23e7eee766e1f0214ecc88a6dc04eca470eb2f01669bcdf6f39b23f4282afb23f1117e9babbc6cd7824d2bf1afdd4cf0d519f98e5e887f5479caa7e16848a89658a7f2910ba8fa5a173dd7bf4cd2007848dff6af5"], 0x6) (async) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x20) 1.340611264s ago: executing program 1 (id=2509): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) (async) syz_emit_ethernet(0x246, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES32], 0x0) (async, rerun: 64) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x80800) (rerun: 64) getsockname$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c0001"], 0x44}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x48, 0x0, "5e01000100000000001fae194142a5da25df6765a1e41708eac1c970ff05675f642f9e0b40a12dc7ecd294d40f36d8a59ebbd039379de22b2044b609a4e5112c36cfb12d491517f5db00"}, 0xd8) 1.283006401s ago: executing program 1 (id=2510): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0xbffffffe, 0x4) 1.264601453s ago: executing program 0 (id=2511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0xec, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc714}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x75}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x92}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_REG_RULES={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x40, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.192020019s ago: executing program 4 (id=2512): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8010, 0x3}, 0x48) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x9, 0x3, 0x80, 0x2, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @null, @bpq0, 0x0, 'syz0\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 1.135816137s ago: executing program 1 (id=2513): unshare(0x20400) r0 = socket(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f00000020c0)=""/4064, &(0x7f0000000000)=0xfe0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) connect(r3, &(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) writev(r4, &(0x7f0000000040), 0x0) 1.022803897s ago: executing program 2 (id=2514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x18, 0x2b, 0xff, @remote, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000003f40)=ANY=[@ANYBLOB="3800000001020103550e00000000000002000000240001800c000280050001000000000014000180080001007f0000010800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x9d97d08e767fa60f}, 0x800) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x0, 0x3, {0xa, 0x4e20, 0xee5c, @local, 0x6}}}, 0x32) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000300)=0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0xc}, {0x0, 0xfff1}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20044081) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x0, 0x4, 0xa, 0x8001}, 0x20) 863.643605ms ago: executing program 1 (id=2515): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x2}, 0x95) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r8, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) close(0x3) syz_emit_ethernet(0x82, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x2000000, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 773.190221ms ago: executing program 4 (id=2516): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150007000000000000120800040043430000a80016000a0001407c6f94007134cf6ee08000a0e408e8a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3adfe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee0000000000000000a48156a65908145da1062ff2b44ac6a5", 0xd8}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0xffffffff, 0x10}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x8}, 0xc) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x5, 0x10}, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x3ff, 0x97, &(0x7f0000000100)=""/151, 0x40f00, 0x4, '\x00', r4, @fallback=0x22, r5, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x799994a2, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000500)=[r6, r7, r8, r9], &(0x7f0000000540)=[{0x2, 0x2, 0x9, 0x6}, {0x0, 0x5, 0x9, 0x7}, {0x0, 0x5, 0xc, 0x9}, {0x5, 0x2, 0x1, 0x8}], 0x10, 0x5}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 648.695676ms ago: executing program 2 (id=2517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='syz_tun\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000001000000007000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf3a833212770ec5b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000030000000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="c40000000b0601080000000000000076212ffb00010000090900020073797a3100000000080009400000000f08000940000010000900020073797a3100000000380007800c001480080001406401010109001300734af6706ac302e36d9b77df797a30000000001400170064756d6d79300000000000000000000008000a40000000010900020073797a30000000003400fd8008000840000600000008000902000000090ce318400000000000000f000000018008000140ac1e01014800094000000000000000000a7df286c6a24e498da971bc32184fec5b1e2f0c9d2c6ae084ff1734e1df90e5fa85f4db477f7615abcd164f124fddda60e95e201b8d2760732daf38cf961ab099fdb722d247a310bd7edf74161099b089e57dedb06d6d9135397bcf2c095cfb096bd12f227a3188e54c68f7f56b0b5ec66e6a80a6cdb3c6e1f3bf5aa1"], 0xc4}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 479.978484ms ago: executing program 3 (id=2518): unshare(0x5c0b0880) r0 = socket(0x28, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, &(0x7f00000029c0)=0xfffffffffffffdcc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x6, 'wg1\x00', {0x9}, 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="7dcdb7d3e553cb6c9ff831cf4b9837279df17278f823f1"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 165.259255ms ago: executing program 1 (id=2519): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"ce32f21c0b408d3775ac554140dd56b2", 0x0, r0, {0x5, 0x3}, {0x100000001, 0x2}, 0x2, [0x6b0b, 0x80000001, 0x6470, 0xfffffffffffeffff, 0x5, 0x10000, 0x10001, 0x9, 0xe, 0x2, 0x0, 0x3, 0xf, 0x8, 0x101, 0x4]}) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000140)={0x47e4027daf8543be, 0x0, "5778fe0fcf3e18a84ab5823c30828d71"}) (async) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000140)={0x47e4027daf8543be, 0x0, "5778fe0fcf3e18a84ab5823c30828d71"}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000180)=""/191, 0x6}) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) (async) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$FICLONE(r1, 0x40049409, r2) (async) ioctl$FICLONE(r1, 0x40049409, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "794bbb712b214815cc6811314bb46804822dd49079bff5bfb59e0050c649dd08fcc0e4faa7aef403f1e308883e910f13c41778a31f842efb5d55c0578fd32f6c2cc6066f377f25dbc680db1eb70e5552bd45524c97490e34e89d81f298dbd5859666b3b48b344a2093a5f16c52cd15faf9eadcacae92d7032364b17f8e84525002badf781282ceeb281cc0d1211bc92167cd31157c40918a1198b16b767e604073754c370248fe40d2ce2ad50c12e3197978a6d63dbd264ce8b56d8d75de2d935702580d9d26f282ae85f150708bc8d052aab1ce83c16756733d6507040741a3aabda5db0c20e793d529225aa32058691268b0a18ecf6f48f4d82adface01114", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001340)={{r4, 0x8000, 0x80000001, 0xfffffffffffff000, 0x800, 0x7fffffff, 0x5, 0xfffffffb, 0x4, 0x45, 0x8, 0x3114, 0x3369, 0x7, 0xfffffffffffffff8}}) pipe(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002380)=0x0) connect$nfc_raw(r5, &(0x7f00000023c0)={0x27, r7, 0x1, 0x1}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000002400)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002480), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000002600)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000025c0)={&(0x7f00000024c0)={0xec, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xb}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000002640)={0x8, 0x2, 0x4, 0x0, 0xe4, 0x8, 0x7, 0x5, 0xc7, 0x7, 0x52, 0x6, 0x7f, 0x2}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000002640)={0x8, 0x2, 0x4, 0x0, 0xe4, 0x8, 0x7, 0x5, 0xc7, 0x7, 0x52, 0x6, 0x7f, 0x2}, 0xe) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000002680)={'veth0_macvtap\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000002680)={'veth0_macvtap\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}) syz_genetlink_get_family_id$team(&(0x7f00000026c0), r8) (async) syz_genetlink_get_family_id$team(&(0x7f00000026c0), r8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000002700)={0x0, 0x3}, &(0x7f0000002740)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000002780)={r10, 0xfff8}, &(0x7f00000027c0)=0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000002800)=0x4) bind$rxrpc(r5, &(0x7f0000002840)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) socket$rxrpc(0x21, 0x2, 0xa) (async) r12 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r12, &(0x7f0000002880)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002900)={r11, 0x10, &(0x7f00000028c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, &(0x7f0000002940)=0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000002980)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xd8e}}, 0x24) socket$inet6(0xa, 0x5, 0x4) 104.709812ms ago: executing program 2 (id=2520): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x18, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2={0xff, 0x3}, 0x1, 0x80, 0xfffffffe, 0x80}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 0s ago: executing program 4 (id=2521): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x108) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) (async) listen(r0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000500)={r3, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$nl_generic(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000010c0)={0x120c, 0x14, 0x100, 0x70bd26, 0x25dfdbff, {0x9}, [@typed={0x8, 0x39, 0x0, 0x0, @ipv4=@local}, @generic="47469c62b7653101f807bf644de8561ccac23aa74deeb599af78de2f5050ebc8ab3514f9489afe1a9f95b10886afe44b2b8863980b1ad55efe2c242f3e75524fea7c3221f826b3e38e18ec794f766b2771e8faf895c12a941b8ddf77127688db45c262cb098df881fe8206b0ee4de115de813481a345d7a068e43637614f47dc93d4275e4bf76983f9270e62a472a8d2af3fff6769fa336e2f037d591f08adde71a20f3b7241ef3aede00ffbcf15994225ccdfd2b1fc6fcbbcefbc7a9493dca34217bd94e5320f3aa338431b895a1be73c561062898033aa0fd09f00ef12c52bbd30b170a9b5066d7b7249198d909895", @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@mcast2}, @generic="921fc822ac23b5df9c9385b314a7af2d34ac0b60afee48647de6edb01b7294e1787ce0c1732419d1d8112a852975db23745f488c1d614fbdd55549190b3582803c396ad5a761ea74bd4b04b5feb04d00a85f742eea48002f1f784998d452b5808242b033929683f89564e6453d31c1e5943a44923d4476b62c59445192a0b26ae0b83c317ad29221b9c9bbedb59ee2f6281795423804df53a09ea4734929", @nested={0x18, 0x40, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x7d}, @nested={0x4, 0xfa}, @nested={0x4, 0x21}]}, @nested={0x1034, 0x7f, 0x0, 0x1, [@nested={0x4, 0x23}, @generic="6b73b21909eca65457c91818523a3c5f4929c4444a8b314815a0e455a65186bbd097c808aaef6e47", @typed={0x4, 0x84}, @generic="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"]}]}, 0x120c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) kernel console output (not intermixed with test programs): ort device dummy0 added [ 123.300218][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 123.337301][ T6768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 123.367223][ T6770] netlink: 'syz.4.211': attribute type 21 has an invalid length. [ 123.377378][ T6768] netlink: 'syz.0.208': attribute type 7 has an invalid length. [ 123.418409][ T6770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.211'. [ 123.436407][ T6768] netlink: 'syz.0.208': attribute type 8 has an invalid length. [ 123.478567][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 123.613472][ T6778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.838831][ T6790] ipvlan3: entered promiscuous mode [ 123.916290][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.215'. [ 124.016848][ T6792] openvswitch: netlink: Missing key (keys=40, expected=100) [ 124.065372][ T6794] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 124.092487][ T6794] netlink: 'syz.0.218': attribute type 2 has an invalid length. [ 124.705765][ T6815] sit0: entered promiscuous mode [ 125.962072][ T6878] syz.4.243: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.003673][ T6880] __nla_validate_parse: 5 callbacks suppressed [ 126.003694][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 126.016320][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.4.243 Not tainted syzkaller #0 PREEMPT(full) [ 126.016351][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.016361][ T6878] Call Trace: [ 126.016368][ T6878] [ 126.016376][ T6878] dump_stack_lvl+0x189/0x250 [ 126.016407][ T6878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.016429][ T6878] ? __pfx__printk+0x10/0x10 [ 126.016453][ T6878] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.016474][ T6878] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.016497][ T6878] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 126.016520][ T6878] warn_alloc+0x214/0x310 [ 126.016547][ T6878] ? stack_depot_save_flags+0x41b/0x860 [ 126.016573][ T6878] ? __pfx_warn_alloc+0x10/0x10 [ 126.016600][ T6878] ? kasan_save_track+0x4f/0x80 [ 126.016635][ T6878] ? xskq_create+0x56/0x170 [ 126.016658][ T6878] ? xsk_init_queue+0xb0/0x110 [ 126.016678][ T6878] ? xsk_setsockopt+0x4dc/0x8d0 [ 126.016697][ T6878] ? do_sock_setsockopt+0x17c/0x1b0 [ 126.016715][ T6878] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 126.016731][ T6878] ? do_syscall_64+0xfa/0x3b0 [ 126.016745][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.016771][ T6878] __vmalloc_node_range_noprof+0x125/0x12f0 [ 126.016830][ T6878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.016862][ T6878] ? __kasan_kmalloc+0x93/0xb0 [ 126.016889][ T6878] vmalloc_user_noprof+0xad/0xf0 [ 126.016913][ T6878] ? xskq_create+0xbf/0x170 [ 126.016937][ T6878] xskq_create+0xbf/0x170 [ 126.016964][ T6878] xsk_init_queue+0xb0/0x110 [ 126.016989][ T6878] xsk_setsockopt+0x4dc/0x8d0 [ 126.017014][ T6878] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.017036][ T6878] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.017066][ T6878] ? aa_sock_opt_perm+0xff/0x1b0 [ 126.017086][ T6878] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 126.017104][ T6878] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.017127][ T6878] do_sock_setsockopt+0x17c/0x1b0 [ 126.017151][ T6878] __x64_sys_setsockopt+0x13f/0x1b0 [ 126.017175][ T6878] do_syscall_64+0xfa/0x3b0 [ 126.017192][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.017207][ T6878] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.017224][ T6878] ? clear_bhb_loop+0x60/0xb0 [ 126.017245][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.017260][ T6878] RIP: 0033:0x7fddf718ebe9 [ 126.017276][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.017289][ T6878] RSP: 002b:00007fddf80ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.017308][ T6878] RAX: ffffffffffffffda RBX: 00007fddf73c5fa0 RCX: 00007fddf718ebe9 [ 126.017320][ T6878] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 126.017330][ T6878] RBP: 00007fddf7211e19 R08: 0000000000000004 R09: 0000000000000000 [ 126.017341][ T6878] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.017350][ T6878] R13: 00007fddf73c6038 R14: 00007fddf73c5fa0 R15: 00007ffc53891978 [ 126.017380][ T6878] [ 126.017468][ T6878] Mem-Info: [ 126.333442][ T6878] active_anon:5815 inactive_anon:0 isolated_anon:0 [ 126.333442][ T6878] active_file:2501 inactive_file:39855 isolated_file:0 [ 126.333442][ T6878] unevictable:768 dirty:40 writeback:0 [ 126.333442][ T6878] slab_reclaimable:10585 slab_unreclaimable:95574 [ 126.333442][ T6878] mapped:30069 shmem:1356 pagetables:1174 [ 126.333442][ T6878] sec_pagetables:0 bounce:0 [ 126.333442][ T6878] kernel_misc_reclaimable:0 [ 126.333442][ T6878] free:1328867 free_pcp:15511 free_cma:0 [ 126.461525][ T6878] Node 0 active_anon:23160kB inactive_anon:0kB active_file:10004kB inactive_file:159220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124376kB dirty:156kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12100kB pagetables:4636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 126.540935][ T6893] validate_nla: 1 callbacks suppressed [ 126.540954][ T6893] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 126.573296][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 126.606194][ T6878] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 126.636948][ T6878] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.643781][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.243'. [ 126.672158][ T6878] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 126.698070][ T6878] Node 0 DMA32 free:1415536kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22908kB inactive_anon:0kB active_file:10004kB inactive_file:157660kB unevictable:1536kB writepending:156kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:42076kB local_pcp:20476kB free_cma:0kB [ 126.740081][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 126.791617][ T6878] lowmem_reserve[]: 0 0 1 1 1 [ 126.797541][ T6878] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 126.828079][ T6878] lowmem_reserve[]: 0 0 0 0 0 [ 126.830491][ T6893] bond1 (unregistering): Released all slaves [ 126.844720][ T6878] Node 1 Normal free:3884572kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:7520kB free_cma:0kB [ 126.883962][ T6878] lowmem_reserve[]: 0 0 0 0 0 [ 126.908932][ T6878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.933267][ T6878] Node 0 DMA32: 1918*4kB (UM) 651*8kB (UM) 224*16kB (UM) 184*32kB (UME) 62*64kB (UME) 26*128kB (UME) 24*256kB (UME) 9*512kB (M) 3*1024kB (UM) 8*2048kB (UM) 331*4096kB (UM) = 1415632kB [ 126.985608][ T6878] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 126.998813][ T6878] Node 1 Normal: 171*4kB (UME) 52*8kB (UME) 39*16kB (UME) 75*32kB (UME) 22*64kB (UME) 9*128kB (UME) 4*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3884572kB [ 127.021530][ T6903] wg1: entered promiscuous mode [ 127.081843][ T6878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.101907][ T6878] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.179108][ T6878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.204357][ T6878] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.234144][ T6878] 43708 total pagecache pages [ 127.261310][ T6878] 0 pages in swap cache [ 127.277596][ T6878] Free swap = 124996kB [ 127.295525][ T6878] Total swap = 124996kB [ 127.303460][ T6878] 2097051 pages RAM [ 127.314826][ T6878] 0 pages HighMem/MovableOnly [ 127.344257][ T6878] 425667 pages reserved [ 127.348553][ T6878] 0 pages cma reserved [ 127.497483][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 127.518347][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 127.767565][ T6934] ip6gre1: entered allmulticast mode [ 128.393426][ T6977] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 128.421605][ T6977] netlink: 1 bytes leftover after parsing attributes in process `syz.4.267'. [ 129.295196][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 129.558754][ T7022] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 129.773775][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 129.833201][ T7039] netlink: 108 bytes leftover after parsing attributes in process `syz.2.288'. [ 129.863634][ T7040] openvswitch: netlink: Flow key attr not present in new flow. [ 129.897074][ T7039] openvswitch: netlink: Flow key attr not present in new flow. [ 129.975931][ T7042] netlink: 'syz.1.289': attribute type 24 has an invalid length. [ 130.359522][ T7066] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 130.360223][ T7056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.495413][ T7064] netlink: 'syz.4.296': attribute type 5 has an invalid length. [ 130.928776][ T7093] tipc: Started in network mode [ 130.934024][ T7093] tipc: Node identity 06094d1d7607, cluster identity 4711 [ 130.941609][ T7093] tipc: Enabled bearer , priority 0 [ 130.950045][ T7093] syzkaller0: entered promiscuous mode [ 130.955859][ T7093] syzkaller0: entered allmulticast mode [ 130.967540][ T7093] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 130.993624][ T7093] tipc: Resetting bearer [ 131.002195][ T7088] tipc: Resetting bearer [ 131.017186][ T7088] tipc: Disabling bearer [ 132.509890][ T7129] __nla_validate_parse: 6 callbacks suppressed [ 132.509909][ T7129] netlink: 32 bytes leftover after parsing attributes in process `syz.2.313'. [ 132.641472][ T7137] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 132.653746][ T7136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.731923][ T5867] Bluetooth: hci4: command tx timeout [ 132.796547][ T7144] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 132.808082][ T7141] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.316'. [ 132.927894][ T7150] netlink: 88 bytes leftover after parsing attributes in process `syz.3.319'. [ 133.061105][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067894][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.279091][ T7161] tipc: Started in network mode [ 133.295152][ T7161] tipc: Node identity ac14140f, cluster identity 4711 [ 133.337370][ T7161] tipc: New replicast peer: 255.255.255.255 [ 133.371216][ T7161] tipc: Enabled bearer , priority 10 [ 133.387769][ T7174] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 133.402028][ T7159] netlink: 84 bytes leftover after parsing attributes in process `syz.3.322'. [ 133.422941][ T7159] netlink: 84 bytes leftover after parsing attributes in process `syz.3.322'. [ 133.521177][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 133.915791][ T7192] team0: Device ip6gre1 is of different type [ 134.097432][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'. [ 134.129088][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.198627][ T7199] team0: Device ip6gre1 is of different type [ 134.482464][ T5869] tipc: Node number set to 2886997007 [ 134.825966][ T7262] netlink: 'syz.0.340': attribute type 1 has an invalid length. [ 134.838553][ T7256] netlink: 'syz.4.338': attribute type 10 has an invalid length. [ 134.865956][ T7262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.340'. [ 134.903199][ T7264] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 134.929670][ T7256] team0: Device hsr_slave_0 failed to register rx_handler [ 135.354299][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.345'. [ 135.371154][ T7281] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 135.619771][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'. [ 136.220574][ T7307] syzkaller1: entered promiscuous mode [ 136.231428][ T7307] syzkaller1: entered allmulticast mode [ 136.324108][ T7321] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 136.351945][ T7320] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 136.524303][ T7326] syzkaller0: entered promiscuous mode [ 136.529935][ T7326] syzkaller0: entered allmulticast mode [ 136.589131][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.664903][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.040977][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.201566][ T7353] netlink: 'syz.4.368': attribute type 17 has an invalid length. [ 137.660576][ T7373] __nla_validate_parse: 5 callbacks suppressed [ 137.660597][ T7373] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.374'. [ 137.852178][ T7387] netlink: 'syz.0.378': attribute type 75 has an invalid length. [ 137.977620][ T7391] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 137.986547][ T7391] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 138.005734][ T7393] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 138.021279][ T7393] netlink: 144 bytes leftover after parsing attributes in process `syz.2.376'. [ 138.033055][ T7393] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 138.046987][ T7393] netlink: 'syz.2.376': attribute type 2 has an invalid length. [ 138.061272][ T7393] netlink: 64 bytes leftover after parsing attributes in process `syz.2.376'. [ 138.294663][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 138.318565][ T7406] netlink: 'syz.3.383': attribute type 3 has an invalid length. [ 138.326699][ T7406] netlink: 44 bytes leftover after parsing attributes in process `syz.3.383'. [ 138.339993][ T7411] netlink: 'syz.2.385': attribute type 2 has an invalid length. [ 138.504915][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 138.828153][ T7436] netlink: 'syz.1.392': attribute type 39 has an invalid length. [ 139.096429][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 139.324450][ T7471] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.351024][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 139.572479][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 139.684819][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 139.752835][ T7496] tipc: Enabling of bearer rejected, failed to enable media [ 139.943230][ T7501] Bluetooth: MGMT ver 1.23 [ 140.171729][ T7510] netlink: 'syz.2.411': attribute type 32 has an invalid length. [ 140.195766][ T7510] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 140.794082][ T7535] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 140.843656][ T7539] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 140.874713][ T7542] netlink: 'syz.0.422': attribute type 11 has an invalid length. [ 140.924976][ T7539] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 142.449934][ T7635] netlink: zone id is out of range [ 142.466990][ T7635] netlink: get zone limit has 8 unknown bytes [ 142.480384][ T7630] pim6reg1: entered promiscuous mode [ 142.490641][ T7630] pim6reg1: entered allmulticast mode [ 142.626661][ T7645] trusted_key: syz.4.451 sent an empty control message without MSG_MORE. [ 142.664227][ T7640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.765799][ T7648] tipc: Trying to set illegal importance in message [ 142.855463][ T7656] __nla_validate_parse: 11 callbacks suppressed [ 142.855485][ T7656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.455'. [ 143.101593][ T7673] validate_nla: 2 callbacks suppressed [ 143.101614][ T7673] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 143.103160][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 143.120557][ T7673] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.460'. [ 143.140819][ T7672] netlink: 'syz.4.459': attribute type 3 has an invalid length. [ 143.543845][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 143.656220][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 143.679984][ T7706] vlan2: entered allmulticast mode [ 143.717322][ T7706] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 143.900890][ T7717] netlink: 'syz.3.476': attribute type 7 has an invalid length. [ 143.911433][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 143.923883][ T7717] netlink: 'syz.3.476': attribute type 11 has an invalid length. [ 144.078312][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 144.143640][ T7738] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 144.159298][ T7738] netlink: 224 bytes leftover after parsing attributes in process `syz.4.480'. [ 144.639665][ T7762] netlink: 72 bytes leftover after parsing attributes in process `syz.4.484'. [ 144.863300][ T7762] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 144.939295][ T7778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 144.977852][ T7776] netlink: 'syz.0.490': attribute type 2 has an invalid length. [ 144.982247][ T7780] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 145.259808][ T7797] netlink: 'syz.1.495': attribute type 13 has an invalid length. [ 145.276001][ T7797] netlink: 'syz.1.495': attribute type 17 has an invalid length. [ 145.346728][ T7806] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 145.427416][ T7809] netlink: 'syz.2.501': attribute type 6 has an invalid length. [ 145.577345][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.589644][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.642675][ T7820] netlink: 'syz.4.502': attribute type 4 has an invalid length. [ 145.668023][ T7797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.759088][ T7806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.798589][ T7808] bond1: (slave gretap1): making interface the new active one [ 145.808894][ T7808] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.909872][ T7820] `: renamed from bond0 (while UP) [ 146.007457][ T7797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.228046][ T7841] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.605066][ T7855] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 146.974963][ T7880] syz_tun: entered allmulticast mode [ 146.998404][ T7878] syz_tun: left allmulticast mode [ 148.018987][ T7230] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 148.409697][ T7941] __nla_validate_parse: 11 callbacks suppressed [ 148.409717][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.533'. [ 148.742844][ T7959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.540'. [ 148.806925][ T7959] vxlan0: entered promiscuous mode [ 148.839617][ T7959] vxlan0: entered allmulticast mode [ 148.877639][ T7232] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.921989][ T7232] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.984284][ T7232] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.013445][ T7232] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.054222][ T7232] wlan1: Trigger new scan to find an IBSS to join [ 149.143187][ T7971] tipc: Enabling of bearer rejected, failed to enable media [ 149.298360][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 149.307682][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 149.382013][ T7986] validate_nla: 3 callbacks suppressed [ 149.382031][ T7986] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 149.448262][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 149.521345][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 149.648442][ T7986] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 150.050791][ T8018] netlink: 'syz.1.555': attribute type 7 has an invalid length. [ 150.059497][ T8018] netlink: 'syz.1.555': attribute type 8 has an invalid length. [ 150.076409][ T8018] netlink: 128 bytes leftover after parsing attributes in process `syz.1.555'. [ 150.599552][ T8042] netlink: 830 bytes leftover after parsing attributes in process `syz.3.564'. [ 150.621160][ T8042] netlink: 144 bytes leftover after parsing attributes in process `syz.3.564'. [ 150.638232][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 150.668999][ T8048] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 150.860798][ T8052] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.885121][ T8052] bond3: (slave bond4): making interface the new active one [ 150.893563][ T8052] bond3: (slave bond4): Enslaving as an active interface with an up link [ 150.903835][ T8055] bond3: entered promiscuous mode [ 150.908988][ T8055] bond4: entered promiscuous mode [ 150.914661][ T8055] bond3: entered allmulticast mode [ 150.919805][ T8055] bond4: entered allmulticast mode [ 150.926720][ T8055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.935424][ T8057] lo: entered promiscuous mode [ 150.944222][ T8057] tunl0: entered promiscuous mode [ 150.953010][ T8057] gre0: entered promiscuous mode [ 150.966963][ T8057] gretap0: entered promiscuous mode [ 150.984316][ T8057] erspan0: entered promiscuous mode [ 151.001014][ T8057] ip_vti0: entered promiscuous mode [ 151.581254][ T8094] tipc: Enabling of bearer rejected, failed to enable media [ 151.757991][ T8112] tipc: Enabling not permitted [ 151.782642][ T8112] tipc: Enabling of bearer rejected, failed to enable media [ 151.846991][ T8115] block nbd0: Unsupported socket: shutdown callout must be supported. [ 151.898526][ T8115] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 152.092451][ T7234] wlan1: Trigger new scan to find an IBSS to join [ 152.300856][ T8135] netlink: 'syz.4.594': attribute type 12 has an invalid length. [ 152.487433][ T8154] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 152.750987][ T8161] netlink: 'syz.2.603': attribute type 83 has an invalid length. [ 153.126400][ T8185] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 153.219475][ T8188] netlink: 'syz.1.616': attribute type 83 has an invalid length. [ 153.244808][ T8191] gretap1: entered promiscuous mode [ 153.520545][ T8203] openvswitch: netlink: Unknown key attributes 2 [ 153.565162][ T8205] __nla_validate_parse: 19 callbacks suppressed [ 153.565184][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 153.806638][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 153.898071][ T8216] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 153.909582][ T7230] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.928832][ T7230] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.938134][ T7230] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.949974][ T7230] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.170419][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.178388][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.185778][ T8225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 154.285833][ T8231] xt_time: unknown flags 0xf4 [ 154.365895][ T8217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.384195][ T8217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.639761][ T8224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.690611][ T5987] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.751745][ T5987] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.760882][ T5987] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.793422][ T5987] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.932478][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 154.941332][ T8257] netlink: 'syz.4.633': attribute type 12 has an invalid length. [ 154.979745][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 155.006293][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 155.024389][ T8257] netlink: 'syz.4.633': attribute type 12 has an invalid length. [ 155.066340][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 155.081867][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 155.120662][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 155.330174][ T8278] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 155.428769][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.448945][ T8285] netlink: 'syz.1.645': attribute type 2 has an invalid length. [ 155.475890][ T8282] bond0: (slave veth3): Enslaving as an active interface with a down link [ 155.493858][ T8285] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 155.598330][ T8278] veth5: entered promiscuous mode [ 155.610790][ T8278] bond0: (slave veth5): Enslaving as an active interface with a down link [ 155.878850][ T8308] 8021q: VLANs not supported on lo [ 156.469233][ T8328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.657'. [ 156.618903][ T8339] netlink: 96 bytes leftover after parsing attributes in process `syz.4.661'. [ 156.803742][ T8346] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 157.006824][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880587b2c00: rx timeout, send abort [ 157.016956][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880587b2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 157.292957][ T8360] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 157.543647][ T8369] netlink: 'syz.0.670': attribute type 11 has an invalid length. [ 158.069528][ T8405] netlink: 'syz.0.680': attribute type 7 has an invalid length. [ 158.140154][ T8405] : entered promiscuous mode [ 158.343865][ T8425] gretap1: entered promiscuous mode [ 158.361013][ T8425] gretap1: entered allmulticast mode [ 158.579881][ T8439] tipc: Started in network mode [ 158.585330][ T8439] tipc: Node identity 7645236dfe6e, cluster identity 4711 [ 158.593536][ T8439] tipc: Enabled bearer , priority 0 [ 158.611118][ T8439] tipc: Resetting bearer [ 158.666538][ T8437] tipc: Disabling bearer [ 158.781606][ T8447] netlink: 'syz.0.694': attribute type 10 has an invalid length. [ 158.879655][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.894429][ T8447] bond0: (slave team0): Enslaving as an active interface with an up link [ 158.904934][ T8452] veth1_to_bond: entered allmulticast mode [ 158.922059][ T8455] veth1_to_bond: left allmulticast mode [ 158.928701][ T8453] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 158.994870][ T8455] __nla_validate_parse: 11 callbacks suppressed [ 158.994892][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 159.143327][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 159.577563][ T8489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.627132][ T8496] IPVS: Unknown mcast interface: veth0_vlan [ 159.676174][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 159.709175][ T8497] netlink: 56 bytes leftover after parsing attributes in process `syz.0.709'. [ 159.721885][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 159.731031][ T8497] netlink: 31 bytes leftover after parsing attributes in process `syz.0.709'. [ 159.777434][ T8497] netlink: 'syz.0.709': attribute type 3 has an invalid length. [ 159.789910][ T8505] sctp: [Deprecated]: syz.3.711 (pid 8505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.789910][ T8505] Use struct sctp_sack_info instead [ 159.818668][ T8497] netlink: 'syz.0.709': attribute type 2 has an invalid length. [ 159.852148][ T8497] netlink: 31 bytes leftover after parsing attributes in process `syz.0.709'. [ 160.086354][ T8520] netlink: 68 bytes leftover after parsing attributes in process `syz.2.716'. [ 160.128486][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 160.267472][ T5939] IPVS: starting estimator thread 0... [ 160.310231][ T8527] syzkaller0: entered promiscuous mode [ 160.316292][ T8527] syzkaller0: entered allmulticast mode [ 160.367641][ T8533] netlink: 48 bytes leftover after parsing attributes in process `syz.4.720'. [ 160.381912][ T8528] IPVS: using max 26 ests per chain, 62400 per kthread [ 160.841826][ T8554] syzkaller1: entered promiscuous mode [ 160.861764][ T8554] syzkaller1: entered allmulticast mode [ 160.928592][ T8563] netlink: 'syz.1.727': attribute type 83 has an invalid length. [ 160.955842][ T8563] nbd: must specify an index to disconnect [ 161.226057][ T8577] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.547095][ T8577] smc: removing net device bond0 with user defined pnetid SYZ2 [ 161.559341][ T8577] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 161.571993][ T8577] bond0 (unregistering): Released all slaves [ 161.692456][ T8598] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 161.704087][ T8597] IPVS: stopping master sync thread 8598 ... [ 161.765112][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 161.818727][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 161.836357][ T8597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.854357][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 161.870741][ T8605] netlink: 'syz.3.739': attribute type 11 has an invalid length. [ 161.912160][ T8596] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 161.974077][ T8596] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.108335][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 162.119020][ T8618] netlink: 'syz.4.744': attribute type 2 has an invalid length. [ 162.140810][ T8618] nbd: must specify at least one socket [ 162.162977][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 162.208077][ T8621] geneve2: entered promiscuous mode [ 162.219275][ T8621] geneve2: entered allmulticast mode [ 162.228280][ T8625] netlink: 'syz.1.745': attribute type 39 has an invalid length. [ 162.248837][ T7232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.258069][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 162.270094][ T7232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.289852][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 162.306697][ T8596] hsr0 speed is unknown, defaulting to 1000 [ 162.312032][ T7232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.342329][ T7236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.562997][ T8637] geneve3: entered promiscuous mode [ 162.568490][ T8637] geneve3: entered allmulticast mode [ 162.637046][ T8642] openvswitch: netlink: Key type 15631 is out of range max 32 [ 162.999026][ T8663] tipc: Enabled bearer , priority 12 [ 163.025794][ T8667] tipc: Enabling of bearer rejected, failed to enable media [ 164.087821][ T8711] bond2: entered allmulticast mode [ 164.094051][ T8711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.103215][ T8711] bridge0: port 3(bond2) entered blocking state [ 164.110059][ T8711] bridge0: port 3(bond2) entered disabled state [ 164.121909][ T5932] tipc: Node number set to 1879985437 [ 164.131425][ T8711] bond2: entered promiscuous mode [ 164.137542][ T8711] bridge0: port 3(bond2) entered blocking state [ 164.144369][ T8711] bridge0: port 3(bond2) entered forwarding state [ 164.159019][ T7232] bridge0: port 3(bond2) entered disabled state [ 164.207489][ T8728] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 164.327361][ T8729] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 164.555218][ T8744] __nla_validate_parse: 16 callbacks suppressed [ 164.555239][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.778'. [ 164.630801][ T8750] pim6reg1: entered promiscuous mode [ 164.631230][ T8751] netlink: 'syz.1.781': attribute type 21 has an invalid length. [ 164.639889][ T8750] pim6reg1: entered allmulticast mode [ 164.651478][ T8751] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.677478][ T8754] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 164.892398][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.785'. [ 165.109624][ T8774] netlink: 'syz.4.788': attribute type 2 has an invalid length. [ 165.117946][ T8774] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.788'. [ 165.132281][ T8774] nbd: must specify at least one socket [ 165.220004][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 165.230553][ T8781] netlink: 5 bytes leftover after parsing attributes in process `syz.2.790'. [ 165.500097][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.798'. [ 165.589063][ T8809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.651506][ T8812] netlink: 80 bytes leftover after parsing attributes in process `syz.0.801'. [ 165.661109][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 165.675056][ T8812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'. [ 165.773303][ T8816] netlink: 'syz.3.802': attribute type 10 has an invalid length. [ 165.790665][ T8817] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 165.798775][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 166.011478][ T8834] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.138063][ T8840] netlink: 'syz.0.809': attribute type 7 has an invalid length. [ 166.201936][ T8840] veth3: entered promiscuous mode [ 166.207195][ T8840] veth3: entered allmulticast mode [ 166.728816][ T8867] tipc: Enabled bearer , priority 10 [ 166.794452][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059bd5800: rx timeout, send abort [ 166.803645][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059bd5800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 166.853877][ T8872] netlink: 'syz.3.818': attribute type 4 has an invalid length. [ 166.952919][ T8870] IPv4: Oversized IP packet from 127.202.26.0 [ 167.217202][ T8897] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 167.285828][ T8897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.293803][ T8901] netlink: 'syz.3.825': attribute type 11 has an invalid length. [ 167.312785][ T8887] syz.0.822 (8887) used greatest stack depth: 17864 bytes left [ 167.348847][ T8902] bond6: (slave gretap2): making interface the new active one [ 167.361096][ T8902] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 167.414116][ T8901] netlink: 'syz.3.825': attribute type 11 has an invalid length. [ 167.440469][ T5987] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.459226][ T5987] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.485498][ T5987] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.498905][ T8911] netlink: 'syz.0.827': attribute type 10 has an invalid length. [ 167.520429][ T5987] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.573087][ T8911] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 167.638077][ T8913] veth1_to_bond: entered allmulticast mode [ 167.683265][ T8914] bond0: (slave bond_slave_1): Releasing backup interface [ 167.758784][ T8914] veth1_to_bond (unregistering): left allmulticast mode [ 168.088004][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021f3ec00: rx timeout, send abort [ 168.097955][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021f3ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.541071][ T8968] netlink: 'syz.3.839': attribute type 10 has an invalid length. [ 168.569880][ T8968] team0: Port device dummy0 added [ 168.663497][ T8977] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 168.720677][ T8979] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 168.740036][ T8979] netlink: 'syz.3.843': attribute type 30 has an invalid length. [ 168.767498][ T8979] smc: adding net device bond0 with user defined pnetid SYZ2 [ 168.794557][ T8981] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 169.602460][ T9023] __nla_validate_parse: 16 callbacks suppressed [ 169.602484][ T9023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.860'. [ 170.119890][ T9056] netlink: 192 bytes leftover after parsing attributes in process `syz.0.869'. [ 170.255704][ T9062] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 170.287024][ T9067] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 170.342304][ T9072] netlink: 64 bytes leftover after parsing attributes in process `syz.0.874'. [ 170.509243][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 170.547035][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.878'. [ 170.608799][ T9081] netlink: 156 bytes leftover after parsing attributes in process `syz.3.878'. [ 170.648228][ T9097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.667808][ T30] audit: type=1107 audit(1757243231.257:2): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ˆŠMžøí*3˜échv?ý}­Èå‚þ†Ð÷Å8Š×h1áç—T:Û„[™¼Fqq›ÎT óuÝ„€‡ŽŸ-æÖ–|n°s\PJ@%¦˜‹®Â2ïÔáßäƒ' [ 170.786263][ T9101] netem: change failed [ 170.795066][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 171.034525][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.886'. [ 171.058194][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 171.067553][ T9111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.090541][ T9110] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 171.117909][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 172.629894][ T9205] validate_nla: 1 callbacks suppressed [ 172.629916][ T9205] netlink: 'syz.0.915': attribute type 12 has an invalid length. [ 172.752594][ T9212] netlink: 'syz.3.918': attribute type 21 has an invalid length. [ 173.034437][ T9231] !: renamed from dummy0 (while UP) [ 173.776941][ T9280] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 173.877069][ T9283] netlink: 'syz.3.937': attribute type 32 has an invalid length. [ 173.918315][ T9283] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 174.071022][ T9292] netlink: 'syz.0.940': attribute type 6 has an invalid length. [ 174.148720][ T9292] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 174.189399][ T9292] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 174.460863][ T9313] netlink: 'syz.0.945': attribute type 12 has an invalid length. [ 174.498390][ T5987] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.526388][ T5987] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.571739][ T5987] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.580577][ T5987] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.674436][ T9324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.819490][ T9334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.830680][ T9334] __nla_validate_parse: 15 callbacks suppressed [ 174.830699][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 174.852342][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 175.508933][ T9372] netlink: 68 bytes leftover after parsing attributes in process `syz.3.963'. [ 175.526473][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.963'. [ 175.580592][ T9348] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 176.056960][ T9400] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.971'. [ 176.083405][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 176.092621][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 176.239274][ T9418] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 176.281303][ T9418] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 176.398741][ T9429] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 176.430615][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 176.442462][ T9429] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 176.593974][ T9443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.980'. [ 176.608031][ T9443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.980'. [ 177.132620][ T5867] Bluetooth: hci0: command 0x080f tx timeout [ 177.241412][ T9472] netlink: 'syz.2.987': attribute type 3 has an invalid length. [ 177.264668][ T9472] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 177.594066][ T9497] openvswitch: netlink: Missing valid actions attribute. [ 177.622826][ T9497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.659402][ T9503] smc: net device erspan0 erased user defined pnetid SYZ0 [ 177.756508][ T9506] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 177.820388][ T9516] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 177.851082][ T9512] unknown channel width for channel at 909000KHz? [ 178.717916][ T9552] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 178.739861][ T9552] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 178.752414][ T9554] netlink: 'syz.3.1015': attribute type 83 has an invalid length. [ 179.962670][ T9620] __nla_validate_parse: 7 callbacks suppressed [ 179.962690][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1034'. [ 180.421448][ T9648] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 180.688461][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 180.775538][ T9669] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 180.856329][ T9669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.099392][ T9676] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 181.195170][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 181.231574][ T9685] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1047'. [ 181.350157][ T9690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 181.473780][ T9698] tipc: Cannot configure node identity twice [ 181.529261][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 181.895342][ T9727] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1060'. [ 182.016974][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 182.154890][ T9739] veth0: entered promiscuous mode [ 182.201957][ T9739] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 182.228949][ T9742] delete_channel: no stack [ 182.229011][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'. [ 182.243514][ T9738] veth0: left promiscuous mode [ 182.264443][ T9743] netlink: 'syz.4.1067': attribute type 11 has an invalid length. [ 182.616806][ T9768] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.1076'. [ 182.761138][ T9771] hsr_slave_1 (unregistering): left promiscuous mode [ 182.945514][ T9788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.966071][ T9790] tipc: Enabling of bearer rejected, media not registered [ 183.037601][ T9792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.125423][ T9788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.148738][ T9800] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 183.242883][ T9788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.395558][ T9788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.466837][ T9809] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 183.657910][ T9820] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 183.690009][ T7220] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.726263][ T7220] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.840870][ T144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.860377][ T9829] netlink: 'syz.0.1094': attribute type 2 has an invalid length. [ 183.890383][ T144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.971084][ T9827] team1: entered promiscuous mode [ 183.979937][ T9827] team1: entered allmulticast mode [ 184.200548][ T9848] netlink: 'syz.3.1102': attribute type 1 has an invalid length. [ 184.270453][ T9848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.308793][ T9853] bond2: (slave geneve2): making interface the new active one [ 184.331343][ T9853] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 184.411310][ T9848] syz_tun: entered promiscuous mode [ 184.437127][ T9848] batadv_slave_0: entered promiscuous mode [ 184.446835][ T9857] bridge_slave_0: invalid flags given to default FDB implementation [ 184.918737][ T9881] syzkaller0: entered promiscuous mode [ 184.932290][ T9881] syzkaller0: entered allmulticast mode [ 184.967740][ T9887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.118943][ T5952] IPVS: starting estimator thread 0... [ 185.130205][ T9900] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 185.221939][ T9901] IPVS: using max 24 ests per chain, 57600 per kthread [ 186.843878][ T9916] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 187.389515][ T9950] netlink: 'syz.2.1135': attribute type 2 has an invalid length. [ 187.416413][ T9950] __nla_validate_parse: 12 callbacks suppressed [ 187.416434][ T9950] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1135'. [ 187.478990][ T9953] bridge0: entered allmulticast mode [ 187.485223][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 187.524469][ T9953] bond2: left promiscuous mode [ 187.537432][ T9953] bridge0: port 3(bond2) entered disabled state [ 187.598861][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 187.613845][ T9953] bridge_slave_1: left allmulticast mode [ 187.626167][ T9953] bridge_slave_1: left promiscuous mode [ 187.637552][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.661336][ T9953] bridge_slave_0: left allmulticast mode [ 187.666602][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 187.672298][ T9953] bridge_slave_0: left promiscuous mode [ 187.688091][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.715493][ T9953] bridge0 (unregistering): left allmulticast mode [ 188.078274][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1146'. [ 188.139370][ T9992] netlink: 'syz.0.1147': attribute type 10 has an invalid length. [ 188.217700][ T9992] bond0: (slave team0): Releasing backup interface [ 188.256323][ T9992] bridge0: port 3(team0) entered blocking state [ 188.279617][ T9992] bridge0: port 3(team0) entered disabled state [ 188.305039][ T9992] team0: entered allmulticast mode [ 188.321372][ T9992] team_slave_0: entered allmulticast mode [ 188.335650][ T9992] team_slave_1: entered allmulticast mode [ 188.361884][ T9992] dummy0: entered allmulticast mode [ 188.370291][ T9992] team0: entered promiscuous mode [ 188.377626][ T9992] team_slave_0: entered promiscuous mode [ 188.389084][ T9992] team_slave_1: entered promiscuous mode [ 188.396061][ T9992] dummy0: entered promiscuous mode [ 188.437354][ T9996] smc: net device wlan0 applied user defined pnetid SYZ1 [ 188.580316][T10010] netlink: 'syz.0.1152': attribute type 2 has an invalid length. [ 188.662500][T10011] hsr0 speed is unknown, defaulting to 1000 [ 188.707967][T10013] netlink: 'syz.3.1153': attribute type 3 has an invalid length. [ 188.716281][T10013] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1153'. [ 189.301770][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 189.425313][T10052] team0: Mode changed to "activebackup" [ 189.452379][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 189.554571][T10065] syz_tun: entered allmulticast mode [ 189.570217][T10065] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1167'. [ 189.582197][T10066] syzkaller1: entered promiscuous mode [ 189.587716][T10066] syzkaller1: entered allmulticast mode [ 189.596756][T10068] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1165'. [ 189.596982][ T144] nci: nci_rx_work: unknown MT 0x1 [ 189.732953][T10077] openvswitch: netlink: IP tunnel dst address not specified [ 189.774694][T10063] syz_tun: left allmulticast mode [ 190.008018][T10089] hsr0 speed is unknown, defaulting to 1000 [ 190.437515][T10101] bridge0: port 3(team0) entered blocking state [ 190.444173][T10101] bridge0: port 3(team0) entered forwarding state [ 190.471900][T10101] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.522432][T10101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.805979][T10127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.808706][T10123] netlink: 'syz.3.1180': attribute type 2 has an invalid length. [ 190.970575][T10127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.331068][T10150] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 191.360226][T10150] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 191.533782][T10149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.575981][T10149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.647893][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.663550][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.755222][T10149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.770856][T10149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.799720][T10170] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 191.825824][T10177] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 191.901189][T10149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.923179][T10149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.929561][T10182] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 191.955668][T10180] netlink: 'syz.0.1196': attribute type 4 has an invalid length. [ 191.970783][T10186] netlink: 'syz.0.1196': attribute type 4 has an invalid length. [ 192.064513][T10149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.076763][T10149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.208562][ T59] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.220233][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.230442][T10194] netlink: 'syz.0.1200': attribute type 9 has an invalid length. [ 192.238259][ T59] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.238296][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.274861][ T59] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.283613][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.319575][ T144] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.331496][ T144] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.564225][T10210] __nla_validate_parse: 6 callbacks suppressed [ 192.564246][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 192.681943][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 192.891117][T10226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.111330][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 193.181522][T10237] team1: entered promiscuous mode [ 193.206833][T10237] team1: entered allmulticast mode [ 193.751300][T10271] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1222'. [ 193.873991][T10277] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1225'. [ 193.898948][T10278] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 193.907157][T10278] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1227'. [ 194.386833][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 194.389308][T10311] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 194.428984][T10311] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 194.632427][T10325] netlink: 'syz.4.1240': attribute type 6 has an invalid length. [ 194.640214][T10325] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 194.660845][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 194.692066][T10325] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1240'. [ 194.705093][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 194.756640][T10330] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 194.813218][T10330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.100125][T10343] bridge4: entered promiscuous mode [ 195.168946][T10343] bridge4: entered allmulticast mode [ 195.302649][T10358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.315030][T10358] batadv_slave_0: entered promiscuous mode [ 195.870528][T10396] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 196.031883][T10394] tipc: Enabled bearer , priority 0 [ 196.102870][T10400] syzkaller0: entered promiscuous mode [ 196.108545][T10400] syzkaller0: entered allmulticast mode [ 196.178394][T10394] tipc: Resetting bearer [ 196.196698][T10393] tipc: Resetting bearer [ 196.232858][T10393] tipc: Disabling bearer [ 196.507186][T10430] openvswitch: netlink: Flow key attribute not present in set flow. [ 198.462978][T10460] geneve2: entered promiscuous mode [ 198.468482][T10460] geneve2: entered allmulticast mode [ 198.558700][T10480] veth0: entered promiscuous mode [ 198.613764][T10490] tipc: Started in network mode [ 198.624328][T10490] tipc: Node identity , cluster identity 4711 [ 198.630456][T10490] tipc: Failed to obtain node identity [ 198.670832][T10490] tipc: Enabling of bearer rejected, failed to enable media [ 198.694463][T10521] __nla_validate_parse: 9 callbacks suppressed [ 198.694483][T10521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1292'. [ 198.784046][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 198.794072][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 198.855646][T10486] syzkaller0: entered promiscuous mode [ 198.871212][T10486] syzkaller0: entered allmulticast mode [ 198.883493][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.911079][ T59] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 198.924639][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.933368][ T59] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 198.945095][T10486] veth0: left promiscuous mode [ 198.965402][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.993272][ T59] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 199.279201][T10549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1298'. [ 199.305757][T10549] nbd: must specify a size in bytes for the device [ 199.416136][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 199.472365][T10555] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 200.941593][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.950409][ T59] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 201.150246][T10582] syzkaller1: entered promiscuous mode [ 201.159094][T10582] syzkaller1: entered allmulticast mode [ 201.183196][T10586] netlink: 161492 bytes leftover after parsing attributes in process `syz.1.1313'. [ 201.217266][T10580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.805943][T10608] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 201.831823][T10608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1320'. [ 201.868463][T10608] tipc: Enabled bearer , priority 0 [ 201.885795][T10610] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1321'. [ 201.902533][T10608] syzkaller0: entered promiscuous mode [ 201.914719][T10608] syzkaller0: entered allmulticast mode [ 201.924939][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 201.942324][T10608] syzkaller0: mtu greater than device maximum [ 201.959114][T10607] tipc: Resetting bearer [ 201.993602][T10607] tipc: Disabling bearer [ 202.174204][T10617] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 202.258146][T10623] netlink: 'syz.3.1325': attribute type 1 has an invalid length. [ 202.433337][T10623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.552066][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1332'. [ 202.599386][T10626] hsr0 speed is unknown, defaulting to 1000 [ 202.659179][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.666721][T10641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.896511][T10508] hsr0 speed is unknown, defaulting to 1000 [ 203.639617][T10687] syzkaller1: entered promiscuous mode [ 203.649174][T10687] syzkaller1: entered allmulticast mode [ 203.803679][T10703] __nla_validate_parse: 2 callbacks suppressed [ 203.803703][T10703] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1345'. [ 203.831912][T10703] netlink: zone id is out of range [ 203.837128][T10703] netlink: get zone limit has 8 unknown bytes [ 203.980426][T10711] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1348'. [ 204.032589][ T7234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.062795][ T7234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.311512][T10719] netlink: 'syz.0.1351': attribute type 12 has an invalid length. [ 204.319834][T10731] netlink: 'syz.4.1352': attribute type 5 has an invalid length. [ 204.328368][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 204.560069][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 204.677467][T10753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1359'. [ 204.716309][T10757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1360'. [ 204.896238][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 205.239601][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'. [ 205.349715][T10784] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 205.359188][ T7234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 205.360766][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 205.385753][ T7234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 205.466617][ T7234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 205.487202][ T7234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.058665][T10812] syzkaller0: entered promiscuous mode [ 206.082420][T10812] syzkaller0: entered allmulticast mode [ 206.165252][T10825] netlink: 'syz.3.1374': attribute type 1 has an invalid length. [ 206.174219][T10825] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 206.189407][T10825] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1374'. [ 207.295866][T10884] netlink: 'syz.1.1393': attribute type 2 has an invalid length. [ 208.019197][T10922] : entered promiscuous mode [ 208.359958][T10936] bridge5: port 1(veth3) entered blocking state [ 208.376521][T10936] bridge5: port 1(veth3) entered disabled state [ 208.395635][T10936] veth3: entered allmulticast mode [ 208.411577][T10936] veth3: entered promiscuous mode [ 208.469811][T10932] vlan0: entered allmulticast mode [ 208.485753][T10932] veth0_to_bond: entered allmulticast mode [ 208.493531][T10932] bridge5: port 2(vlan0) entered blocking state [ 208.500771][T10932] bridge5: port 2(vlan0) entered disabled state [ 208.510041][T10932] vlan0: entered promiscuous mode [ 208.543863][T10932] veth0_to_bond: entered promiscuous mode [ 208.770588][T10957] openvswitch: netlink: Multiple metadata blocks provided [ 208.940765][T10970] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 208.982261][T10970] __nla_validate_parse: 8 callbacks suppressed [ 208.982282][T10970] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1421'. [ 209.049764][T10978] netlink: 'syz.2.1423': attribute type 1 has an invalid length. [ 209.125393][T10982] pim6reg1: entered promiscuous mode [ 209.130821][T10982] pim6reg1: entered allmulticast mode [ 209.284291][T10988] sctp: [Deprecated]: syz.1.1428 (pid 10988) Use of int in maxseg socket option. [ 209.284291][T10988] Use struct sctp_assoc_value instead [ 209.318175][T10994] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1427'. [ 209.371906][ T5867] Bluetooth: hci0: command 0x080f tx timeout [ 209.502922][T11006] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1429'. [ 209.519576][T11006] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1429'. [ 209.762982][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1435'. [ 209.847794][T11023] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 210.577598][T11050] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 210.586251][T11050] netlink: 'syz.2.1442': attribute type 4 has an invalid length. [ 210.594751][T11050] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.1442'. [ 210.677041][T11052] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1443'. [ 210.740652][T11057] Bluetooth: MGMT ver 1.23 [ 210.903099][T11063] netlink: 'syz.1.1448': attribute type 1 has an invalid length. [ 211.055302][T11063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.175116][T11069] veth3: entered promiscuous mode [ 211.189572][T11069] bond3: (slave veth3): Enslaving as an active interface with an up link [ 211.812208][T11113] pim6reg1: entered promiscuous mode [ 211.817824][T11113] pim6reg1: entered allmulticast mode [ 212.088725][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1469'. [ 212.180810][T11137] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 212.266347][T11143] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1473'. [ 212.318961][T11149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.347729][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 212.644050][T11168] syzkaller1: entered promiscuous mode [ 212.659293][T11168] syzkaller1: entered allmulticast mode [ 212.688869][T11166] sock: sock_set_timeout: `syz.2.1479' (pid 11166) tries to set negative timeout [ 212.812017][ T5872] Bluetooth: hci2: command 0x0401 tx timeout [ 212.823611][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 212.921449][T11179] netlink: 'syz.4.1481': attribute type 9 has an invalid length. [ 213.117198][T11193] openvswitch: netlink: IP tunnel dst address not specified [ 213.462070][T11209] hsr_slave_1 (unregistering): left promiscuous mode [ 213.494716][T11218] veth1_to_bond: entered allmulticast mode [ 213.578872][T11217] veth1_to_bond: left allmulticast mode [ 213.813839][T11237] netlink: 'syz.1.1503': attribute type 14 has an invalid length. [ 213.831869][T11237] netlink: 'syz.1.1503': attribute type 13 has an invalid length. [ 214.028613][T11249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 214.050488][T11253] netlink: 'syz.3.1509': attribute type 8 has an invalid length. [ 214.053536][T11254] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 214.146615][T11260] netlink: 'syz.3.1509': attribute type 8 has an invalid length. [ 214.257183][T11254] __nla_validate_parse: 8 callbacks suppressed [ 214.257204][T11254] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1506'. [ 214.289654][T11262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.299078][T11262] bond4: (slave bond5): making interface the new active one [ 214.307828][T11262] bond4: (slave bond5): Enslaving as an active interface with an up link [ 214.324625][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'. [ 214.337782][T11254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.477126][T11284] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1514'. [ 214.661020][T11290] netlink: 'syz.0.1517': attribute type 27 has an invalid length. [ 214.913633][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 215.047263][T11314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1521'. [ 215.191496][T11318] syz.2.1525 uses old SIOCAX25GETINFO [ 215.289660][T11320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1526'. [ 215.307646][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 215.404470][T11326] netlink: 'syz.4.1529': attribute type 4 has an invalid length. [ 215.725439][T11343] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1534'. [ 215.767150][T11349] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 215.863395][T11353] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 215.976074][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 216.000650][T11357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.018678][T11363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1540'. [ 216.057240][T11357] bond4: (slave bond5): making interface the new active one [ 216.076897][T11357] bond4: (slave bond5): Enslaving as an active interface with an up link [ 216.172578][T11353] bond4: entered promiscuous mode [ 216.177818][T11353] bond5: entered promiscuous mode [ 216.200317][T11353] bond4: entered allmulticast mode [ 216.206849][T11353] bond5: entered allmulticast mode [ 216.221207][T11353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.335472][T11378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1542'. [ 217.054990][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 217.061177][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 217.063180][ T5877] Bluetooth: hci0: command 0x080f tx timeout [ 217.067483][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 218.332995][T11497] netlink: 'syz.0.1575': attribute type 21 has an invalid length. [ 218.359179][T11497] netlink: 'syz.0.1575': attribute type 21 has an invalid length. [ 219.283339][T11534] __nla_validate_parse: 8 callbacks suppressed [ 219.283360][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1584'. [ 219.342001][T11534] netlink: 'syz.1.1584': attribute type 8 has an invalid length. [ 219.349607][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 219.395117][T11540] veth0: entered promiscuous mode [ 219.425047][T11540] tc_dump_action: action bad kind [ 219.441052][T11537] veth0: left promiscuous mode [ 219.684454][T11555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1591'. [ 219.742276][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.811954][T11562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.930150][T11570] syzkaller0: entered promiscuous mode [ 219.936248][T11570] syzkaller0: entered allmulticast mode [ 219.999997][T11575] tipc: Enabled bearer , priority 0 [ 220.017999][T11575] syzkaller0: entered promiscuous mode [ 220.026717][T11575] syzkaller0: entered allmulticast mode [ 220.105120][T11575] tipc: Resetting bearer [ 220.126395][T11574] tipc: Resetting bearer [ 220.163157][T11574] tipc: Disabling bearer [ 220.178696][T11583] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20000 [ 220.598845][T11599] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1602'. [ 220.628978][T11600] hsr0 speed is unknown, defaulting to 1000 [ 220.641532][T11599] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 220.670614][T11605] tipc: Started in network mode [ 220.676211][T11605] tipc: Node identity e665fda33d37, cluster identity 4711 [ 220.687156][T11605] tipc: Enabled bearer , priority 0 [ 220.753326][T11605] syzkaller0: entered promiscuous mode [ 220.758876][T11605] syzkaller0: entered allmulticast mode [ 220.782800][T11611] netlink: 'syz.0.1608': attribute type 15 has an invalid length. [ 220.810836][T11605] tipc: Resetting bearer [ 220.836546][T11616] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1608'. [ 220.851158][T11615] sctp: [Deprecated]: syz.1.1609 (pid 11615) Use of int in maxseg socket option. [ 220.851158][T11615] Use struct sctp_assoc_value instead [ 220.882315][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1608'. [ 220.931279][T11604] tipc: Resetting bearer [ 220.970784][T11604] tipc: Disabling bearer [ 221.070740][T11618] batadv1: entered allmulticast mode [ 221.078345][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 221.096654][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'. [ 221.149035][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 221.305609][T11622] openvswitch: netlink: Key type 13830 is out of range max 32 [ 221.545126][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 221.747717][T11658] netlink: 'syz.3.1620': attribute type 32 has an invalid length. [ 221.759212][T11658] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 221.833316][T11659] netlink: 'syz.1.1621': attribute type 21 has an invalid length. [ 221.861562][T11659] netlink: 'syz.1.1621': attribute type 6 has an invalid length. [ 222.054316][T11676] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 222.202954][T11685] 8021q: VLANs not supported on ipvlan0 [ 222.880373][T11715] vlan0: entered promiscuous mode [ 222.901054][T11715] bridge0: entered promiscuous mode [ 223.144739][ T59] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 223.218993][T11729] bridge5: entered promiscuous mode [ 223.248131][T11729] bridge5: entered allmulticast mode [ 223.323144][T11728] can: request_module (can-proto-0) failed. [ 223.575197][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.597735][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.629376][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.644971][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.653753][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.662420][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.678762][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.688616][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.697670][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 223.712324][T11754] netlink: 'syz.3.1650': attribute type 21 has an invalid length. [ 224.129129][T11788] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 224.788227][T11829] nbd: must specify at least one socket [ 224.811117][T11832] __nla_validate_parse: 43 callbacks suppressed [ 224.811137][T11832] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1674'. [ 224.905375][T11826] dvmrp0: entered allmulticast mode [ 224.971197][T11839] macvlan3: entered allmulticast mode [ 225.002642][T11839] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 225.070232][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 225.174891][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 225.204913][T11859] veth0: entered promiscuous mode [ 225.232918][T11859] veth0: left promiscuous mode [ 225.245383][T11859] veth0: entered promiscuous mode [ 225.313275][T11859] veth0: left promiscuous mode [ 225.380375][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 225.661407][T11884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1684'. [ 225.736579][T11857] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1679'. [ 225.998452][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 226.193800][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 226.356486][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 226.420518][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'. [ 226.573650][T11931] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 226.609917][T11935] team0: Device gtp0 is of different type [ 227.023941][T10509] IPVS: starting estimator thread 0... [ 227.125439][T11959] IPVS: using max 23 ests per chain, 55200 per kthread [ 227.227770][T11971] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 227.344376][T11978] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 227.744425][T11995] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 228.653107][T12049] validate_nla: 25 callbacks suppressed [ 228.653129][T12049] netlink: 'syz.4.1742': attribute type 6 has an invalid length. [ 228.682399][T12049] netlink: 'syz.4.1742': attribute type 11 has an invalid length. [ 229.636534][T12104] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 230.121039][T12118] __nla_validate_parse: 10 callbacks suppressed [ 230.121059][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 230.144490][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 230.155909][T12118] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1762'. [ 230.268552][T12127] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 230.439457][T12134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1766'. [ 230.749419][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 230.865677][T12153] netlink: 'syz.0.1768': attribute type 29 has an invalid length. [ 230.915953][T12153] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1768'. [ 231.018423][T12157] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1772'. [ 231.329322][T12171] netlink: 'syz.4.1778': attribute type 21 has an invalid length. [ 231.352466][T12171] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1778'. [ 231.384159][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 231.395465][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1778'. [ 231.436295][T12177] tipc: Enabled bearer , priority 0 [ 231.444050][T12177] syzkaller0: entered promiscuous mode [ 231.449734][T12177] syzkaller0: entered allmulticast mode [ 231.482391][T12177] tipc: Resetting bearer [ 231.506553][T12174] tipc: Resetting bearer [ 231.597557][T12174] tipc: Disabling bearer [ 231.840121][T12203] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.996252][T12212] netlink: 'syz.0.1792': attribute type 11 has an invalid length. [ 232.025016][T12215] netlink: 'syz.4.1794': attribute type 1 has an invalid length. [ 232.190634][T12215] gretap1: entered promiscuous mode [ 232.261342][T12226] pimreg3: entered allmulticast mode [ 232.507382][T12246] openvswitch: netlink: Flow key attr not present in new flow. [ 232.601495][T12248] veth0: entered promiscuous mode [ 232.634567][T12249] xfrm0: Master is either lo or non-ether device [ 233.029842][T12274] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 233.225553][T12289] netlink: 'syz.3.1816': attribute type 19 has an invalid length. [ 233.248034][T12290] ip6gre1: entered allmulticast mode [ 234.395303][T12341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.426658][T12342] __nla_validate_parse: 15 callbacks suppressed [ 235.426678][T12342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1827'. [ 235.516275][T12344] syzkaller1: entered promiscuous mode [ 235.523855][T12344] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 48 [ 235.593080][T12351] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 235.605753][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 235.615026][T12351] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1832'. [ 235.630935][T12351] netlink: 'syz.4.1832': attribute type 2 has an invalid length. [ 235.649591][T12351] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 235.837748][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 235.855752][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 235.919544][ T5987] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.939251][ T5987] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.957562][ T5987] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.975427][ T5987] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.065858][T12372] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1840'. [ 236.068478][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 236.114339][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'. [ 236.124301][T12376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.126231][T12374] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1841'. [ 236.300864][T12386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1844'. [ 237.773599][T12436] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 237.855823][T12443] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 237.865616][T12440] tipc: Enabled bearer , priority 0 [ 237.887030][T12438] syzkaller0: entered promiscuous mode [ 237.913816][T12438] syzkaller0: entered allmulticast mode [ 237.914043][T12445] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 238.030252][T12439] tipc: Resetting bearer [ 238.098483][T12439] tipc: Disabling bearer [ 238.183510][T12460] batman_adv: batadv0: Adding interface: ipvlan3 [ 238.190489][T12460] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 238.228497][T12460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.240795][T12460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.251522][T12460] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 238.417091][T12472] tipc: Enabled bearer , priority 0 [ 238.442915][T12472] syzkaller0: entered promiscuous mode [ 238.448456][T12472] syzkaller0: entered allmulticast mode [ 238.508874][T12472] tipc: Resetting bearer [ 238.637382][T12469] tipc: Resetting bearer [ 238.716682][T12469] tipc: Disabling bearer [ 238.752341][T12487] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 238.984316][T12502] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 239.231543][T12519] tipc: Enabled bearer , priority 0 [ 239.240279][T12519] syzkaller0: entered promiscuous mode [ 239.246931][T12519] syzkaller0: entered allmulticast mode [ 239.293525][T12520] tipc: Resetting bearer [ 239.324756][T12518] tipc: Resetting bearer [ 239.348775][T12518] tipc: Disabling bearer [ 239.847526][T12550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.141792][T12564] netlink: 'syz.3.1898': attribute type 30 has an invalid length. [ 240.243797][T12572] netlink: 'syz.1.1899': attribute type 21 has an invalid length. [ 240.599955][T12579] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 240.667267][T12579] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.152124][T12605] unknown channel width for channel at 909000KHz? [ 241.176223][T12605] unknown channel width for channel at 909000KHz? [ 241.271285][T12611] __nla_validate_parse: 13 callbacks suppressed [ 241.271309][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 241.414953][T12629] veth1_to_bond: entered allmulticast mode [ 241.424163][T12628] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 241.447381][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 241.499694][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 241.521292][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 241.536327][T12628] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.566718][T12628] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1916'. [ 241.594890][T12629] bond0: (slave bond_slave_1): Releasing backup interface [ 241.647067][T12629] veth1_to_bond (unregistering): left allmulticast mode [ 241.714211][T12630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.721565][T12630] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.734986][T12630] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 241.809730][T12637] veth1: entered promiscuous mode [ 241.820417][T12637] bond6: (slave veth1): Enslaving as an active interface with a down link [ 241.847029][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 241.855257][T12628] vlan1: entered allmulticast mode [ 241.857114][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 241.868982][T12628] bond6: entered allmulticast mode [ 241.933845][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 241.946930][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 241.959301][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 242.299995][T12663] Bluetooth: MGMT ver 1.23 [ 242.840147][T12687] sch_fq: defrate 0 ignored. [ 242.871161][T12687] wlan1 speed is unknown, defaulting to 1000 [ 242.904030][T12687] wlan1 speed is unknown, defaulting to 1000 [ 242.954665][T12687] wlan1 speed is unknown, defaulting to 1000 [ 243.300064][T12702] hsr0 speed is unknown, defaulting to 1000 [ 243.565311][T12716] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 243.625337][T12687] infiniband syz0: set down [ 243.645265][T12687] infiniband syz0: added wlan1 [ 243.741497][ T1212] wlan1 speed is unknown, defaulting to 1000 [ 243.743632][T12723] openvswitch: netlink: Missing key (keys=40, expected=80) [ 243.762752][T12687] RDS/IB: syz0: added [ 243.767621][T12687] smc: adding ib device syz0 with port count 1 [ 243.787289][T12687] smc: ib device syz0 port 1 has pnetid [ 243.822112][ T1212] wlan1 speed is unknown, defaulting to 1000 [ 243.841070][T12687] wlan1 speed is unknown, defaulting to 1000 [ 243.981934][T12733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.449902][T12752] tipc: Enabled bearer , priority 0 [ 244.469287][T12752] syzkaller0: entered promiscuous mode [ 244.485647][T12752] syzkaller0: entered allmulticast mode [ 244.563059][T12752] tipc: Resetting bearer [ 244.575014][T12759] netem: incorrect ge model size [ 244.602765][T12759] netem: change failed [ 244.898722][T12687] wlan1 speed is unknown, defaulting to 1000 [ 245.129083][T12779] syzkaller0: entered promiscuous mode [ 245.147230][T12779] syzkaller0: entered allmulticast mode [ 245.170061][T12782] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 245.560281][T10509] tipc: Node number set to 3679649187 [ 245.738316][T12748] tipc: Resetting bearer [ 245.765028][T12748] tipc: Disabling bearer [ 245.923245][T12687] wlan1 speed is unknown, defaulting to 1000 [ 246.699303][T12687] wlan1 speed is unknown, defaulting to 1000 [ 246.975642][T12825] __nla_validate_parse: 105 callbacks suppressed [ 246.975664][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 247.174372][T12832] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 247.195400][T12832] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1971'. [ 247.208432][T12832] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 247.237618][T12835] veth7: entered allmulticast mode [ 247.249553][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 247.398256][T12687] wlan1 speed is unknown, defaulting to 1000 [ 247.491358][T12850] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 247.520976][T12850] netlink: 'syz.2.1974': attribute type 2 has an invalid length. [ 247.559384][T12850] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 247.578078][T12850] netlink: 'syz.2.1974': attribute type 2 has an invalid length. [ 247.969374][T12869] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 248.225929][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1982'. [ 248.797339][T12911] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 248.817284][T12917] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 248.899151][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 249.012179][T12927] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1994'. [ 249.028563][T12927] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 249.059979][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 249.077711][T12935] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1994'. [ 249.113834][T12936] ipvlan0: entered promiscuous mode [ 249.129339][T12935] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 249.140415][T12936] ipvlan0: entered allmulticast mode [ 249.156363][T12936] veth0_vlan: entered allmulticast mode [ 249.190818][T12941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1999'. [ 249.435612][T12955] bridge_slave_0: default FDB implementation only supports local addresses [ 249.899816][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 250.085520][T12998] netlink: 'syz.3.2010': attribute type 6 has an invalid length. [ 250.148661][T13003] openvswitch: netlink: Flow key attr not present in new flow. [ 250.570118][T13008] lo: entered allmulticast mode [ 250.738449][T13009] lo: left allmulticast mode [ 250.893954][T13016] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 250.929979][T13016] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 251.388707][T13052] sch_tbf: burst 0 is lower than device sit0 mtu (65485) ! [ 251.409473][T13053] x_tables: ip_tables: udp match: only valid for protocol 17 [ 251.431371][T13053] IPVS: stopping master sync thread 7137 ... [ 251.660118][T13064] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 251.687022][T13064] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 252.176155][T13094] __nla_validate_parse: 7 callbacks suppressed [ 252.176175][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 252.603624][T13120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2051'. [ 252.617865][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2052'. [ 252.627787][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2052'. [ 252.742472][T13124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'. [ 252.795326][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 252.824399][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2056'. [ 252.853830][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'. [ 253.047517][T13148] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 253.105598][T13148] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 253.118279][T13148] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 253.179511][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 253.217181][T13150] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 253.232814][T13150] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 253.266687][T13164] netlink: 'syz.2.2062': attribute type 10 has an invalid length. [ 253.277269][T13164] team0: Device hsr_slave_0 failed to register rx_handler [ 253.462842][T13173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2064'. [ 253.683020][T13182] netlink: 'syz.1.2067': attribute type 142 has an invalid length. [ 253.750925][T13184] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 253.959487][T13191] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.980998][T13191] bond6: (slave bond7): making interface the new active one [ 254.000476][T13191] bond6: (slave bond7): Enslaving as an active interface with an up link [ 254.057929][T13200] 8021q: VLANs not supported on gre0 [ 254.075881][T13204] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.089934][T13204] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 254.274276][T13215] block nbd0: not configured, cannot reconfigure [ 254.319274][T13207] syzkaller0: entered promiscuous mode [ 254.335934][T13207] syzkaller0: entered allmulticast mode [ 254.352852][T13215] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 254.682350][T13234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.551377][T13247] netlink: 'syz.4.2082': attribute type 1 has an invalid length. [ 256.564053][T13253] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 256.577611][T13256] syz.3.2083: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 256.605861][T13256] CPU: 1 UID: 0 PID: 13256 Comm: syz.3.2083 Not tainted syzkaller #0 PREEMPT(full) [ 256.605888][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.605899][T13256] Call Trace: [ 256.605906][T13256] [ 256.605915][T13256] dump_stack_lvl+0x189/0x250 [ 256.605948][T13256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.605970][T13256] ? __pfx__printk+0x10/0x10 [ 256.605996][T13256] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 256.606019][T13256] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 256.606043][T13256] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 256.606066][T13256] warn_alloc+0x214/0x310 [ 256.606095][T13256] ? stack_depot_save_flags+0x40/0x860 [ 256.606123][T13256] ? __pfx_warn_alloc+0x10/0x10 [ 256.606152][T13256] ? kasan_save_track+0x4f/0x80 [ 256.606175][T13256] ? xskq_create+0x56/0x170 [ 256.606198][T13256] ? xsk_init_queue+0xb0/0x110 [ 256.606221][T13256] ? xsk_setsockopt+0x4dc/0x8d0 [ 256.606241][T13256] ? do_sock_setsockopt+0x17c/0x1b0 [ 256.606259][T13256] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 256.606276][T13256] ? do_syscall_64+0xfa/0x3b0 [ 256.606292][T13256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.606321][T13256] __vmalloc_node_range_noprof+0x125/0x12f0 [ 256.606384][T13256] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.606411][T13256] ? xskq_create+0x56/0x170 [ 256.606450][T13256] ? __kasan_kmalloc+0x93/0xb0 [ 256.606479][T13256] vmalloc_user_noprof+0xad/0xf0 [ 256.606506][T13256] ? xskq_create+0xbf/0x170 [ 256.606534][T13256] xskq_create+0xbf/0x170 [ 256.606563][T13256] xsk_init_queue+0xb0/0x110 [ 256.606593][T13256] xsk_setsockopt+0x4dc/0x8d0 [ 256.606621][T13256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.606646][T13256] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.606676][T13256] ? aa_sock_opt_perm+0xff/0x1b0 [ 256.606695][T13256] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 256.606711][T13256] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.606735][T13256] do_sock_setsockopt+0x17c/0x1b0 [ 256.606761][T13256] __x64_sys_setsockopt+0x13f/0x1b0 [ 256.606789][T13256] do_syscall_64+0xfa/0x3b0 [ 256.606805][T13256] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.606832][T13256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.606850][T13256] ? clear_bhb_loop+0x60/0xb0 [ 256.606874][T13256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.606891][T13256] RIP: 0033:0x7f798bd8ebe9 [ 256.606908][T13256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.606924][T13256] RSP: 002b:00007f798cc37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.606946][T13256] RAX: ffffffffffffffda RBX: 00007f798bfc6180 RCX: 00007f798bd8ebe9 [ 256.606960][T13256] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 256.606972][T13256] RBP: 00007f798be11e19 R08: 0000000000000004 R09: 0000000000000000 [ 256.606983][T13256] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.606994][T13256] R13: 00007f798bfc6218 R14: 00007f798bfc6180 R15: 00007ffd5962e648 [ 256.607027][T13256] [ 256.608677][T13256] Mem-Info: [ 256.922728][T13253] bridge_slave_1: left allmulticast mode [ 256.928627][T13253] bridge_slave_1: left promiscuous mode [ 256.935229][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.942636][T13256] active_anon:4585 inactive_anon:0 isolated_anon:0 [ 256.942636][T13256] active_file:2757 inactive_file:39908 isolated_file:0 [ 256.942636][T13256] unevictable:768 dirty:36 writeback:0 [ 256.942636][T13256] slab_reclaimable:12317 slab_unreclaimable:112804 [ 256.942636][T13256] mapped:33063 shmem:1357 pagetables:1151 [ 256.942636][T13256] sec_pagetables:0 bounce:0 [ 256.942636][T13256] kernel_misc_reclaimable:0 [ 256.942636][T13256] free:1310016 free_pcp:14410 free_cma:0 [ 256.966081][T13257] netlink: 'syz.2.2085': attribute type 2 has an invalid length. [ 257.011787][T13256] Node 0 active_anon:18240kB inactive_anon:0kB active_file:11028kB inactive_file:159432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124152kB dirty:144kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13904kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.065318][T13253] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 257.079964][T13256] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.133246][T13276] : renamed from hsr0 [ 257.196335][T13256] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.285638][T13281] __nla_validate_parse: 5 callbacks suppressed [ 257.285663][T13281] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2091'. [ 257.288095][T13256] lowmem_reserve[]: [ 257.305645][T13281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.306109][T13256] 0 2497 [ 257.326151][T13283] netlink: 'syz.4.2090': attribute type 6 has an invalid length. [ 257.338310][T13256] 2499 2499 2499 [ 257.349954][T13283] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2090'. [ 257.360752][T13256] Node 0 DMA32 free:1340388kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18076kB inactive_anon:0kB active_file:11028kB inactive_file:157872kB unevictable:1536kB writepending:152kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:38088kB local_pcp:17024kB free_cma:0kB [ 257.404624][T13256] lowmem_reserve[]: 0 0 1 1 1 [ 257.409323][T13283] netlink: 'syz.4.2090': attribute type 6 has an invalid length. [ 257.414635][T13256] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 257.418266][T13283] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2090'. [ 257.453150][T13256] lowmem_reserve[]: 0 0 0 0 0 [ 257.470169][T13256] Node 1 Normal free:3886904kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17952kB local_pcp:11648kB free_cma:0kB [ 257.522912][T13256] lowmem_reserve[]: 0 0 0 0 0 [ 257.527886][T13256] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.541196][T13256] Node 0 DMA32: 1002*4kB (UME) 626*8kB (UME) 244*16kB (ME) 255*32kB (UME) 64*64kB (UME) 45*128kB (UM) 36*256kB (UM) 23*512kB (UM) 15*1024kB (UME) 4*2048kB (ME) 309*4096kB (UM) = 1341144kB [ 257.560577][T13256] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 257.574242][T13256] Node 1 Normal: 170*4kB (UME) 52*8kB (UME) 39*16kB (UME) 112*32kB (UME) 34*64kB (UME) 12*128kB (UME) 4*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3886904kB [ 257.595785][T13256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.605775][T13256] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 257.615675][T13256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.626838][T13256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.638183][T13256] 44018 total pagecache pages [ 257.648053][T13256] 0 pages in swap cache [ 257.654352][T13256] Free swap = 124996kB [ 257.661028][T13256] Total swap = 124996kB [ 257.667499][T13256] 2097051 pages RAM [ 257.674758][T13256] 0 pages HighMem/MovableOnly [ 257.687095][T13256] 425667 pages reserved [ 257.697254][T13256] 0 pages cma reserved [ 257.753512][T13300] netlink: 'syz.2.2095': attribute type 2 has an invalid length. [ 257.761333][T13300] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2095'. [ 257.940146][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 257.963939][T13307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2098'. [ 257.973681][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 257.982905][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2101'. [ 258.007322][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 258.026605][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2101'. [ 258.384263][T13334] validate_nla: 1 callbacks suppressed [ 258.384284][T13334] netlink: 'syz.2.2108': attribute type 4 has an invalid length. [ 258.425420][T13334] `: renamed from bond0 [ 258.574031][T13344] xt_policy: too many policy elements [ 258.583143][T13346] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.634663][T13347] netlink: 'syz.3.2117': attribute type 83 has an invalid length. [ 258.815864][T13347] ip6erspan0: entered promiscuous mode [ 258.829753][T13347] ip6erspan0: entered allmulticast mode [ 258.876794][T13368] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 259.314704][T13389] netlink: 'syz.3.2123': attribute type 10 has an invalid length. [ 259.362942][T13389] dummy0: entered promiscuous mode [ 259.408486][T13389] team0: Port device dummy0 removed [ 259.414792][T13389] bridge0: port 1(dummy0) entered blocking state [ 259.432227][T13389] bridge0: port 1(dummy0) entered disabled state [ 259.438836][T13389] dummy0: entered allmulticast mode [ 259.556480][T13404] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 259.565978][T13404] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 259.586313][T13404] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 261.630727][T13438] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 261.650949][T13438] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 261.751184][T13449] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 261.751413][T13444] netlink: 'syz.4.2142': attribute type 16 has an invalid length. [ 261.780864][T13444] netlink: 'syz.4.2142': attribute type 17 has an invalid length. [ 261.808237][T13449] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 261.847837][T13449] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 261.918137][T13444] sit0: left promiscuous mode [ 261.944933][T13444] 8021q: adding VLAN 0 to HW filter on device ` [ 261.954854][T13444] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.967331][T13444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.211277][T13472] netlink: 'syz.3.2147': attribute type 2 has an invalid length. [ 262.509727][T13489] tipc: Enabled bearer , priority 0 [ 262.539387][T13489] syzkaller0: entered promiscuous mode [ 262.581859][T13489] syzkaller0: entered allmulticast mode [ 262.674036][T13495] bridge0: entered allmulticast mode [ 262.712303][T13489] __nla_validate_parse: 15 callbacks suppressed [ 262.712326][T13489] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2151'. [ 262.830148][T13486] tipc: Resetting bearer [ 262.896058][T13485] tipc: Resetting bearer [ 262.909345][T13511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2157'. [ 262.944252][T13511] nbd: illegal input index -8454144 [ 262.970349][T13485] tipc: Disabling bearer [ 262.998196][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2160'. [ 263.148356][T13523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2162'. [ 263.229223][T13530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2163'. [ 263.463106][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2165'. [ 263.518442][T13542] bond0: entered promiscuous mode [ 263.554147][T13542] bond_slave_0: entered promiscuous mode [ 263.560102][T13542] geneve1: entered promiscuous mode [ 263.566223][T13542] bridge_slave_1: entered promiscuous mode [ 263.581847][T13542] bond0: left promiscuous mode [ 263.587233][T13542] bond_slave_0: left promiscuous mode [ 263.615659][T13542] geneve1: left promiscuous mode [ 263.620855][T13542] bridge_slave_1: left promiscuous mode [ 263.672488][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2167'. [ 263.905714][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 263.969721][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 264.082593][T13580] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2174'. [ 264.525938][T13595] tipc: Enabling of bearer rejected, failed to enable media [ 264.654388][T13603] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 264.782272][T13610] IPVS: set_ctl: invalid protocol: 133 172.30.1.1:20001 [ 264.848206][T13616] tipc: Enabling of bearer rejected, already enabled [ 264.881239][T13615] netlink: 'syz.4.2189': attribute type 1 has an invalid length. [ 264.918196][T13615] netlink: 'syz.4.2189': attribute type 2 has an invalid length. [ 264.933342][T13619] netlink: 'syz.4.2189': attribute type 1 has an invalid length. [ 264.963931][T13619] netlink: 'syz.4.2189': attribute type 2 has an invalid length. [ 265.276810][T13633] bond0: entered promiscuous mode [ 265.285359][T13633] bond_slave_1: entered promiscuous mode [ 265.296398][T13633] hsr2: entered promiscuous mode [ 265.319284][T13630] gre4: entered promiscuous mode [ 265.329316][T13630] gre4: entered allmulticast mode [ 265.510809][T13647] netlink: 'syz.3.2199': attribute type 6 has an invalid length. [ 265.739018][T13654] netlink: 'syz.1.2202': attribute type 10 has an invalid length. [ 267.480970][T13654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.495177][T13654] team0: Port device hsr0 added [ 267.628530][T13675] geneve3: entered promiscuous mode [ 267.662088][T13675] geneve3: entered allmulticast mode [ 267.696852][ T5987] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.732713][ T5987] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.740972][ T5987] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.772874][ T5987] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.810597][T13687] __nla_validate_parse: 10 callbacks suppressed [ 267.810617][T13687] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2213'. [ 267.919285][T13692] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 267.957271][T13692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.970998][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 268.288836][T13711] batman_adv: batadv0: Adding interface: ipvlan0 [ 268.307754][T13711] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.364809][T13711] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 268.479023][T13724] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2224'. [ 268.499277][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2224'. [ 268.525199][T13724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2224'. [ 268.532539][T13728] netlink: 'syz.2.2224': attribute type 3 has an invalid length. [ 268.542715][T13727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2228'. [ 268.564304][T13730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2228'. [ 268.757738][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2230'. [ 268.792237][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 269.002153][T13752] netlink: 'syz.4.2236': attribute type 1 has an invalid length. [ 269.044325][T13752] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2236'. [ 269.624362][T13786] netlink: 'syz.4.2249': attribute type 29 has an invalid length. [ 269.741983][T13790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.857668][T13799] gretap2: entered promiscuous mode [ 270.241344][T13815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.248743][T13815] IPv6: NLM_F_CREATE should be set when creating new route [ 270.256161][T13815] IPv6: NLM_F_CREATE should be set when creating new route [ 270.263657][T13815] IPv6: NLM_F_CREATE should be set when creating new route [ 270.320772][T13817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.642565][ T7220] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.880137][T13858] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.943195][T13904] vcan0: entered promiscuous mode [ 271.966506][T13904] vcan0: entered allmulticast mode [ 272.024945][T13904] wg2: entered promiscuous mode [ 272.042745][T13904] wg2: entered allmulticast mode [ 272.079918][T13909] openvswitch: netlink: IP tunnel dst address not specified [ 272.723450][T13937] validate_nla: 5 callbacks suppressed [ 272.723470][T13937] netlink: 'syz.1.2294': attribute type 8 has an invalid length. [ 272.741080][T13937] netlink: 'syz.1.2294': attribute type 15 has an invalid length. [ 272.865426][T13943] bridge0: port 1(syz_tun) entered blocking state [ 272.895072][T13943] bridge0: port 1(syz_tun) entered disabled state [ 272.908614][T13943] syz_tun: entered allmulticast mode [ 272.930873][T13943] syz_tun: entered promiscuous mode [ 272.945859][T13943] bridge0: port 1(syz_tun) entered blocking state [ 272.952739][T13943] bridge0: port 1(syz_tun) entered forwarding state [ 273.132103][ T5184] Bluetooth: hci0: command 0x080f tx timeout [ 273.650954][T13956] veth9: entered allmulticast mode [ 273.661110][ T144] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.684687][ T144] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.700485][ T144] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.719359][ T144] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.757742][ T144] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.767068][ T144] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.776917][ T144] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.787286][ T144] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.099780][T14002] __nla_validate_parse: 15 callbacks suppressed [ 274.099803][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 274.168553][T14006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.182489][T13997] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2307'. [ 274.269488][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 274.287154][T14007] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 274.306444][T14006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.356070][T14015] geneve3: entered promiscuous mode [ 274.361459][T14015] geneve3: entered allmulticast mode [ 274.371218][ T5987] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.437172][ T5987] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.522223][ T5987] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.551163][T14027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2317'. [ 274.751490][T14037] bridge4: entered allmulticast mode [ 275.571193][T14089] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 275.716796][T14089] 8021q: adding VLAN 0 to HW filter on device bond9 [ 275.798549][T14092] bond9: (slave gretap2): making interface the new active one [ 275.832480][T14092] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 276.003477][T14117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2339'. [ 276.199821][T14015] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.341032][T14015] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.439745][T14015] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.610807][ T7238] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 276.667153][ T7234] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 276.736863][ T7238] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 276.817532][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 277.495736][T14192] bridge_slave_0: default FDB implementation only supports local addresses [ 277.665881][T14187] xt_socket: unknown flags 0x50 [ 277.910041][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 277.924339][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 277.934909][T14211] syzkaller1: entered promiscuous mode [ 277.940575][T14211] syzkaller1: entered allmulticast mode [ 277.952364][T14214] netlink: 'syz.2.2373': attribute type 1 has an invalid length. [ 278.168386][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2376'. [ 278.385939][T14234] netlink: 'syz.2.2379': attribute type 8 has an invalid length. [ 278.430045][T14238] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2380'. [ 278.482608][T14238] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2380'. [ 278.865134][T14268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.179724][T14282] __nla_validate_parse: 31 callbacks suppressed [ 279.179747][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 279.240638][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2389'. [ 279.700877][T14315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2397'. [ 279.723291][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 279.740532][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 279.761533][T14318] tipc: Enabled bearer , priority 0 [ 279.789714][T14318] syzkaller0: entered promiscuous mode [ 279.797115][T14318] syzkaller0: entered allmulticast mode [ 279.925149][T14327] tipc: Resetting bearer [ 279.966241][T14316] tipc: Resetting bearer [ 279.990499][T14316] tipc: Disabling bearer [ 280.099026][T14329] tipc: Enabled bearer , priority 0 [ 280.109850][T14330] syzkaller0: entered promiscuous mode [ 280.116291][T14330] syzkaller0: entered allmulticast mode [ 280.124606][T14333] tipc: Enabling of bearer rejected, already enabled [ 280.237754][T14333] tipc: Resetting bearer [ 280.315511][T14333] tipc: Disabling bearer [ 280.481950][T14354] 8021q: VLANs not supported on syzkaller1 [ 280.488839][T14349] hsr0 speed is unknown, defaulting to 1000 [ 280.495238][T14360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2412'. [ 280.496169][T14360] netlink: 'syz.4.2412': attribute type 4 has an invalid length. [ 280.532712][T14362] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2413'. [ 280.555107][T14349] wlan1 speed is unknown, defaulting to 1000 [ 280.574334][T14363] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2413'. [ 281.027086][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2417'. [ 281.097414][T14386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2420'. [ 281.114792][T14386] netlink: 'syz.3.2420': attribute type 5 has an invalid length. [ 281.415141][T14393] vxcan1: entered allmulticast mode [ 281.503313][T14400] netlink: 'syz.1.2425': attribute type 1 has an invalid length. [ 281.820196][T14406] macvtap1: entered promiscuous mode [ 281.830903][T14406] vlan0: entered promiscuous mode [ 281.858657][T14406] macvtap1: entered allmulticast mode [ 281.885400][T14406] vlan0: entered allmulticast mode [ 281.890589][T14406] veth0_vlan: entered allmulticast mode [ 282.175854][T14429] netlink: 'syz.2.2435': attribute type 1 has an invalid length. [ 282.279591][T14432] vlan3: entered allmulticast mode [ 282.705518][T14463] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 282.716705][T14463] netlink: 'syz.0.2443': attribute type 2 has an invalid length. [ 282.748959][T14463] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 282.924743][T14479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.967796][T14479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.989448][T14479] batman_adv: batadv0: Removing interface: ipvlan3 [ 283.390525][T14505] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 283.783420][T14484] syz.0.2449 (14484) used greatest stack depth: 17768 bytes left [ 283.997378][T14525] netlink: 'syz.0.2459': attribute type 11 has an invalid length. [ 284.240423][T14539] openvswitch: netlink: Missing key (keys=40, expected=80) [ 284.560182][T14558] __nla_validate_parse: 11 callbacks suppressed [ 284.560204][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 284.901274][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'. [ 285.392545][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 285.734061][T14627] netlink: 'syz.1.2485': attribute type 3 has an invalid length. [ 285.780602][T14629] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2486'. [ 285.798438][T14629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 285.823207][T14632] netlink: 'syz.1.2487': attribute type 3 has an invalid length. [ 285.831390][T14632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2487'. [ 286.540122][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'. [ 286.699030][T14667] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 286.827300][T14667] netlink: 'syz.1.2500': attribute type 1 has an invalid length. [ 286.994047][T14683] netlink: 'syz.2.2506': attribute type 39 has an invalid length. [ 287.101178][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 287.853971][T14728] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2516'. [ 288.082688][T14700] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.088863][T14700] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 288.117715][T14726] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2516'. [ 288.132668][T14726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.154692][T14700] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.163202][T14700] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 288.174942][T14728] bridge0: port 1(syz_tun) entered disabled state [ 288.199344][T14700] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.221492][ T7238] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.223142][T14700] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 288.243934][ T7238] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.324688][T14700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.340801][T14700] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 288.379798][ T7238] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.399808][T14700] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.404324][ T7238] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.420244][ T7238] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.432347][ T7238] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.441279][ T7238] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.453370][ T7238] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.458025][T14700] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 288.548330][ T7419] ------------[ cut here ]------------ [ 288.554438][ T7419] refcount_t: underflow; use-after-free. [ 288.560294][ T7419] WARNING: CPU: 0 PID: 7419 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 288.570358][ T7419] Modules linked in: [ 288.575448][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 288.585417][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.596028][ T7419] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 288.602520][ T7419] Code: 80 b3 e2 8b e8 07 2b bb fc 90 0f 0b 90 90 eb d7 e8 eb 8e f7 fc c6 05 d8 69 c5 0a 01 90 48 c7 c7 e0 b3 e2 8b e8 e7 2a bb fc 90 <0f> 0b 90 90 eb b7 e8 cb 8e f7 fc c6 05 b5 69 c5 0a 01 90 48 c7 c7 [ 288.622832][ T7419] RSP: 0018:ffffc9000cf2f700 EFLAGS: 00010246 [ 288.628916][ T7419] RAX: 7cad88b0cb87bd00 RBX: 0000000000000003 RCX: ffff8880321a1e00 [ 288.637337][ T7419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 288.645702][ T7419] RBP: 0000000000000000 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 288.654071][ T7419] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 288.662588][ T7419] R13: ffff88806d927060 R14: ffff88806d927078 R15: ffffffff86002eb0 [ 288.670670][ T7419] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 288.679936][ T7419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.687224][ T7419] CR2: 00007ffc4a7c11d8 CR3: 0000000078ae4000 CR4: 00000000003526f0 [ 288.695254][ T7419] Call Trace: [ 288.698532][ T7419] [ 288.701461][ T7419] klist_dec_and_del+0x3c7/0x3d0 [ 288.706463][ T7419] ? __pfx_klist_children_put+0x10/0x10 [ 288.712081][ T7419] klist_del+0xa6/0x110 [ 288.716352][ T7419] device_del+0x280/0x8e0 [ 288.720706][ T7419] ? _raw_spin_unlock_irq+0x2e/0x50 [ 288.726013][ T7419] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 288.732262][ T7419] ? __pfx_device_del+0x10/0x10 [ 288.737117][ T7419] ? netdev_unregister_kobject+0x344/0x450 [ 288.742985][ T7419] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 288.749429][ T7419] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 288.756506][ T7419] ? rtnl_net_dev_lock+0x257/0x2f0 [ 288.761671][ T7419] unregister_netdevice_queue+0x33c/0x380 [ 288.767400][ T7419] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 288.773678][ T7419] ? rtnl_net_dev_lock+0x36/0x2f0 [ 288.778713][ T7419] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 288.783921][ T7419] unregister_netdev+0x1f/0x60 [ 288.788708][ T7419] bnep_session+0x294d/0x2b40 [ 288.793427][ T7419] ? rcu_is_watching+0x15/0xb0 [ 288.798208][ T7419] ? trace_sched_exit_tp+0x36/0x110 [ 288.803624][ T7419] ? __lock_acquire+0xab9/0xd20 [ 288.808612][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 288.813788][ T7419] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 288.819791][ T7419] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 288.826280][ T7419] ? __pfx_woken_wake_function+0x10/0x10 [ 288.832004][ T7419] ? __kthread_parkme+0x7b/0x200 [ 288.836984][ T7419] ? __kthread_parkme+0x1a1/0x200 [ 288.842090][ T7419] kthread+0x70e/0x8a0 [ 288.846177][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 288.851282][ T7419] ? __pfx_kthread+0x10/0x10 [ 288.855911][ T7419] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.861213][ T7419] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.867030][ T7419] ? __pfx_kthread+0x10/0x10 [ 288.871710][ T7419] ret_from_fork+0x3fc/0x770 [ 288.876316][ T7419] ? __pfx_ret_from_fork+0x10/0x10 [ 288.881449][ T7419] ? __switch_to_asm+0x39/0x70 [ 288.886321][ T7419] ? __switch_to_asm+0x33/0x70 [ 288.891194][ T7419] ? __pfx_kthread+0x10/0x10 [ 288.895834][ T7419] ret_from_fork_asm+0x1a/0x30 [ 288.900612][ T7419] [ 288.903664][ T7419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 288.910939][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 288.920040][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.930176][ T7419] Call Trace: [ 288.933449][ T7419] [ 288.936375][ T7419] dump_stack_lvl+0x99/0x250 [ 288.940965][ T7419] ? __asan_memcpy+0x40/0x70 [ 288.945550][ T7419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.950811][ T7419] ? __pfx__printk+0x10/0x10 [ 288.955427][ T7419] vpanic+0x281/0x750 [ 288.959415][ T7419] ? __pfx__printk+0x10/0x10 [ 288.964006][ T7419] ? __pfx_vpanic+0x10/0x10 [ 288.968583][ T7419] ? is_bpf_text_address+0x26/0x2b0 [ 288.973819][ T7419] panic+0xb9/0xc0 [ 288.977594][ T7419] ? __pfx_panic+0x10/0x10 [ 288.982114][ T7419] __warn+0x31b/0x4b0 [ 288.986109][ T7419] ? refcount_warn_saturate+0x11a/0x1d0 [ 288.991708][ T7419] ? refcount_warn_saturate+0x11a/0x1d0 [ 288.997438][ T7419] report_bug+0x2be/0x4f0 [ 289.001771][ T7419] ? refcount_warn_saturate+0x11a/0x1d0 [ 289.007487][ T7419] ? refcount_warn_saturate+0x11a/0x1d0 [ 289.013136][ T7419] ? refcount_warn_saturate+0x11c/0x1d0 [ 289.018676][ T7419] handle_bug+0x84/0x160 [ 289.022914][ T7419] exc_invalid_op+0x1a/0x50 [ 289.027425][ T7419] asm_exc_invalid_op+0x1a/0x20 [ 289.032267][ T7419] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 289.038421][ T7419] Code: 80 b3 e2 8b e8 07 2b bb fc 90 0f 0b 90 90 eb d7 e8 eb 8e f7 fc c6 05 d8 69 c5 0a 01 90 48 c7 c7 e0 b3 e2 8b e8 e7 2a bb fc 90 <0f> 0b 90 90 eb b7 e8 cb 8e f7 fc c6 05 b5 69 c5 0a 01 90 48 c7 c7 [ 289.058053][ T7419] RSP: 0018:ffffc9000cf2f700 EFLAGS: 00010246 [ 289.064130][ T7419] RAX: 7cad88b0cb87bd00 RBX: 0000000000000003 RCX: ffff8880321a1e00 [ 289.072203][ T7419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 289.080189][ T7419] RBP: 0000000000000000 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 289.088169][ T7419] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 289.096154][ T7419] R13: ffff88806d927060 R14: ffff88806d927078 R15: ffffffff86002eb0 [ 289.104139][ T7419] ? __pfx_klist_children_put+0x10/0x10 [ 289.109715][ T7419] klist_dec_and_del+0x3c7/0x3d0 [ 289.114762][ T7419] ? __pfx_klist_children_put+0x10/0x10 [ 289.120323][ T7419] klist_del+0xa6/0x110 [ 289.124488][ T7419] device_del+0x280/0x8e0 [ 289.128809][ T7419] ? _raw_spin_unlock_irq+0x2e/0x50 [ 289.134001][ T7419] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 289.140061][ T7419] ? __pfx_device_del+0x10/0x10 [ 289.144901][ T7419] ? netdev_unregister_kobject+0x344/0x450 [ 289.150705][ T7419] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 289.157139][ T7419] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 289.163896][ T7419] ? rtnl_net_dev_lock+0x257/0x2f0 [ 289.168997][ T7419] unregister_netdevice_queue+0x33c/0x380 [ 289.174707][ T7419] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 289.180937][ T7419] ? rtnl_net_dev_lock+0x36/0x2f0 [ 289.185945][ T7419] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 289.191046][ T7419] unregister_netdev+0x1f/0x60 [ 289.195804][ T7419] bnep_session+0x294d/0x2b40 [ 289.200475][ T7419] ? rcu_is_watching+0x15/0xb0 [ 289.205247][ T7419] ? trace_sched_exit_tp+0x36/0x110 [ 289.210541][ T7419] ? __lock_acquire+0xab9/0xd20 [ 289.215400][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 289.220516][ T7419] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 289.226416][ T7419] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 289.232745][ T7419] ? __pfx_woken_wake_function+0x10/0x10 [ 289.238381][ T7419] ? __kthread_parkme+0x7b/0x200 [ 289.243313][ T7419] ? __kthread_parkme+0x1a1/0x200 [ 289.248507][ T7419] kthread+0x70e/0x8a0 [ 289.252570][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 289.257604][ T7419] ? __pfx_kthread+0x10/0x10 [ 289.262414][ T7419] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.267668][ T7419] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.272983][ T7419] ? __pfx_kthread+0x10/0x10 [ 289.277582][ T7419] ret_from_fork+0x3fc/0x770 [ 289.282182][ T7419] ? __pfx_ret_from_fork+0x10/0x10 [ 289.287288][ T7419] ? __switch_to_asm+0x39/0x70 [ 289.292045][ T7419] ? __switch_to_asm+0x33/0x70 [ 289.296830][ T7419] ? __pfx_kthread+0x10/0x10 [ 289.301415][ T7419] ret_from_fork_asm+0x1a/0x30 [ 289.306214][ T7419] [ 290.457303][ T7419] Shutting down cpus with NMI [ 290.462376][ T7419] Kernel Offset: disabled [ 290.466705][ T7419] Rebooting in 86400 seconds..