last executing test programs: 2.845981606s ago: executing program 4 (id=2857): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket(0x10, 0x2, 0x4) getsockname$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2) 2.843754489s ago: executing program 2 (id=2859): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c0420000000000001400128009000100766574680000000004000280080020f000000000"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x4}, 0xc}], 0x1, 0x40010080, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRESOCT=r3, @ANYBLOB="d3ab22406a68416f2290c423a82687a6118107fe747597aff6c22d6c1df12e379293ab9f3f84a1fb65a8db95948fc312edc39e49bc53f36c34a9679e986fa1177c42ed9dcebd7b625750a8c1888b6e24d04f7d8de2d8bf12c27c31612892055cb0a56bd2d7a6f1f23ab4d90d4b0785a553fdabef9a3c8ec74a9358b3d490d12a3ef413918597d6d33d4dea7bdd7d3826efa4f820da398445e0aa6b"], 0x18}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r7, {0x10}, {0xffe0}, {0xfff1, 0x40}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r9, 0x8b2c, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@dev, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8) 2.782710294s ago: executing program 4 (id=2860): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) shutdown(r0, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) (rerun: 64) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) 2.656640387s ago: executing program 4 (id=2862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000100)={0x8, 0x2, 0x2, 0x1, 0x1}, 0x8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c24b9baa5cbff4b58c87e402f0c4232777c062eebb171b53c0d7981f6bd775d0a06995513ac604dfb5983797dfb11d30a48408fbcc6738671bddc1f0b0a9eccc06488092371c7ab67c7c0ee9792a1f3165214", @ANYRESDEC, @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES16=r0, @ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, 0x0, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'gre0\x00'}}, 0x1e) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'geneve0\x00'}}, 0x1e) close(r9) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_ax25_SIOCADDRT(r11, 0x890b, &(0x7f00000000c0)={@default, @null, 0x5, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000002dc0)={0xa99, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r13) 2.361345842s ago: executing program 3 (id=2869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r6, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r6, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000660000006600000004000000010000000500000f02000000050000000200000003000000040000006100000000f33f000200000008000000000000000500000008000000020000000400000069b7000000100000c8630900000000000008000000000d00000000000001000000007e002d01000000002e00"], &(0x7f0000000180)=""/115, 0x84, 0x73, 0x0, 0x1}, 0x28) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000084000000160a010100000000000000000100000058000380540003801400010067656e65766531000000000000000000140001006d6163736563300000000000c498d61050000100766574683100000000000000000000001400010073797a6b616c6c6572310000000000000900010073797a30000000000900020073797a30"], 0x10c}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.33815497s ago: executing program 1 (id=2871): socket$inet6(0x10, 0x3, 0x7fd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000280)={'sit0\x00', &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @private=0xa010100, 0xa, 0x1}}) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIOCLEX(r5, 0x5451) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) sendfile(r1, r0, &(0x7f00000002c0)=0xe2, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x40010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r7, 0x1, 0x1000000, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x800) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000180)=""/210, &(0x7f0000000080)=0xd2) vmsplice(r0, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) 2.256765788s ago: executing program 3 (id=2872): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\bv', 0x2}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) close(0x4) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4008030}, 0x4008090) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000040)={0x5}, 0x10, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000013000100020000000000000007000000", @ANYRES32=r7, @ANYBLOB="000d050c000002000c001a8009000a8004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xba, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000ac0000000000019078ac1e0001ac1414aa05009078e00000e0440000000000000000110000ac1414aaac1414bb830300443c0003e000000100000000ac1e000100000000ac000000ac1e000100000000ac14140000000000ac1414aa00000000443c00030000000000000000e000000200000000ac1414aa00000000ac1414bb000000000000000000000000ac141400"/186], 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x800448f0, &(0x7f00000007c0)="c16977f1ac") sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000100081044881f782db44b904021d080b01000000000000001800150006001500000000120800030043000000a800160037fcb659362e2e55e799aac5525ffa000400c020db2d47782a462c9c801f298225c506000d00036010fab94dcf1c0461c1d67f6f94007134cf66e08000a0e40852a9d7c7c0b7c4a700002a76549eae02ede8359f79d073d37af66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa27e8ddc64193071e9f8775730d16a4683f1aeb4edbb5", 0xd8}], 0x1}, 0x8040) 2.077563847s ago: executing program 1 (id=2876): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) 2.074402062s ago: executing program 3 (id=2877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x2, 0x1, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1, 0x0, 0xfffffff8, {0x77359400}, {0x0, 0xea60}, {0x4, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "e1d1f55a4351ea72"}}, 0x48}, 0x1, 0x0, 0x0, 0x20018840}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.909308341s ago: executing program 2 (id=2879): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) 1.74621233s ago: executing program 2 (id=2880): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "23492741702c8b83"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x83ebc41f3d3de120, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.641474631s ago: executing program 4 (id=2881): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x880) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xffffffff) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10, 0x2d, 0x1, 0x70bd26}, 0x10}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) close(r4) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f"], 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r6, 0x104, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010000000000000000000a005100", @ANYRES16=r5, @ANYBLOB="0000eaff070002"], 0x38}}, 0x0) 1.48694187s ago: executing program 4 (id=2882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000140)='%ps \x00'}, 0x20) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40901}, 0x0) 1.239492083s ago: executing program 4 (id=2883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@broadcast]}) close(r1) r2 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r2, 0x6a, 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.133414239s ago: executing program 0 (id=2884): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @remote, 0x30000000}, 0x1c) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000180)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast2=0xac14143c}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r10, 0x0, 0x4080) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="100100", @ANYRES16, @ANYBLOB="c88845e7e05ae52d0000930000000800"], 0x1c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x0, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xfffffffffffffceb, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_open_procfs$namespace(r9, 0x0) 1.132377127s ago: executing program 1 (id=2885): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000001a00)=""/205, 0xcd}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000007c0)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/4062, 0xfde}, {&(0x7f0000001b00)=""/210, 0xd2}, {&(0x7f0000001880)=""/131, 0x83}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000880)=""/4089, 0xff9}, {&(0x7f00000004c0)=""/235, 0xeb}], 0xa}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r5, &(0x7f0000000480)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "492216", 0xfcf, 0x21, 0x0, @dev, @private2, {[@fragment, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @empty]}, @hopopts={0x0, 0x1e0, '\x00', [@generic={0x0, 0xeff, "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"}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "85b36f", 0x0, "63f226"}, "6927155de4155953418064938630a61736c5e9f80d756280b0d28fd858ebabd2c7d30f6e3cc7f93d294c6275d3420ce5ba199ec804b4ec9ab7cb4384532cc3"}}}}, 0x1001) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x541b, &(0x7f0000000040)) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000680)=@null) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket(0x10, 0x3, 0xc) write(r9, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES8, @ANYBLOB="0524060040030001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000340)=0x4) socket$inet(0x2, 0x80000, 0x76886f0e) 1.027488725s ago: executing program 0 (id=2886): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x5, 0x5, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x13, 0x0, 0x2, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}]}, 0x70}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xeb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x39, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x8d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x180}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7a}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x58f8, 0x35, &(0x7f0000000540)=""/53, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xd, 0xc, 0xfffffffe}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r6, r7, 0xffffffffffffffff], &(0x7f0000000780)=[{0x5, 0x2, 0x8, 0xc}, {0x1, 0x2, 0xa}, {0x1, 0x5, 0x9, 0x3}, {0x4, 0x5, 0x1, 0x1}, {0x2, 0x4, 0x5, 0x9}, {0x3, 0x5, 0xc, 0xb}, {0x3, 0x5, 0x8, 0x6}], 0x10, 0xdcb8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) recvfrom$packet(0xffffffffffffffff, &(0x7f00000008c0)=""/240, 0xf0, 0x0, &(0x7f00000009c0)={0x11, 0x6, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 862.580214ms ago: executing program 3 (id=2887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x24}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {}, {0x2d}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 729.983623ms ago: executing program 1 (id=2889): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000015, 0x80005, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x10000006, @empty, 0x3}, 0x1c) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000feffffff1c0000000a0004007770616e300000000800010086171633080003"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 728.614971ms ago: executing program 2 (id=2890): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x2}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000ee41ca35422186f7000a7c000000060a010400000000000000000a0000050900010073797a31000000005000048020000180070001006374000014000280080002400000000708000140000000092c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000000000000000090900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 680.610235ms ago: executing program 0 (id=2891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000380), 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001180)={0x1, &(0x7f00000010c0)=[{0x2, 0x10, 0x80, 0x80000001}]}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000011c0)={0x1130, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}, @ETHTOOL_A_LINKMODES_OURS={0x10c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "a46efa4b8842f8797a10e34e72099620b0c207f82029b9c65c9bfbdab548484db8653038c829004c812a6b20b6f32b17fb74a926ea6129c5d25a397557ef8e86f874307df28e40b2c39e1060ce5fcaf4f62a435f55b43c4d7cf6e408c58d4dc6e905da117758a2eefbe1c35bc5eac5af9069b4ff2898d04ae030979c8d5ea1980fb43c89eb98e7400d3316234dc776a9fca2cb027b33fc0341480503d290b5e09f6563de10c82511fa53df19652f9490430ddbed"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x1130}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYRES16=r3], 0x1c}, {&(0x7f0000000980)={0x334, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0xc, 0xc9, 0x0, 0x0, @u64=0x9}, @generic="1960a2551cb0ae316c7a25c6aabfe214ed986886735af4da050d", @nested={0x159, 0x1f, 0x0, 0x1, [@generic="871e6d2784c1d348a757bbcddea19aa9ffd134776ad2d6403b5573e7922d59ee729bb9cc14a2864c6f8f0d9efeb29d34e5e659214fa9362dcc011aac79bfb4f85d222af89af81446829df3c244a42501e29fcb6f2bbc953b42", @typed={0x4, 0x8}, @generic="f33f905d15a4f711f7790f2644027075057aea37928477317d59d172c288244b656c0c602e6c523c53ee10444ebb81e5416465d01af7183b06c4113593c87da44db2eb974009061fbcb5c79a755fab11e575c9a1ed36a128a1a5ca030018eb0d5137d9efac930319a73830a607591409384af1a2dc16287d7b52c8f79b18a17772a84c6e86fa45e3fa01b506d96ee2c768775a9ed4941af7e190a3f5b4455b382f5ab54e29a81a457d252a633409099112bfa7182b9fc7ad31d8e2b80b675ff09d77d171eb90438f033978063baf0e9cdfbfdab7eeacb92d93d03eba2d3d43135e07a46f41177b22ba42bb0decd9896d243097c6", @nested={0x4, 0xff}]}, @generic="5d8ecb12c1fb9d9e692f0319b0d85a2ce146015e1698a4f89db0c228a21611dce633c6fe37de88c08cbf9bd8051db4aeeb2e9c4e7e95bf31e5ca20eeb3326e9fcd0436c931a16cd7a3ab0a49d748e7b3cb1f0319a7e8998a1fc5c0bdcde780480b7cf9ab873c3e127b348439a002ab2b6b2460ef6929ef4ce8578bb3a2739f1831e3a50a29f96f511426a3c6dcb4671a8491aa2721cf", @nested={0xb4, 0x8b, 0x0, 0x1, [@nested={0x5a, 0x2e, 0x0, 0x1, [@generic="65cdc6f77a1da44d038d", @typed={0x8, 0x111, 0x0, 0x0, @fd}, @typed={0x42, 0x90, 0x0, 0x0, @binary="62449278b12022707c5f85b2175e759f76edca67eddb5be9331e01b559458f51829802910816d7062db3bb7bf917b3c6a3d478a0e0629e804417a33abb20"}]}, @typed={0x34, 0x2e, 0x0, 0x0, @binary="aff5617ce6d69c4ca4def68b56a6376ca17909fd19278d9b3e75fc7e5f3eb0fb9222897828602a49a19333a05790679e"}, @nested={0x4, 0x93}, @nested={0x4, 0xe9}, @typed={0x4, 0x4}, @typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@empty}]}, @generic="64a5124a2982dd9a743406dfcdbe137d6126b34e043ffe0600537a5b5959e3b9d8be6435c7474a20ba1fe82118278c2fb761cbe23c675e7b40f8ab442f2a5daa590e8f", @typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x334}], 0x2}, 0x0) 567.007807ms ago: executing program 1 (id=2892): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f00000002c0)=0x1) accept4(r7, 0x0, 0x0, 0x0) (async) r9 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="35a444755da2a57f5165df7ccdc00b9f6727133ddaf0021117c534b28f48407611ee344dd6602f2ceaa8630e7f09641acc4e38aff3c6ff5598a6483da702ae077a5e5d75cc06fe4b7bf1f77af64354d2949854c143aaadb8fdc9836353a579534f362fdef4f148d80b66b61db4831973c10030764440d9df8bc0568157c712564ab26a4cf82a6878efcb8bf8c0f6114a0b90e596de9f334bba2579c380ecd5bb5de96ab4fd8efc1603124819dc5cffc1217318c6d45c7cf35a7ffd84b67a590c4bd579e13546e7a3286531a3939615c9db97edb6c9648b60f700c602c2a60ecb3021afff2b9f235b42523bd7f2196d39e3ca496080ccefc0ca", 0xf9) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="35a444755da2a57f5165df7ccdc00b9f6727133ddaf0021117c534b28f48407611ee344dd6602f2ceaa8630e7f09641acc4e38aff3c6ff5598a6483da702ae077a5e5d75cc06fe4b7bf1f77af64354d2949854c143aaadb8fdc9836353a579534f362fdef4f148d80b66b61db4831973c10030764440d9df8bc0568157c712564ab26a4cf82a6878efcb8bf8c0f6114a0b90e596de9f334bba2579c380ecd5bb5de96ab4fd8efc1603124819dc5cffc1217318c6d45c7cf35a7ffd84b67a590c4bd579e13546e7a3286531a3939615c9db97edb6c9648b60f700c602c2a60ecb3021afff2b9f235b42523bd7f2196d39e3ca496080ccefc0ca", 0xf9) socket$nl_audit(0x10, 0x3, 0x9) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)) r12 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40010) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES16=r11, @ANYBLOB="010028b97000ffdbdf250100000008000100", @ANYRES16=r1, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000a2dc23ed000000000000000000000000050003000300000008001a176413e64efe040006", @ANYRES32=r13, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x806) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESHEX=r9, @ANYRES64=r11, @ANYRES8=r2], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) 501.578693ms ago: executing program 2 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/134, 0x86}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/96, 0x60}, {&(0x7f0000001740)=""/4093, 0xffd}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x3}, 0xc}], 0x3, 0x2, 0x0) 496.975523ms ago: executing program 3 (id=2894): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x130, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0]}}, @coaddr={0x14, 0xe, @in=@local}]}, 0x130}}, 0x0) 464.676436ms ago: executing program 0 (id=2895): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r2}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x8, 0x8, [0x5, 0x2, 0xb, 0x4, 0x3, 0x5, 0xfff8, 0x4]}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000300)={r4, 0x8}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000010000000", @ANYRES32=r2, @ANYBLOB="be9700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000200"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000000100)}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg2\x00'}) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 360.672444ms ago: executing program 2 (id=2896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="32a5cf0500800fbef59a02ae45ca92e2b1d116e56e4ee154dc7973bf28db63e7", @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r4, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x30, r3, 0x409, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8004) 293.346653ms ago: executing program 3 (id=2897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x0, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x10) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @dev, 0x0}, &(0x7f0000000080)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c100000", @ANYRES16=r11, @ANYBLOB="07000004000000000000050000000c00018008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x102c}}, 0x0) 277.250818ms ago: executing program 0 (id=2898): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x1f, 0x0, &(0x7f0000000080)) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xef3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xea}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 60.612701ms ago: executing program 1 (id=2899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x46, 0x4f, 0x0, &(0x7f0000000500)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000700)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000740)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000840)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000900)=0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$unix(r2, &(0x7f0000001a80)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="a416d126ac1f7553f440d4bcd19e42072c819bb9e3888a06216c2d8db652dea699d2d1e5dc55f96d0d9022eda52ea3cfcbacae4da9b15d0bb4e9ffc38ad0ad11bf35e193cf3173473e46ade162d41569d42206b6b67a0ae2722790c97f0cdd19fcd77c4b931b26ea750e0ff36220ec2320ee69783eebeeb83749bc7092ee6a2d7880910489c0eb58beebc55555525a65e4cb5e9ec99683f216c5579a42a974496425032d736b7590923fd5d03d7cf6ab2e247e0734c741dbcde79b2f691be240d21c8b669168dabb5ae67b0d9e76657fe3379a121b", 0xd5}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000280)="556dc953ec02f1718be43da311a1215d49125b9a99b011794c2a6f91c5aa8137d343fe5e4b6871c1ea794f4c31c4e10cf40b2c025ef2dd5ced6a3f9ed32b56efdce8dde0cca7053e287cdf71f7e0f421ba3f12e94c0bee6c5f91301dcba330758d20f0ded23902f118557a1ee7470e3b13e5fd", 0x73}, {&(0x7f0000000580)="a43d967f5f8e3fc269d059352fc55d74a70cb90f8312c890d62b6338f665497f2107f32ca69d711b0fdc31948126c011f985729b59a813c71d576a374b5dbeef29892e986e494aa3d9b82b9073efe9def1e0e06c02eaa4bf09a012e0a5d9a0f0965bc090d45544d6e2ff3dc9c084c361ec60983d51669b0fd460f2aa4702a17231d5f2fcb2dc77b43974d25cc9c75fa4ec81e99090ba553612d82b71971b4e275e6f9266e4e5efca1b34f0468365", 0xae}, {&(0x7f0000000640)="17ac0762ca01d300e21852bc989207ff5f9deadd7a2b0048418af9d850edbcbd8c0cd3c8f40fce2932ee23f4ffcd09a822b91b601c6ec4d2ecab955d7c356f0ad5ab2536adae32abca7d86777bad0416634662d86bb81a68f2298e55746ea232e23abd9a36936cedeaa9dffba84dc3bca88da8ddd372a257097b9a87431a7de97fca", 0x82}], 0x5, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r2, r2, r0, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r1, r2, r7]}}], 0x98, 0x20000008}, 0x404c004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@loopback, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff9, 0x3ff, 0x8, 0x100, 0x5, 0x80020, r8}) 0s ago: executing program 0 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) kernel console output (not intermixed with test programs): Local address not yet configured! [ 100.763284][ T7245] syz.3.346 (7245) used greatest stack depth: 17864 bytes left [ 101.089065][ T7267] netlink: 'syz.4.353': attribute type 11 has an invalid length. [ 101.491928][ T7294] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 101.677653][ T7306] tipc: Started in network mode [ 101.683378][ T7305] __nla_validate_parse: 6 callbacks suppressed [ 101.683394][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'. [ 101.693566][ T7306] tipc: Node identity cec499b4ccad, cluster identity 4711 [ 101.724305][ T7306] tipc: Enabled bearer , priority 0 [ 101.735220][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 101.777465][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 101.785174][ T7307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.360'. [ 101.811379][ T7303] syzkaller0: entered promiscuous mode [ 101.823341][ T7303] syzkaller0: entered allmulticast mode [ 101.872859][ T7303] tipc: Resetting bearer [ 101.954588][ T7303] tipc: Disabling bearer [ 102.153121][ T7330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.370'. [ 102.781327][ T7373] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 103.646405][ T7417] netlink: 156 bytes leftover after parsing attributes in process `syz.2.393'. [ 103.675456][ T7416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.394'. [ 103.687096][ T7416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.394'. [ 103.734003][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 103.790891][ T7427] netlink: 116 bytes leftover after parsing attributes in process `syz.1.397'. [ 103.972577][ T7435] TCP: TCP_TX_DELAY enabled [ 104.107988][ T7445] netlink: 'syz.2.402': attribute type 7 has an invalid length. [ 104.120069][ T7445] netlink: 'syz.2.402': attribute type 8 has an invalid length. [ 104.444124][ T7463] IPVS: set_ctl: invalid protocol: 59 172.30.0.5:15 [ 104.660924][ T7477] ipvlan2: entered promiscuous mode [ 104.975525][ T7493] bridge_slave_0: left allmulticast mode [ 105.029593][ T7493] bridge_slave_0: left promiscuous mode [ 105.040015][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.057067][ T7493] bridge_slave_1: left allmulticast mode [ 105.062908][ T7493] bridge_slave_1: left promiscuous mode [ 105.069143][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.093007][ T7493] team0: Port device team_slave_0 removed [ 105.114544][ T7493] team0: Port device team_slave_1 removed [ 105.127635][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.135243][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.148635][ T7493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.157787][ T7493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.196437][ T7495] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (60) [ 105.762108][ T7528] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 105.796004][ T7528] batman_adv: batadv0: Removing interface: team0 [ 105.832090][ T7529] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 105.873590][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.903877][ T7528] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.957235][ T7529] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 105.997549][ T7534] tipc: Enabled bearer , priority 0 [ 106.051119][ T7528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.120868][ T7534] tipc: Disabling bearer [ 106.400011][ T7553] tipc: Enabled bearer , priority 0 [ 106.400628][ T7555] trusted_key: syz.2.435 sent an empty control message without MSG_MORE. [ 106.417271][ T7553] syzkaller0: entered promiscuous mode [ 106.461722][ T7553] syzkaller0: entered allmulticast mode [ 106.481036][ T7553] sctp: [Deprecated]: syz.1.433 (pid 7553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.481036][ T7553] Use struct sctp_sack_info instead [ 106.530678][ T7553] sctp: [Deprecated]: syz.1.433 (pid 7553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.530678][ T7553] Use struct sctp_sack_info instead [ 106.580394][ T7553] tipc: Resetting bearer [ 106.651053][ T7551] tipc: Resetting bearer [ 106.690892][ T7551] tipc: Disabling bearer [ 106.713771][ T7569] syzkaller0: entered promiscuous mode [ 106.734695][ T7569] syzkaller0: entered allmulticast mode [ 106.790956][ T7563] tipc: Enabled bearer , priority 0 [ 106.811120][ T7563] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.877466][ T7581] netlink: 'syz.0.444': attribute type 33 has an invalid length. [ 106.908064][ T7581] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 106.979343][ T7563] tipc: Resetting bearer [ 107.010530][ T7585] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 107.054698][ T7588] netlink: 'syz.4.448': attribute type 21 has an invalid length. [ 107.066201][ T7560] tipc: Resetting bearer [ 107.088490][ T7560] tipc: Disabling bearer [ 107.115533][ T7588] netlink: 'syz.4.448': attribute type 6 has an invalid length. [ 107.132944][ T7597] __nla_validate_parse: 5 callbacks suppressed [ 107.132960][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 107.150651][ T7588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.448'. [ 107.172249][ T7588] netlink: 'syz.4.448': attribute type 13 has an invalid length. [ 107.186279][ T7588] veth0_macvtap: left promiscuous mode [ 107.202181][ T7588] macvtap0: entered allmulticast mode [ 107.227111][ T7588] macvtap0: refused to change device tx_queue_len [ 107.518039][ T7609] bond1: entered allmulticast mode [ 107.523772][ T7609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.542608][ T7609] bridge0: port 3(bond1) entered blocking state [ 107.560531][ T7609] bridge0: port 3(bond1) entered disabled state [ 107.570472][ T7609] bond1: entered promiscuous mode [ 107.808728][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 107.817622][ T7628] IPVS: Scheduler module ip_vs_sip not found [ 107.845211][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 107.911956][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.461'. [ 108.279005][ T7665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.729112][ T7692] openvswitch: netlink: Message has 8 unknown bytes. [ 109.086269][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 109.185250][ T7720] syzkaller0: create flow: hash 4283660014 index 1 [ 109.288958][ T36] syzkaller0: tun_net_xmit 76 [ 109.294168][ T36] syzkaller0: tun_net_xmit 48 [ 109.327257][ T5950] syzkaller0: tun_net_xmit 76 [ 109.460661][ T7720] syzkaller0: delete flow: hash 4283660014 index 1 [ 109.500975][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 109.512224][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 110.653672][ T7731] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 110.890517][ T7758] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 110.906102][ T7732] hsr_slave_0 (unregistering): left promiscuous mode [ 110.968237][ T7742] netlink: 'syz.0.486': attribute type 4 has an invalid length. [ 111.031637][ T7758] netlink: 32 bytes leftover after parsing attributes in process `syz.3.488'. [ 111.125514][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 111.274298][ T7771] netlink: 'syz.4.494': attribute type 2 has an invalid length. [ 111.478059][ T7783] batadv_slave_0: entered promiscuous mode [ 112.092780][ T7812] netlink: 'syz.4.506': attribute type 29 has an invalid length. [ 112.157388][ T7819] netlink: 'syz.4.506': attribute type 29 has an invalid length. [ 112.191283][ T7819] __nla_validate_parse: 8 callbacks suppressed [ 112.191300][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 112.308383][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.511'. [ 112.331919][ T7834] tipc: Trying to set illegal importance in message [ 112.540446][ T7849] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 112.562284][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 112.582021][ T7849] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 112.594051][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 112.772215][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 112.883099][ T7868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.521'. [ 112.924923][ T7859] hsr_slave_1 (unregistering): left promiscuous mode [ 112.979166][ T5950] IPVS: starting estimator thread 0... [ 113.082191][ T7881] IPVS: using max 34 ests per chain, 81600 per kthread [ 113.111054][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 113.158422][ T7883] netlink: 'syz.3.526': attribute type 23 has an invalid length. [ 113.176396][ T7887] netlink: 'syz.2.527': attribute type 32 has an invalid length. [ 113.184168][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 113.190313][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 113.212890][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'. [ 113.280348][ T7887] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 113.331419][ T7899] netlink: 'syz.3.531': attribute type 4 has an invalid length. [ 113.395329][ T7897] IPVS: length: 13 != 8 [ 113.631224][ T7911] tipc: Enabled bearer , priority 0 [ 113.667725][ T7911] syzkaller0: entered promiscuous mode [ 113.680488][ T7911] syzkaller0: entered allmulticast mode [ 113.733407][ T7911] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.747267][ T7917] sctp: [Deprecated]: syz.3.536 (pid 7917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.747267][ T7917] Use struct sctp_sack_info instead [ 113.932524][ T7933] tipc: Resetting bearer [ 114.108638][ T7910] tipc: Resetting bearer [ 114.206460][ T7910] tipc: Disabling bearer [ 114.451223][ T7963] netlink: 'syz.4.546': attribute type 7 has an invalid length. [ 114.624909][ T7973] vlan0: entered promiscuous mode [ 114.635584][ T7973] bridge0: entered promiscuous mode [ 115.698797][ T8027] team0: Port device geneve0 added [ 116.734203][ T8086] smc: net device bond0 applied user defined pnetid SYZ2 [ 116.745851][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.908355][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 117.179515][ T8108] IPVS: set_ctl: invalid protocol: 41 172.20.20.68:20001 [ 117.240837][ T8112] __nla_validate_parse: 12 callbacks suppressed [ 117.240859][ T8112] netlink: 288 bytes leftover after parsing attributes in process `syz.4.594'. [ 117.253011][ T8114] validate_nla: 1 callbacks suppressed [ 117.253027][ T8114] netlink: 'syz.3.595': attribute type 2 has an invalid length. [ 117.286630][ T8114] netlink: 'syz.3.595': attribute type 2 has an invalid length. [ 117.609451][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 117.616849][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 117.619469][ T8127] netlink: 48 bytes leftover after parsing attributes in process `syz.3.600'. [ 117.645548][ T8128] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 117.657625][ T8128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.876748][ T8139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.603'. [ 117.906001][ T8139] netlink: 21 bytes leftover after parsing attributes in process `syz.2.603'. [ 117.953235][ T8139] netlink: 21 bytes leftover after parsing attributes in process `syz.2.603'. [ 118.103720][ T8151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.120756][ T8150] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.166942][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 118.668710][ T95] block nbd1: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 30 seconds [ 118.680449][ T95] block nbd1: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 30 seconds [ 118.691977][ T95] block nbd1: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 30 seconds [ 118.703154][ T95] block nbd1: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 30 seconds [ 118.844334][ T8189] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 118.852418][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.618'. [ 118.890249][ T8189] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 119.279502][ T8217] tipc: Enabling of bearer rejected, failed to enable media [ 119.290888][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.627'. [ 119.303177][ T8217] netlink: 'syz.2.626': attribute type 83 has an invalid length. [ 119.332684][ T8214] netlink: zone id is out of range [ 119.338390][ T8214] netlink: zone id is out of range [ 119.343530][ T8214] netlink: zone id is out of range [ 119.355409][ T8214] netlink: zone id is out of range [ 119.369786][ T8214] netlink: zone id is out of range [ 119.379637][ T8222] bridge2: entered promiscuous mode [ 119.381118][ T8214] netlink: zone id is out of range [ 119.385345][ T8222] bridge2: entered allmulticast mode [ 119.408560][ T8214] netlink: zone id is out of range [ 119.418942][ T8217] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 120.370670][ T8277] netlink: 'syz.1.644': attribute type 11 has an invalid length. [ 120.394281][ T8280] netlink: 'syz.4.646': attribute type 5 has an invalid length. [ 120.525498][ T8280] bond2 (unregistering): Released all slaves [ 120.564324][ T8286] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 120.598085][ T8286] sctp: [Deprecated]: syz.3.649 (pid 8286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.598085][ T8286] Use struct sctp_sack_info instead [ 120.667407][ T8289] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 120.933483][ T8300] xfrm2: entered promiscuous mode [ 120.965788][ T51] Bluetooth: hci4: link tx timeout [ 120.972095][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 120.981299][ T51] Bluetooth: hci4: link tx timeout [ 120.984085][ T8300] xfrm2: entered allmulticast mode [ 120.990613][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 121.178093][ T8312] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 121.354321][ T8312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.364778][ T8312] bond0: (slave bond1): making interface the new active one [ 121.373097][ T8312] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.504072][ T8336] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 121.695993][ T8344] netlink: 'syz.3.664': attribute type 6 has an invalid length. [ 122.294532][ T8391] __nla_validate_parse: 19 callbacks suppressed [ 122.294550][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 122.506116][ T8398] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 122.530150][ T8398] netlink: 224 bytes leftover after parsing attributes in process `syz.4.676'. [ 122.562100][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 122.612661][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 122.616992][ T8400] ip6gre1: entered allmulticast mode [ 122.631911][ T8406] netlink: 'syz.0.679': attribute type 12 has an invalid length. [ 122.685175][ T8401] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 123.036777][ T8435] net_ratelimit: 29 callbacks suppressed [ 123.036794][ T8435] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 123.079872][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 123.127653][ T8437] netlink: 'syz.1.687': attribute type 21 has an invalid length. [ 123.352135][ T8450] tipc: Enabled bearer , priority 0 [ 123.378204][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 123.416808][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 123.419745][ T8452] netlink: 44 bytes leftover after parsing attributes in process `syz.4.692'. [ 123.453807][ T8445] tipc: Resetting bearer [ 123.747984][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 123.833264][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 124.041918][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.688'. [ 124.336533][ T8450] tipc: Disabling bearer [ 124.824552][ T8514] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 125.477825][ T8560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.736539][ T8565] team_slave_0: entered promiscuous mode [ 125.742472][ T8565] team_slave_1: entered promiscuous mode [ 125.763855][ T8567] sctp: [Deprecated]: syz.2.724 (pid 8567) Use of int in max_burst socket option. [ 125.763855][ T8567] Use struct sctp_assoc_value instead [ 125.863124][ T8565] sctp: [Deprecated]: syz.4.723 (pid 8565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.863124][ T8565] Use struct sctp_sack_info instead [ 126.134663][ T8579] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 126.156537][ T9] IPVS: starting estimator thread 0... [ 126.286016][ T8588] IPVS: using max 30 ests per chain, 72000 per kthread [ 126.331693][ T8593] dvmrp0: entered allmulticast mode [ 126.754266][ T8611] 8021q: VLANs not supported on ip6tnl0 [ 126.793852][ T8611] netlink: 'syz.0.738': attribute type 5 has an invalid length. [ 126.827124][ T8611] netlink: 'syz.0.738': attribute type 6 has an invalid length. [ 126.865255][ T8612] netlink: 'syz.0.738': attribute type 5 has an invalid length. [ 126.875557][ T8612] netlink: 'syz.0.738': attribute type 6 has an invalid length. [ 127.646875][ T8663] netlink: 'syz.4.752': attribute type 24 has an invalid length. [ 127.689293][ T8665] netlink: 'syz.4.752': attribute type 24 has an invalid length. [ 127.718780][ T8663] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 127.737444][ T8665] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 128.298631][ T8692] team0: Port device team_slave_1 removed [ 128.412371][ T2928] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.458914][ T2928] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.501219][ T8708] netlink: 'syz.1.768': attribute type 10 has an invalid length. [ 128.520950][ T2928] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.529443][ T8710] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.538542][ T8708] __nla_validate_parse: 15 callbacks suppressed [ 128.538556][ T8708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 128.601078][ T8712] netlink: 'syz.1.768': attribute type 10 has an invalid length. [ 128.660301][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 128.675878][ T8712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'. [ 128.690840][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.771'. [ 128.707563][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 128.782258][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 128.957316][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 128.999053][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.774'. [ 129.027160][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.774'. [ 129.373798][ T8743] netlink: 'syz.2.778': attribute type 3 has an invalid length. [ 129.383562][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 129.588980][ T8756] bond0: entered promiscuous mode [ 129.595373][ T8756] bond_slave_0: entered promiscuous mode [ 129.621910][ T8756] bond_slave_1: entered promiscuous mode [ 129.642795][ T8760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.664196][ T8756] bond0: left promiscuous mode [ 129.704154][ T8756] bond_slave_0: left promiscuous mode [ 129.736161][ T8756] bond_slave_1: left promiscuous mode [ 129.966071][ T8776] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (640), value rounded to 0 ms [ 130.093843][ T8783] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 130.104744][ T8785] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 130.111049][ T8783] team_slave_0: left promiscuous mode [ 130.119373][ T8783] team_slave_1: left promiscuous mode [ 130.560318][ T8816] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 130.676794][ T8820] netlink: 'syz.1.800': attribute type 2 has an invalid length. [ 130.772132][ T8777] delete_channel: no stack [ 131.186760][ T8854] netlink: 'syz.0.811': attribute type 4 has an invalid length. [ 131.211443][ T8854] lo: entered promiscuous mode [ 131.254656][ T8854] lo: entered allmulticast mode [ 131.299231][ T8857] Bluetooth: MGMT ver 1.23 [ 131.431491][ T8868] syz_tun: entered allmulticast mode [ 131.488626][ T8870] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 131.686576][ T8881] sctp: [Deprecated]: syz.4.818 (pid 8881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.686576][ T8881] Use struct sctp_sack_info instead [ 131.732524][ T8882] dvmrp2: entered allmulticast mode [ 132.089023][ T8856] syz_tun: left allmulticast mode [ 132.780821][ T8933] sctp: [Deprecated]: syz.2.829 (pid 8933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.780821][ T8933] Use struct sctp_sack_info instead [ 133.705340][ T8972] __nla_validate_parse: 14 callbacks suppressed [ 133.705360][ T8972] netlink: 88 bytes leftover after parsing attributes in process `syz.0.838'. [ 133.742126][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 133.759673][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 134.340456][ T8993] smc: net device bond0 applied user defined pnetid SYZ2 [ 134.353837][ T8993] netlink: 14 bytes leftover after parsing attributes in process `syz.4.845'. [ 134.386690][ T8994] netlink: 165 bytes leftover after parsing attributes in process `syz.3.843'. [ 134.484577][ T9000] netlink: 'syz.0.842': attribute type 19 has an invalid length. [ 134.870634][ T8993] smc: removing net device bond0 with user defined pnetid SYZ2 [ 134.902753][ T8993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.947819][ T8993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.035008][ T8993] bond0 (unregistering): Released all slaves [ 135.359910][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.849'. [ 135.498876][ T9031] team0: Device ip6gre2 is of different type [ 135.618671][ T9032] team0: Device ip6gre2 is of different type [ 135.836691][ T9044] tun0: tun_chr_ioctl cmd 1074025675 [ 135.842023][ T9044] tun0: persist disabled [ 136.115581][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059505000: rx timeout, send abort [ 136.461120][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.859'. [ 136.655999][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805970e400: rx timeout, send abort [ 136.664222][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059505000: abort rx timeout. Force session deactivation [ 137.164228][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805970e400: abort rx timeout. Force session deactivation [ 137.562003][ T9103] pim6reg527: entered allmulticast mode [ 137.578367][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 137.596947][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 137.616991][ T9103] 8021q: VLANs not supported on wg1 [ 137.825058][ T9114] openvswitch: netlink: IPv4 tun info is not correct [ 137.834377][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.848145][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.872016][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.890383][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.902367][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.925989][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.932918][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.975578][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 137.983174][ T9113] openvswitch: netlink: IPv4 tun info is not correct [ 138.985814][ T9167] netlink: 'syz.1.887': attribute type 83 has an invalid length. [ 139.064234][ T9175] lo speed is unknown, defaulting to 1000 [ 139.105542][ T9175] lo speed is unknown, defaulting to 1000 [ 139.184742][ T9179] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.192009][ T9179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.256893][ T9179] team_slave_0: entered promiscuous mode [ 139.262867][ T9179] team_slave_1: entered promiscuous mode [ 139.330571][ T9179] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.435767][ T9175] lo speed is unknown, defaulting to 1000 [ 139.500438][ T9200] !€ÿ: renamed from bond_slave_0 [ 139.737334][ T9206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.899'. [ 139.749729][ T9175] infiniband syz0: set active [ 139.752355][ T9206] netlink: 788 bytes leftover after parsing attributes in process `syz.2.899'. [ 139.755358][ T9175] infiniband syz0: added lo [ 139.773854][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.900'. [ 139.774400][ T43] lo speed is unknown, defaulting to 1000 [ 139.823693][ T9175] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 139.838010][ T9213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.900'. [ 139.840448][ T9175] infiniband syz0: Couldn't open port 1 [ 140.026299][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 140.060883][ T9222] netlink: 88 bytes leftover after parsing attributes in process `syz.1.902'. [ 140.063344][ T9175] RDS/IB: syz0: added [ 140.108188][ T9175] smc: adding ib device syz0 with port count 1 [ 140.114588][ T9175] smc: ib device syz0 port 1 has pnetid [ 140.169971][ T9228] tipc: Enabling of bearer rejected, already enabled [ 140.187307][ T43] lo speed is unknown, defaulting to 1000 [ 140.187979][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 140.216853][ T9219] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.903'. [ 140.237253][ T9175] lo speed is unknown, defaulting to 1000 [ 140.539817][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 140.553380][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.588596][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.615157][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.906'. [ 140.629834][ T9243] netlink: 'syz.3.906': attribute type 7 has an invalid length. [ 140.643327][ T9243] netlink: 'syz.3.906': attribute type 8 has an invalid length. [ 140.707447][ T9234] dvmrp1: left allmulticast mode [ 140.728841][ T9175] lo speed is unknown, defaulting to 1000 [ 140.730674][ T64] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.749735][ T64] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.760726][ T64] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.775055][ T64] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.814082][ T64] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.843056][ T64] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.864895][ T64] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.884761][ T64] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.236791][ T9257] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 141.277076][ T9259] netlink: 'syz.2.915': attribute type 1 has an invalid length. [ 141.635394][ T9175] lo speed is unknown, defaulting to 1000 [ 141.637622][ T9273] tipc: Enabled bearer , priority 0 [ 141.650814][ T9273] syzkaller0: entered promiscuous mode [ 141.661844][ T9273] syzkaller0: entered allmulticast mode [ 141.673246][ T9273] tipc: Resetting bearer [ 141.723643][ T9272] tipc: Resetting bearer [ 141.806204][ T9272] tipc: Disabling bearer [ 141.956694][ T9290] tipc: Enabling of bearer rejected, failed to enable media [ 141.975091][ T9290] netlink: 'syz.0.924': attribute type 1 has an invalid length. [ 142.123012][ T9175] lo speed is unknown, defaulting to 1000 [ 142.438871][ T9175] lo speed is unknown, defaulting to 1000 [ 142.662117][ T9307] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 142.957056][ T9324] net_ratelimit: 27 callbacks suppressed [ 142.957076][ T9324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.024681][ T92] lo speed is unknown, defaulting to 1000 [ 143.611525][ T9352] netlink: 'syz.3.946': attribute type 2 has an invalid length. [ 143.695818][ T9352] block nbd3: not configured, cannot reconfigure [ 143.722106][ T9359] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 143.729938][ T9354] bridge_slave_0: invalid flags given to default FDB implementation [ 143.852002][ T9358] syzkaller0: entered promiscuous mode [ 143.862090][ T9358] syzkaller0: entered allmulticast mode [ 143.892121][ T9366] netlink: 'syz.4.952': attribute type 14 has an invalid length. [ 143.915844][ T9366] netlink: 'syz.4.952': attribute type 13 has an invalid length. [ 144.442407][ T9389] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 144.630028][ T9399] tipc: Enabled bearer , priority 0 [ 144.673125][ T9399] syzkaller0: entered promiscuous mode [ 144.695736][ T9399] syzkaller0: entered allmulticast mode [ 144.812387][ T9394] tipc: Resetting bearer [ 144.819183][ T9414] netlink: 'syz.3.967': attribute type 29 has an invalid length. [ 144.854836][ T9392] tipc: Resetting bearer [ 144.859397][ T9414] __nla_validate_parse: 15 callbacks suppressed [ 144.859412][ T9414] netlink: 500 bytes leftover after parsing attributes in process `syz.3.967'. [ 144.904734][ T9392] tipc: Disabling bearer [ 145.146202][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 145.455290][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 145.536518][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 145.666264][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 145.853451][ T9460] validate_nla: 2 callbacks suppressed [ 145.853470][ T9460] netlink: 'syz.4.983': attribute type 10 has an invalid length. [ 145.884911][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'. [ 145.894192][ T9460] team_slave_0: left promiscuous mode [ 145.910599][ T9462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.918171][ T9462] IPv6: NLM_F_CREATE should be set when creating new route [ 145.934482][ T9460] team_slave_1: left promiscuous mode [ 145.943895][ T9460] batman_adv: batadv0: Adding interface: team0 [ 145.952855][ T9460] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.004627][ T9468] netlink: 48 bytes leftover after parsing attributes in process `syz.0.985'. [ 146.005890][ T9460] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 146.024044][ T9469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.985'. [ 146.159638][ T9473] netlink: 'syz.3.986': attribute type 11 has an invalid length. [ 146.211775][ T9473] netlink: 224 bytes leftover after parsing attributes in process `syz.3.986'. [ 146.252237][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 146.277875][ T9480] netlink: 'syz.4.988': attribute type 4 has an invalid length. [ 146.282934][ T9478] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 146.295318][ T122] lo speed is unknown, defaulting to 1000 [ 146.302594][ T9480] netlink: 'syz.4.988': attribute type 4 has an invalid length. [ 146.310476][ T122] syz0: Port: 1 Link DOWN [ 146.311052][ T9478] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 146.315418][ T122] lo speed is unknown, defaulting to 1000 [ 146.323047][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 146.369350][ T9483] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 146.372894][ T43] lo speed is unknown, defaulting to 1000 [ 146.382764][ T9484] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 146.401121][ T43] syz0: Port: 1 Link ACTIVE [ 146.530913][ T9492] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 146.592600][ T9492] delete_channel: no stack [ 146.608964][ T9494] netlink: 'syz.3.994': attribute type 29 has an invalid length. [ 147.008666][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.035303][ T9520] veth0: entered promiscuous mode [ 147.128617][ T9519] veth0: left promiscuous mode [ 148.029771][ T9567] openvswitch: netlink: IPv4 tun info is not correct [ 148.096381][ T9566] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 148.118636][ T9566] team0: Device macvtap1 is already an upper device of the team interface [ 148.180498][ T9577] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 148.221056][ T9577] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 148.289035][ T9583] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.748974][ T95] block nbd1: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 60 seconds [ 148.760559][ T95] block nbd1: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 60 seconds [ 148.775793][ T95] block nbd1: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 60 seconds [ 148.789417][ T95] block nbd1: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 60 seconds [ 149.012645][ T9627] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 149.231818][ T9627] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 149.358466][ T9627] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 149.454165][ T9627] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 149.509088][ T9627] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 149.663378][ T9627] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 149.714584][ T1145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.748678][ T1145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.783271][ T1145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.792793][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880593f5400: rx timeout, send abort [ 149.801438][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880593f5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.893210][ T1145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.046445][ T9676] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 150.446777][ T9694] __nla_validate_parse: 21 callbacks suppressed [ 150.446794][ T9694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1045'. [ 150.479899][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 150.508097][ T9699] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1047'. [ 150.533089][ T9702] netlink: 'syz.3.1049': attribute type 11 has an invalid length. [ 150.585778][ T9702] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1049'. [ 150.616700][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 150.813784][ T9718] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 151.096085][ T9729] netlink: 'syz.0.1053': attribute type 15 has an invalid length. [ 151.108545][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 151.206152][ T9729] netlink: 'syz.0.1053': attribute type 15 has an invalid length. [ 151.222260][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 151.340705][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'. [ 151.416483][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 152.001247][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 153.328341][ T9843] sctp: [Deprecated]: syz.2.1083 (pid 9843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.328341][ T9843] Use struct sctp_sack_info instead [ 153.425200][ T9826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.485108][ T9832] geneve3: entered promiscuous mode [ 153.493848][ T9832] geneve3: entered allmulticast mode [ 153.569872][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.579658][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.619949][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.335344][ T9891] tunl0: entered promiscuous mode [ 154.356534][ T9891] netlink: 'syz.4.1093': attribute type 3 has an invalid length. [ 155.107172][ T9932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.190953][ T9932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.254233][ T9943] tipc: Enabling of bearer rejected, failed to enable media [ 155.438082][ T9963] netlink: 'syz.0.1109': attribute type 11 has an invalid length. [ 155.481669][ T9963] netlink: 'syz.0.1109': attribute type 4 has an invalid length. [ 155.526118][ T9963] __nla_validate_parse: 10 callbacks suppressed [ 155.526134][ T9963] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1109'. [ 155.557793][ T9970] netlink: 'syz.4.1112': attribute type 2 has an invalid length. [ 155.569411][ T9970] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1112'. [ 155.624417][ T9970] nbd: must specify a device to reconfigure [ 155.761414][ T9983] netlink: 'syz.1.1115': attribute type 14 has an invalid length. [ 155.829410][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 155.922007][ T9983] netlink: 'syz.1.1115': attribute type 14 has an invalid length. [ 155.923443][ T2928] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.975774][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 156.004224][ T2928] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.053541][ T2928] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.261396][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 156.287756][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 156.688649][T10031] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 156.762279][T10036] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1127'. [ 156.807926][T10036] netem: invalid attributes len -24 [ 156.839086][T10036] netem: change failed [ 156.931989][T10048] netlink: 'syz.2.1131': attribute type 4 has an invalid length. [ 156.954254][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1131'. [ 157.042969][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 157.297525][T10066] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 157.369439][T10076] netlink: 'syz.1.1136': attribute type 4 has an invalid length. [ 157.461253][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1138'. [ 157.470742][T10083] netlink: 'syz.1.1136': attribute type 4 has an invalid length. [ 157.492300][T10082] netlink: 'syz.4.1138': attribute type 3 has an invalid length. [ 157.794461][T10093] bridge_slave_1 (unregistering): left allmulticast mode [ 157.845905][T10093] bridge_slave_1 (unregistering): left promiscuous mode [ 157.852963][T10093] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.086459][T10108] netlink: 'syz.3.1143': attribute type 10 has an invalid length. [ 159.293288][T10176] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 159.360263][T10176] team0: Port device geneve0 added [ 159.582647][T10185] netlink: 'syz.0.1167': attribute type 7 has an invalid length. [ 160.013482][T10215] netlink: 'syz.2.1177': attribute type 33 has an invalid length. [ 160.054631][T10218] netlink: 'syz.0.1179': attribute type 10 has an invalid length. [ 160.122305][T10218] team0: Device hsr_slave_0 failed to register rx_handler [ 160.913939][T10278] __nla_validate_parse: 13 callbacks suppressed [ 160.913955][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'. [ 160.983741][T10265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.102812][T10273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.110098][T10273] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.122457][T10273] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 161.132015][ T2928] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 161.195400][T10281] syzkaller1: entered promiscuous mode [ 161.211689][T10281] syzkaller1: entered allmulticast mode [ 161.264348][T10280] veth9: entered promiscuous mode [ 161.274592][T10280] bond4: (slave veth9): Enslaving as an active interface with a down link [ 161.305291][T10263] syzkaller1: entered promiscuous mode [ 161.314744][T10263] syzkaller1: entered allmulticast mode [ 161.324644][T10292] syzkaller1: entered promiscuous mode [ 161.332188][T10292] syzkaller1: entered allmulticast mode [ 161.361289][T10299] gretap2: entered allmulticast mode [ 161.372677][T10299] bond4: (slave gretap2): making interface the new active one [ 161.380975][T10299] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 161.529744][T10305] syzkaller1: left promiscuous mode [ 161.543405][T10305] syzkaller1: left allmulticast mode [ 162.065842][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'. [ 162.220969][T10340] validate_nla: 1 callbacks suppressed [ 162.220984][T10340] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 162.399262][T10364] netlink: 'syz.3.1205': attribute type 13 has an invalid length. [ 162.420666][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 162.440466][T10364] netlink: 'syz.3.1205': attribute type 13 has an invalid length. [ 162.480897][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1205'. [ 162.794145][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1212'. [ 162.814257][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1210'. [ 163.246788][T10409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1217'. [ 163.451743][T10425] netlink: 'syz.0.1224': attribute type 33 has an invalid length. [ 163.475839][T10425] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1224'. [ 163.500754][T10421] geneve2: entered promiscuous mode [ 163.506643][T10421] geneve2: entered allmulticast mode [ 163.514910][ T49] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 163.544233][ T49] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 163.633000][ T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 163.680135][ T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 163.778204][T10434] tipc: Enabled bearer , priority 0 [ 163.818130][T10434] syzkaller0: entered promiscuous mode [ 163.823809][T10434] syzkaller0: entered allmulticast mode [ 164.092784][T10458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.154927][T10449] veth11: entered promiscuous mode [ 164.212947][T10448] tipc: Resetting bearer [ 164.237339][T10432] tipc: Resetting bearer [ 164.289820][T10432] tipc: Disabling bearer [ 164.320367][T10467] openvswitch: netlink: Key type 29 is not supported [ 164.383472][T10469] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 164.418607][T10469] team0: Device hsr_slave_0 failed to register rx_handler [ 164.511730][T10469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1237'. [ 164.583113][T10480] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1241'. [ 164.601956][T10480] NCSI netlink: No device for ifindex 0 [ 164.789811][T10490] geneve3: entered promiscuous mode [ 164.795061][T10490] geneve3: entered allmulticast mode [ 164.820891][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.857059][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.895940][T10498] syzkaller1: entered promiscuous mode [ 164.930595][T10498] syzkaller1: entered allmulticast mode [ 164.960708][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.995876][T10348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.196277][T10514] syzkaller1: left promiscuous mode [ 165.201582][T10514] syzkaller1: left allmulticast mode [ 165.662673][T10544] netlink: 'syz.1.1254': attribute type 7 has an invalid length. [ 165.822405][T10554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.250792][T10571] __nla_validate_parse: 3 callbacks suppressed [ 166.250809][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1260'. [ 166.412033][T10580] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 166.430532][T10580] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 166.471680][T10580] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1261'. [ 166.499978][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 166.549120][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 166.571046][T10584] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1262'. [ 166.600304][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 166.637705][T10584] netlink: 'syz.1.1262': attribute type 2 has an invalid length. [ 166.689385][T10584] syzkaller1: entered allmulticast mode [ 166.891780][T10600] netlink: 'syz.4.1267': attribute type 2 has an invalid length. [ 166.942548][T10604] IPv6: sit1: Disabled Multicast RS [ 166.963066][T10604] sit1: entered allmulticast mode [ 167.537553][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 167.633786][T10640] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 168.039628][T10660] validate_nla: 1 callbacks suppressed [ 168.039644][T10660] netlink: 'syz.3.1281': attribute type 6 has an invalid length. [ 168.273672][T10674] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1285'. [ 168.464179][T10682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1286'. [ 168.533743][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1286'. [ 168.824486][T10699] syzkaller0: entered promiscuous mode [ 168.831074][T10699] syzkaller0: entered allmulticast mode [ 168.840771][T10698] netlink: 'syz.1.1291': attribute type 11 has an invalid length. [ 169.185328][T10714] gtp0: entered promiscuous mode [ 169.233301][T10714] gtp0: entered allmulticast mode [ 169.977650][T10751] netlink: zone id is out of range [ 169.982808][T10751] netlink: zone id is out of range [ 169.999900][T10751] netlink: zone id is out of range [ 170.005043][T10751] netlink: zone id is out of range [ 170.019360][T10751] netlink: zone id is out of range [ 170.040521][T10751] netlink: zone id is out of range [ 170.101603][T10751] netlink: zone id is out of range [ 170.107351][T10751] netlink: zone id is out of range [ 170.112658][T10751] netlink: zone id is out of range [ 170.122781][T10751] netlink: zone id is out of range [ 171.502227][T10772] tipc: Enabled bearer , priority 0 [ 171.509920][T10778] netlink: 'syz.1.1309': attribute type 1 has an invalid length. [ 171.518601][T10778] netlink: 'syz.1.1309': attribute type 3 has an invalid length. [ 171.526980][T10778] __nla_validate_parse: 31 callbacks suppressed [ 171.526994][T10778] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1309'. [ 171.555781][T10778] NCSI netlink: No device for ifindex 131080 [ 171.588032][T10359] tipc: Resetting bearer [ 171.635113][T10766] tipc: Resetting bearer [ 171.766866][T10790] netlink: 'syz.0.1313': attribute type 2 has an invalid length. [ 171.774642][T10790] netlink: 'syz.0.1313': attribute type 8 has an invalid length. [ 171.792250][T10790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1313'. [ 171.871518][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 172.498386][ T122] tipc: Node number set to 568745593 [ 172.833387][T10766] tipc: Disabling bearer [ 173.381939][T10816] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 173.495142][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 173.505093][T10816] netlink: 'syz.0.1322': attribute type 10 has an invalid length. [ 173.531287][T10817] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1321'. [ 173.541271][T10816] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 174.165749][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1328'. [ 174.195516][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 174.660695][T10881] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 174.700867][T10895] netlink: 'syz.2.1338': attribute type 32 has an invalid length. [ 174.991663][T10904] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 175.066684][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 175.075572][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 175.690357][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 175.728416][T10939] dummy0: entered promiscuous mode [ 175.743000][T10939] batadv_slave_1: entered promiscuous mode [ 175.768352][T10924] lo speed is unknown, defaulting to 1000 [ 176.293909][T10955] netlink: 'syz.0.1353': attribute type 2 has an invalid length. [ 176.293909][T10957] netlink: 'syz.0.1353': attribute type 2 has an invalid length. [ 176.540319][T10971] __nla_validate_parse: 3 callbacks suppressed [ 176.540337][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 176.665319][T10971] bridge7: port 1(veth11) entered blocking state [ 176.684582][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 176.694892][T10971] bridge7: port 1(veth11) entered disabled state [ 176.715066][T10971] veth11: entered allmulticast mode [ 176.738046][T10971] veth11: entered promiscuous mode [ 176.802199][T10934] lo speed is unknown, defaulting to 1000 [ 176.832602][T10978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1356'. [ 177.358220][T10994] vlan1: entered promiscuous mode [ 177.376527][T10994] vlan1: entered allmulticast mode [ 177.403704][T10994] hsr_slave_1: entered allmulticast mode [ 177.429793][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 177.649658][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 177.701428][T10995] lo speed is unknown, defaulting to 1000 [ 178.604375][T11042] netlink: 'syz.2.1371': attribute type 11 has an invalid length. [ 178.834573][T11053] net_ratelimit: 15 callbacks suppressed [ 178.834602][T11053] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 178.835800][ T95] block nbd1: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 90 seconds [ 178.860593][ T95] block nbd1: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 90 seconds [ 178.871871][ T95] block nbd1: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 90 seconds [ 178.883026][ T95] block nbd1: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 90 seconds [ 179.191205][T11064] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1377'. [ 179.550715][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1382'. [ 179.595434][T11078] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 179.887301][T11083] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.900230][T11083] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 179.911396][T11083] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 180.018491][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 180.277264][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 180.507787][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 180.541156][T11126] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 180.785385][T11142] netlink: 'syz.3.1400': attribute type 29 has an invalid length. [ 180.996814][T11154] syzkaller1: entered promiscuous mode [ 181.022247][T11154] syzkaller1: entered allmulticast mode [ 181.181966][T11165] tipc: Enabled bearer , priority 0 [ 181.213571][T11165] syzkaller0: entered promiscuous mode [ 181.242824][T11165] syzkaller0: entered allmulticast mode [ 181.283833][T11165] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.336376][T11177] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 181.339068][T11172] IPVS: fo: FWM 3 0x00000003 - no destination available [ 181.353734][ T122] IPVS: starting estimator thread 0... [ 181.376417][T11165] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 181.411215][T11172] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 181.439223][T11165] tipc: Resetting bearer [ 181.465739][T11179] IPVS: using max 30 ests per chain, 72000 per kthread [ 181.475018][T11164] tipc: Resetting bearer [ 181.521673][T11164] tipc: Disabling bearer [ 181.578014][T11188] tipc: Enabled bearer , priority 0 [ 181.595307][T11183] syzkaller0: entered promiscuous mode [ 181.603326][T11183] syzkaller0: entered allmulticast mode [ 181.700295][T11188] tipc: Resetting bearer [ 181.773776][T11188] tipc: Enabling of bearer rejected, already enabled [ 181.842193][T11201] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.960237][T11188] tipc: Resetting bearer [ 182.069275][T11188] tipc: Disabling bearer [ 182.117100][T11220] __nla_validate_parse: 2 callbacks suppressed [ 182.117116][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 182.127524][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 182.173281][T11221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.382469][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 182.422719][ T51] block nbd2: Receive control failed (result -32) [ 182.466306][T11237] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 182.809328][T11259] sctp: [Deprecated]: syz.2.1429 (pid 11259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.809328][T11259] Use struct sctp_sack_info instead [ 182.871162][T11261] sctp: [Deprecated]: syz.2.1429 (pid 11261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.871162][T11261] Use struct sctp_sack_info instead [ 183.034174][T11271] netlink: 'syz.2.1434': attribute type 4 has an invalid length. [ 183.060038][T11271] netlink: 'syz.2.1434': attribute type 4 has an invalid length. [ 183.061505][T11273] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 183.151423][T11276] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1436'. [ 184.006143][T11281] delete_channel: no stack [ 185.032841][T11361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1462'. [ 185.262984][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 185.315054][T11374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1468'. [ 185.353832][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 185.371798][T11373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1468'. [ 185.981323][T11416] tunl0: entered promiscuous mode [ 186.000504][T11416] netlink: 'syz.3.1481': attribute type 3 has an invalid length. [ 186.027593][T11416] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1481'. [ 186.285510][T11432] netlink: 'syz.4.1486': attribute type 11 has an invalid length. [ 186.306759][T11428] tipc: Enabled bearer , priority 0 [ 186.324310][T11433] syzkaller0: entered promiscuous mode [ 186.340484][T11433] syzkaller0: entered allmulticast mode [ 186.363931][T11436] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 186.393023][T11428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.471125][T11433] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.565358][T11441] tipc: Resetting bearer [ 186.682717][T11441] tipc: Disabling bearer [ 186.795006][T11460] batadv_slave_1: entered promiscuous mode [ 186.833823][T11458] batadv_slave_1: left promiscuous mode [ 187.266144][T11484] __nla_validate_parse: 3 callbacks suppressed [ 187.266159][T11484] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1499'. [ 187.282057][T11483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1500'. [ 187.416787][T11494] nbd: couldn't find a device at index -373156329 [ 187.902547][T11516] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1506'. [ 188.613604][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 188.705807][T11546] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1513'. [ 188.813026][T11550] nbd: device at index 3 is going down [ 188.997306][T11557] team0: No ports can be present during mode change [ 189.044029][T11559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1517'. [ 189.209862][ T9229] udevd[9229]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 189.304908][T11584] netlink: 'syz.0.1521': attribute type 10 has an invalid length. [ 189.329060][T11584] veth0_vlan: entered allmulticast mode [ 189.455198][T11584] veth0_vlan: left promiscuous mode [ 189.472875][T11584] veth0_vlan: entered promiscuous mode [ 189.514151][T11584] team0: Device veth0_vlan failed to register rx_handler [ 189.685115][T11590] vlan0: entered promiscuous mode [ 189.691533][T11590] vlan0: entered allmulticast mode [ 189.704456][T11590] veth0_vlan: entered allmulticast mode [ 190.231548][T11632] netlink: 'syz.2.1531': attribute type 10 has an invalid length. [ 190.304728][T11634] ip6_vti0: entered allmulticast mode [ 190.353089][T11634] ip6_vti0: left allmulticast mode [ 190.420050][T11642] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 190.594524][T11642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.640213][T11653] bond2: (slave gretap2): making interface the new active one [ 190.651034][T11653] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 191.147841][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 191.147858][ T5883] Bluetooth: hci1: command 0x0406 tx timeout [ 191.147893][ T5883] Bluetooth: hci2: command 0x0406 tx timeout [ 191.489804][T11704] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.1546'. [ 191.775053][T11720] syzkaller0: entered promiscuous mode [ 191.803298][T11720] syzkaller0: entered allmulticast mode [ 192.209609][T11754] smc: adding net device bond0 with user defined pnetid SYZ2 [ 192.219003][T11754] bond0: entered promiscuous mode [ 192.244381][T11754] bond0: entered allmulticast mode [ 192.263756][T11754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.276359][T11759] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.367094][T11784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1565'. [ 193.612652][T11796] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 193.642370][T11797] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 193.697512][T11801] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.725931][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.893340][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 194.069954][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 194.101816][T11821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.135376][T11821] netlink: 'syz.2.1577': attribute type 2 has an invalid length. [ 194.383199][T11843] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 194.383217][T11845] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 194.383231][T11845] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1584'. [ 194.392779][T11843] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1584'. [ 194.679799][T11856] syzkaller1: left promiscuous mode [ 194.685039][T11856] syzkaller1: left allmulticast mode [ 194.733969][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 194.766675][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'. [ 194.783008][T11863] dummy0: entered promiscuous mode [ 194.799252][T11863] batadv_slave_1: entered promiscuous mode [ 194.809387][T11863] debugfs: 'hsr1' already exists in 'hsr' [ 194.817726][T11863] Cannot create hsr debugfs directory [ 194.822728][T11868] openvswitch: netlink: Message has 4 unknown bytes. [ 194.834435][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.878773][T11868] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 194.908990][T11868] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1593'. [ 195.021831][T11877] netlink: 'syz.2.1597': attribute type 23 has an invalid length. [ 195.168310][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'. [ 195.316410][T11894] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.356603][T11896] tipc: Enabling of bearer rejected, failed to enable media [ 195.464326][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'. [ 195.524681][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1607'. [ 196.115203][T11942] netlink: 'syz.4.1612': attribute type 12 has an invalid length. [ 196.123256][T11942] netlink: 'syz.4.1612': attribute type 11 has an invalid length. [ 196.192504][T11944] sctp: [Deprecated]: syz.1.1614 (pid 11944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.192504][T11944] Use struct sctp_sack_info instead [ 196.875010][T11974] macvlan0: entered allmulticast mode [ 196.884153][T11974] bond0: (slave macvlan0): Opening slave failed [ 196.917082][T11975] macvlan0: entered allmulticast mode [ 196.923919][T11975] bond0: (slave macvlan0): Opening slave failed [ 197.012931][T11979] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 197.172277][T11988] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:0 [ 197.234288][T11990] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 197.267445][T11990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.291647][T11990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.298949][T11990] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 197.310522][T11990] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 197.409173][T11997] veth7: entered promiscuous mode [ 197.445079][T11990] gretap2: entered allmulticast mode [ 197.468551][T11990] bond4: (slave gretap2): making interface the new active one [ 197.488646][T12003] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 197.492923][T11990] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 197.508428][T11999] : renamed from bridge_slave_0 (while UP) [ 198.165079][T12035] (unnamed net_device) (uninitialized): option coupled_control: invalid value (8) [ 198.371705][T12046] team0: Port device geneve0 added [ 198.413692][T12041] __nla_validate_parse: 15 callbacks suppressed [ 198.413708][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'. [ 198.647407][T12061] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1654'. [ 198.691479][T12067] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1653'. [ 198.721364][T12058] IPv6: sit1: Disabled Multicast RS [ 198.751948][T12058] sit1: entered allmulticast mode [ 198.894685][T12068] dvmrp0: entered allmulticast mode [ 198.942293][T12074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1657'. [ 199.005260][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 199.014426][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 199.571886][T12099] delete_channel: no stack [ 199.695540][T12106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.705873][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 199.714952][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 199.734318][T12106] validate_nla: 2 callbacks suppressed [ 199.734332][T12106] netlink: 'syz.4.1663': attribute type 18 has an invalid length. [ 199.768114][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'. [ 199.790562][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1666'. [ 199.807160][T12106] netlink: 'syz.4.1663': attribute type 18 has an invalid length. [ 199.983268][T12125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.281586][T12137] netlink: 'syz.1.1673': attribute type 10 has an invalid length. [ 200.281740][T12138] netlink: 'syz.1.1673': attribute type 10 has an invalid length. [ 200.294850][T12133] syzkaller0: entered promiscuous mode [ 200.304277][T12133] syzkaller0: entered allmulticast mode [ 201.942709][T12169] syzkaller1: entered promiscuous mode [ 201.961329][T12169] syzkaller1: entered allmulticast mode [ 202.392894][T12199] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 202.702630][T12220] gre0: entered promiscuous mode [ 202.786041][T12219] tipc: Enabled bearer , priority 0 [ 202.787039][T12226] sctp: [Deprecated]: syz.4.1697 (pid 12226) Use of int in maxseg socket option. [ 202.787039][T12226] Use struct sctp_assoc_value instead [ 203.024110][T12218] tipc: Disabling bearer [ 203.571775][T12273] __nla_validate_parse: 13 callbacks suppressed [ 203.571791][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 203.589457][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1712'. [ 203.608942][T12273] geneve2: entered promiscuous mode [ 203.614383][T12273] geneve2: entered allmulticast mode [ 203.648051][T12275] netlink: 'syz.0.1713': attribute type 12 has an invalid length. [ 203.671232][T12275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1713'. [ 203.773204][T12283] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.787843][T12283] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 203.820890][T12283] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.842773][T12283] bond4: (slave gretap1): making interface the new active one [ 203.851754][T12283] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 203.863973][T12283] netlink: 'syz.0.1715': attribute type 21 has an invalid length. [ 203.874185][T12283] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 204.848138][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 204.976857][T12349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1734'. [ 205.582524][T12376] openvswitch: netlink: Missing valid actions attribute. [ 205.625940][T12376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.708706][T12379] IPVS: Unknown mcast interface: bridge_slave_0 [ 206.140253][T12402] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 206.156026][T12405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.174543][T12402] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 206.381692][T12415] netlink: 'syz.2.1752': attribute type 21 has an invalid length. [ 206.418580][T12415] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1752'. [ 206.700339][T12426] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1755'. [ 206.733567][T12426] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1755'. [ 206.743627][T12426] netlink: 'syz.4.1755': attribute type 5 has an invalid length. [ 206.767450][T12426] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1755'. [ 206.928562][T12438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1760'. [ 207.124877][T12452] netlink: 'syz.3.1764': attribute type 3 has an invalid length. [ 207.487241][T12472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.624702][T12478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.645057][T12474] netlink: 'syz.4.1770': attribute type 7 has an invalid length. [ 208.001548][ T43] IPVS: starting estimator thread 0... [ 208.005020][T12499] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 208.095802][T12503] IPVS: using max 32 ests per chain, 76800 per kthread [ 208.309820][T12510] tipc: Enabling of bearer rejected, failed to enable media [ 208.362102][T12525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.511817][T12531] sctp: [Deprecated]: syz.2.1789 (pid 12531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.511817][T12531] Use struct sctp_sack_info instead [ 208.640101][T12539] __nla_validate_parse: 7 callbacks suppressed [ 208.640118][T12539] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.1791'. [ 208.772086][T12545] openvswitch: netlink: Key type 10512 is out of range max 32 [ 208.786870][T12546] openvswitch: netlink: Key type 10512 is out of range max 32 [ 208.917005][ T95] block nbd1: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 120 seconds [ 208.927829][ T95] block nbd1: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 120 seconds [ 208.938837][ T95] block nbd1: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 120 seconds [ 208.949977][ T95] block nbd1: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 120 seconds [ 208.955893][T12552] netlink: 'syz.1.1795': attribute type 1 has an invalid length. [ 209.024842][T12552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.402849][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 209.504515][T12566] veth11: entered allmulticast mode [ 210.046894][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.178954][T12604] netlink: 'syz.4.1811': attribute type 12 has an invalid length. [ 210.247319][T12608] syzkaller1: entered promiscuous mode [ 210.252830][T12608] syzkaller1: entered allmulticast mode [ 210.354072][T12618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 210.417442][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1817'. [ 210.462249][T12624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.507685][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1819'. [ 210.751509][T12645] netlink: 'syz.3.1824': attribute type 2 has an invalid length. [ 210.825792][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1825'. [ 210.835827][T12651] netlink: 'syz.0.1825': attribute type 16 has an invalid length. [ 210.843805][T12651] netlink: 'syz.0.1825': attribute type 17 has an invalid length. [ 210.857224][T12651] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1825'. [ 210.861551][T12653] tipc: Enabled bearer , priority 0 [ 210.892012][T12653] syzkaller0: entered promiscuous mode [ 210.908367][T12653] syzkaller0: entered allmulticast mode [ 211.220627][T12657] veth1_to_bond: mtu less than device minimum [ 211.373806][T12662] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 211.514208][T12637] tipc: Resetting bearer [ 211.598947][T12637] tipc: Disabling bearer [ 211.627173][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1833'. [ 211.702437][T12673] team_slave_0: entered allmulticast mode [ 211.721602][T12673] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 211.760074][T12683] validate_nla: 1 callbacks suppressed [ 211.760088][T12683] netlink: 'syz.2.1832': attribute type 10 has an invalid length. [ 211.773580][T12676] netlink: 'syz.2.1832': attribute type 10 has an invalid length. [ 211.797063][T12676] bridge_slave_1: left allmulticast mode [ 211.822325][T12676] bridge_slave_1: left promiscuous mode [ 211.845977][T12676] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.858701][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1834'. [ 211.937532][T12676] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 211.974760][T12702] netlink: 'syz.0.1837': attribute type 21 has an invalid length. [ 212.010419][T12707] netlink: 'syz.0.1837': attribute type 21 has an invalid length. [ 212.013489][T12702] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1837'. [ 212.065924][T12707] netlink: 'syz.0.1837': attribute type 4 has an invalid length. [ 212.070269][T12708] netlink: 'syz.0.1837': attribute type 21 has an invalid length. [ 212.073674][T12707] netlink: 'syz.0.1837': attribute type 5 has an invalid length. [ 212.115347][T12710] openvswitch: netlink: IP tunnel TTL not specified. [ 212.159129][T12702] netlink: 'syz.0.1837': attribute type 4 has an invalid length. [ 212.176867][T12702] netlink: 'syz.0.1837': attribute type 5 has an invalid length. [ 212.202219][T12708] netlink: 'syz.0.1837': attribute type 4 has an invalid length. [ 212.380953][T12726] sctp: [Deprecated]: syz.3.1844 (pid 12726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.380953][T12726] Use struct sctp_sack_info instead [ 212.585406][T12730] bridge: RTM_NEWNEIGH with invalid ether address [ 212.834001][ T30] audit: type=1804 audit(1756743480.242:2): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1851" name="/newroot/367/cgroup.controllers" dev="tmpfs" ino=1894 res=1 errno=0 [ 212.898063][ T30] audit: type=1800 audit(1756743480.272:3): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1851" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 213.522078][T12788] tipc: Enabled bearer , priority 0 [ 213.533818][T12788] syzkaller0: entered promiscuous mode [ 213.542676][T12788] syzkaller0: entered allmulticast mode [ 213.573617][T12788] tipc: Resetting bearer [ 213.714462][T12802] __nla_validate_parse: 13 callbacks suppressed [ 213.714480][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 213.800596][T12805] sctp: [Deprecated]: syz.3.1865 (pid 12805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.800596][T12805] Use struct sctp_sack_info instead [ 213.839987][T12786] tipc: Resetting bearer [ 213.959163][T12786] tipc: Disabling bearer [ 213.972499][T12815] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1869'. [ 214.087541][T12819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1870'. [ 214.172755][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 214.198733][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 214.234632][T12817] delete_channel: no stack [ 214.367633][T12844] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1876'. [ 214.764044][T12860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1882'. [ 214.775481][T12863] openvswitch: netlink: Message has 4 unknown bytes. [ 215.009693][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 215.064994][T12885] macvtap1: entered allmulticast mode [ 215.083775][T12885] veth0_macvtap: entered allmulticast mode [ 215.207872][T12893] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1890'. [ 215.218945][T12892] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1891'. [ 215.379860][T12908] netem: change failed [ 216.584746][T12969] C: renamed from lo [ 217.012679][T12986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.125283][T12989] tipc: Enabled bearer , priority 0 [ 217.144458][T12989] syzkaller0: entered promiscuous mode [ 217.160994][T12989] syzkaller0: entered allmulticast mode [ 217.187839][T12989] tipc: Resetting bearer [ 217.207426][T12988] tipc: Resetting bearer [ 217.249562][T12988] tipc: Disabling bearer [ 217.330250][T13000] veth13: entered allmulticast mode [ 217.499188][T13012] validate_nla: 6 callbacks suppressed [ 217.499204][T13012] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 217.634641][T13020] pim6reg: entered allmulticast mode [ 217.735352][T13026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.084285][T13045] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 218.660775][T13071] syzkaller0: entered promiscuous mode [ 218.672687][T13071] syzkaller0: entered allmulticast mode [ 220.310481][T13113] __nla_validate_parse: 10 callbacks suppressed [ 220.310500][T13113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1962'. [ 220.700381][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 220.717548][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1968'. [ 220.811134][T13137] tipc: Failed to remove unknown binding: 66,1,1/0:1154213689/1154213691 [ 221.225477][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'. [ 221.328592][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'. [ 221.478371][T13176] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1974'. [ 221.637801][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 222.253120][T13209] batman_adv: batadv0: Adding interface: wlan1 [ 222.291823][T13209] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.323131][T13209] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 222.493573][T13223] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.592515][T13234] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1996'. [ 222.631725][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 222.928605][T13254] netlink: 'syz.3.2003': attribute type 11 has an invalid length. [ 222.972744][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2005'. [ 223.641856][T13297] veth11: entered promiscuous mode [ 223.851675][T13307] netlink: 'syz.2.2025': attribute type 2 has an invalid length. [ 224.365473][T13338] netlink: 'syz.2.2035': attribute type 7 has an invalid length. [ 224.399892][T13338] netlink: 'syz.2.2035': attribute type 8 has an invalid length. [ 224.712859][T13358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.775376][T13367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.927830][T13373] tipc: Enabling of bearer rejected, failed to enable media [ 225.340918][T13394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.353455][T13397] __nla_validate_parse: 14 callbacks suppressed [ 225.353471][T13397] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2048'. [ 225.397644][T13396] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2048'. [ 225.572623][T13410] sctp: [Deprecated]: syz.3.2053 (pid 13410) Use of int in max_burst socket option deprecated. [ 225.572623][T13410] Use struct sctp_assoc_value instead [ 225.903427][T13405] geneve2: left promiscuous mode [ 225.921740][T13405] bridge2: left promiscuous mode [ 225.955317][T13405] geneve3: left promiscuous mode [ 225.983643][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 225.993146][T13405] veth9: left promiscuous mode [ 226.042580][T13405] veth0_macvtap: left allmulticast mode [ 226.075194][T10356] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.105958][T10356] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.114861][T10356] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 226.140910][T10356] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.150632][T10356] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.159558][T10356] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 226.227578][T13423] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 226.257574][T13423] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 226.266219][T13423] gretap1: entered promiscuous mode [ 226.271689][T13423] gretap1: entered allmulticast mode [ 226.305063][T10356] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.331209][T10356] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.362931][T13434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2060'. [ 226.382209][T10356] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 226.468595][T13440] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2062'. [ 226.479297][T13440] netlink: zone id is out of range [ 226.484763][T13440] netlink: get zone limit has 8 unknown bytes [ 226.527648][T13432] syzkaller1: entered promiscuous mode [ 226.533208][T13432] syzkaller1: entered allmulticast mode [ 226.664937][T13440] bridge7: entered promiscuous mode [ 226.697713][T13440] bridge7: entered allmulticast mode [ 227.050336][T13474] sctp: [Deprecated]: syz.0.2069 (pid 13474) Use of int in maxseg socket option. [ 227.050336][T13474] Use struct sctp_assoc_value instead [ 227.190213][T13484] lo: entered promiscuous mode [ 227.215589][T13484] netlink: 'syz.3.2070': attribute type 2 has an invalid length. [ 227.223582][T13484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.276608][T13488] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2073'. [ 227.308984][T13488] openvswitch: netlink: Flow key attr not present in new flow. [ 227.652379][T13510] veth0_macvtap: entered allmulticast mode [ 227.934287][T13525] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 228.047525][T13530] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 228.078681][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 228.124127][T13533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2086'. [ 228.287410][T13550] netlink: 'syz.4.2087': attribute type 16 has an invalid length. [ 228.351159][T13550] netlink: 'syz.4.2087': attribute type 17 has an invalid length. [ 228.393945][T13555] netlink: zone id is out of range [ 228.432413][T13555] netlink: zone id is out of range [ 228.466942][T13555] netlink: zone id is out of range [ 228.517254][T13555] netlink: del zone limit has 4 unknown bytes [ 228.603343][T13550] tunl0: left promiscuous mode [ 228.692763][T13550] team_slave_0: entered promiscuous mode [ 228.698544][T13550] team_slave_1: entered promiscuous mode [ 228.704231][T13550] geneve0: entered promiscuous mode [ 228.773490][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.804347][T13550] batman_adv: batadv0: Interface activated: team0 [ 228.829286][T13550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.414291][T13587] netlink: 'syz.4.2100': attribute type 3 has an invalid length. [ 229.705235][T13592] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 229.864676][T13601] ip6tnl2: entered promiscuous mode [ 229.899776][T13601] ip6tnl2: entered allmulticast mode [ 230.046520][T13612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.086088][T13606] tipc: Enabled bearer , priority 0 [ 230.171522][T13606] syzkaller0: entered promiscuous mode [ 230.177895][T13606] syzkaller0: entered allmulticast mode [ 230.305076][T13605] tipc: Resetting bearer [ 230.358828][T13605] tipc: Disabling bearer [ 230.540894][T13638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2116'. [ 230.612071][T13638] netlink: 'syz.3.2116': attribute type 4 has an invalid length. [ 230.747157][T13651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2120'. [ 230.791138][T13649] netlink: 616 bytes leftover after parsing attributes in process `syz.2.2119'. [ 230.992495][T13667] netlink: 'syz.2.2123': attribute type 6 has an invalid length. [ 231.466851][T13692] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20001 [ 231.484904][T13693] tipc: Enabled bearer , priority 0 [ 231.519276][T13696] tipc: Resetting bearer [ 231.533350][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'. [ 231.575422][T13687] tipc: Disabling bearer [ 231.847077][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'. [ 231.910004][T13708] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 231.920838][T10357] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.955560][T13714] netlink: 'syz.3.2138': attribute type 9 has an invalid length. [ 231.964849][T10357] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 232.005551][T10357] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 232.051515][T10357] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 232.173219][T13730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.220049][T13727] tipc: Enabling of bearer rejected, failed to enable media [ 232.230506][T13730] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 232.403822][T13747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2145'. [ 232.431828][T13745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2144'. [ 232.465419][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 232.906701][T13771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2150'. [ 233.028424][T13776] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2152'. [ 233.165412][ T9883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.231511][ T9883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.485812][T13800] ksmbd: Unknown IPC event: 3, ignore. [ 233.512173][T13802] netlink: 'syz.4.2160': attribute type 10 has an invalid length. [ 233.523550][T13795] nbd: must specify a device to reconfigure [ 233.646128][T13807] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 233.941601][T13822] tipc: Enabled bearer , priority 0 [ 233.991287][T13820] tipc: Disabling bearer [ 234.308760][T13844] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 234.403291][T13848] tipc: Enabled bearer , priority 0 [ 234.498411][T13854] syzkaller0: entered promiscuous mode [ 234.533402][T13854] syzkaller0: entered allmulticast mode [ 234.547186][T13848] tipc: Resetting bearer [ 234.610618][T13845] tipc: Resetting bearer [ 234.700623][T13845] tipc: Disabling bearer [ 234.937853][T13882] netlink: 'syz.4.2180': attribute type 11 has an invalid length. [ 234.964275][T13882] nbd: must specify a size in bytes for the device [ 235.314296][T13907] vlan0: entered promiscuous mode [ 235.331911][T13907] vlan0: entered allmulticast mode [ 235.340345][T13907] hsr_slave_1: entered allmulticast mode [ 235.742090][T13927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.008814][T13943] __nla_validate_parse: 6 callbacks suppressed [ 236.008832][T13943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2199'. [ 236.125093][T13943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2199'. [ 236.144142][T13947] openvswitch: netlink: IP tunnel dst address not specified [ 236.164457][T13954] tipc: Enabled bearer , priority 0 [ 236.172298][T13954] syzkaller0: entered promiscuous mode [ 236.178345][T13954] syzkaller0: entered allmulticast mode [ 236.211807][T13954] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 236.259698][T13954] tipc: Resetting bearer [ 236.266567][T13957] lo speed is unknown, defaulting to 1000 [ 236.282645][T13953] tipc: Resetting bearer [ 236.310544][T13953] tipc: Disabling bearer [ 236.699880][T13977] 8021q: VLANs not supported on ip6gre0 [ 236.739975][T13973] team0: Device ip6gre2 is of different type [ 236.778793][T13982] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 236.801101][T13982] netlink: 'syz.2.2207': attribute type 2 has an invalid length. [ 236.820718][T13982] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 236.929312][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'. [ 236.950558][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 237.111355][T13993] delete_channel: no stack [ 237.620009][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'. [ 237.666269][T14009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.814488][T14009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.853912][T14009] batadv_slave_1 (unregistering): left promiscuous mode [ 238.101776][T14039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2227'. [ 238.248745][T14044] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2230'. [ 238.267193][ T5877] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 238.378338][T14053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2232'. [ 238.803918][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.825551][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.850290][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.864191][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.881684][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.889693][T14087] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2239'. [ 238.890585][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.914089][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.922854][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.937834][T14084] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.947292][T14040] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 238.986780][ T95] block nbd1: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 150 seconds [ 238.997876][ T95] block nbd1: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 150 seconds [ 239.009225][ T95] block nbd1: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 150 seconds [ 239.021111][ T95] block nbd1: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 150 seconds [ 239.064796][T14090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2240'. [ 239.077773][T14088] delete_channel: no stack [ 239.230519][T14098] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 239.712533][T14132] tipc: Enabled bearer , priority 0 [ 239.721552][T14132] syzkaller0: entered promiscuous mode [ 239.729850][T14132] syzkaller0: entered allmulticast mode [ 239.763061][T14132] tipc: Resetting bearer [ 239.784966][T14129] tipc: Resetting bearer [ 239.830543][T14129] tipc: Disabling bearer [ 240.053535][T14149] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 240.073698][T14149] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 240.153789][T14149] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 240.206578][T14158] tipc: Enabled bearer , priority 0 [ 240.222614][T14158] syzkaller0: entered promiscuous mode [ 240.228695][T14158] syzkaller0: entered allmulticast mode [ 240.274264][T14156] tipc: Resetting bearer [ 240.375988][T14156] tipc: Disabling bearer [ 240.480438][T14169] 8021q: VLANs not supported on ip6_vti0 [ 240.531157][T14178] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 240.841075][T14194] netlink: 'syz.4.2276': attribute type 2 has an invalid length. [ 241.044916][T14212] __nla_validate_parse: 11 callbacks suppressed [ 241.044935][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 241.075446][T14212] netlink: 'syz.1.2282': attribute type 5 has an invalid length. [ 241.089582][T14212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2282'. [ 241.111389][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 241.121084][T14216] netlink: 'syz.2.2283': attribute type 3 has an invalid length. [ 241.138491][T14216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2283'. [ 241.143675][T14212] geneve4: entered promiscuous mode [ 241.163061][T14212] geneve4: entered allmulticast mode [ 241.256026][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 241.311737][T14217] sctp: [Deprecated]: syz.1.2282 (pid 14217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.311737][T14217] Use struct sctp_sack_info instead [ 241.334827][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 241.346769][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 241.363358][T14224] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 241.400590][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 241.520747][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 241.534599][T14233] netlink: 'syz.0.2288': attribute type 6 has an invalid length. [ 241.640345][T14243] netlink: 'syz.2.2290': attribute type 29 has an invalid length. [ 241.650600][T14243] netlink: 'syz.2.2290': attribute type 29 has an invalid length. [ 241.713383][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 242.090551][T14264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'. [ 242.402151][T14281] net_ratelimit: 57 callbacks suppressed [ 242.402170][T14281] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.632286][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 242.731938][T14297] pimreg3: entered allmulticast mode [ 242.751512][T14301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2310'. [ 246.452739][ T5234] udevd[5234]: worker [5887] /devices/virtual/block/nbd1 is taking a long time [ 269.065974][ T95] block nbd1: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 180 seconds [ 269.076810][ T95] block nbd1: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 180 seconds [ 269.091875][ T95] block nbd1: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 180 seconds [ 269.102889][ T95] block nbd1: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 180 seconds [ 270.526625][ T5234] udevd[5234]: worker [5887] /devices/virtual/block/nbd1 timeout; kill it [ 270.538938][ T5234] udevd[5234]: seq 11669 '/devices/virtual/block/nbd1' killed [ 274.114808][T14352] __nla_validate_parse: 5 callbacks suppressed [ 274.114825][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2325'. [ 274.304319][T14374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2334'. [ 274.381371][T14367] tap0: tun_chr_ioctl cmd 1074025672 [ 274.389653][T14381] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2330'. [ 274.411962][T14367] tap0: ignored: set checksum disabled [ 274.461805][T14391] validate_nla: 3 callbacks suppressed [ 274.461822][T14391] netlink: 'syz.2.2330': attribute type 1 has an invalid length. [ 274.511997][T14391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2330'. [ 274.570745][T14394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 274.576043][T14381] gretap0: entered promiscuous mode [ 274.636256][T14397] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2330'. [ 274.656648][T14397] 0ªî{X¹¦: renamed from gretap0 [ 274.690441][T14397] 0ªî{X¹¦: left promiscuous mode [ 274.695506][T14397] 0ªî{X¹¦: entered allmulticast mode [ 274.745135][T14397] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 274.817248][T14403] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2339'. [ 274.846261][T14407] netlink: 'syz.4.2338': attribute type 10 has an invalid length. [ 274.884528][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 274.921425][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 275.024247][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2343'. [ 275.135517][T14427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.179834][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 275.537360][T14450] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 275.624395][T14455] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 276.142442][T14475] geneve3: entered promiscuous mode [ 276.172379][T14475] geneve3: entered allmulticast mode [ 276.216073][T14485] tipc: Enabled bearer , priority 0 [ 276.223206][T14474] syzkaller0: entered promiscuous mode [ 276.246602][T14474] syzkaller0: entered allmulticast mode [ 276.348055][T14474] tipc: Resetting bearer [ 276.355300][T14474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.363655][T14474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.462262][T14471] tipc: Resetting bearer [ 276.606510][T14471] tipc: Disabling bearer [ 276.689172][T14520] netlink: 'syz.4.2374': attribute type 10 has an invalid length. [ 276.702924][T14520] dummy0: entered promiscuous mode [ 276.717392][T14520] bridge0: port 2(dummy0) entered blocking state [ 276.739563][T14520] bridge0: port 2(dummy0) entered disabled state [ 276.749801][T14520] dummy0: entered allmulticast mode [ 276.759608][T14520] dummy0: left allmulticast mode [ 276.771690][T14520] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 277.564410][T14550] netlink: 'syz.0.2381': attribute type 8 has an invalid length. [ 277.606282][T14555] bridge_slave_0: left allmulticast mode [ 277.621120][T14555] bridge_slave_0: left promiscuous mode [ 277.627417][T14555] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.741773][T14552] pim6reg1: entered promiscuous mode [ 277.747582][T14552] pim6reg1: entered allmulticast mode [ 277.792620][T14552] bond0: (slave syz_tun): Releasing backup interface [ 277.900091][ T30] audit: type=1107 audit(1756743545.312:4): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 277.982853][T14581] netlink: 'syz.2.2391': attribute type 23 has an invalid length. [ 278.191244][T14588] tipc: Cannot configure node identity twice [ 278.411078][T14609] netlink: 'syz.2.2394': attribute type 58 has an invalid length. [ 278.604569][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.627950][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.656392][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.241967][T14664] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 279.257353][T14664] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.320652][T14670] sctp: [Deprecated]: syz.4.2421 (pid 14670) Use of int in maxseg socket option. [ 279.320652][T14670] Use struct sctp_assoc_value instead [ 279.494692][T14689] IPv6: Can't replace route, no match found [ 279.596962][T14693] netlink: 'syz.0.2425': attribute type 1 has an invalid length. [ 279.625490][T14694] tipc: Enabling of bearer rejected, failed to enable media [ 279.659683][T14693] __nla_validate_parse: 16 callbacks suppressed [ 279.659698][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 279.702587][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2425'. [ 279.734340][T14704] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 279.830062][T14712] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.031916][T14721] bond6: entered promiscuous mode [ 280.041893][T14721] bond6: entered allmulticast mode [ 280.050777][T14721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.171972][T14721] bond6 (unregistering): Released all slaves [ 280.273924][T14730] bond6: entered promiscuous mode [ 280.279461][T14730] bond6: entered allmulticast mode [ 280.285233][T14730] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.420380][T14730] bond6 (unregistering): Released all slaves [ 280.492670][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 280.691056][T14755] netlink: 'syz.0.2438': attribute type 1 has an invalid length. [ 280.711692][T14755] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2438'. [ 280.731928][T14755] netlink: 'syz.0.2438': attribute type 1 has an invalid length. [ 280.802792][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 280.874254][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'. [ 280.888371][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2441'. [ 281.583638][T14822] netlink: 'syz.3.2458': attribute type 2 has an invalid length. [ 281.594187][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2458'. [ 281.688542][T14826] tipc: Enabled bearer , priority 0 [ 281.718713][T14826] syzkaller0: entered promiscuous mode [ 281.724426][T14826] syzkaller0: entered allmulticast mode [ 281.760060][T14826] tipc: Resetting bearer [ 281.773769][T14825] tipc: Resetting bearer [ 281.797748][T14825] tipc: Disabling bearer [ 281.847803][T14834] syzkaller0: entered promiscuous mode [ 281.853504][T14834] syzkaller0: entered allmulticast mode [ 281.863254][T14834] tipc: Enabled bearer , priority 0 [ 281.881936][T14833] tipc: Resetting bearer [ 281.924355][T14833] tipc: Disabling bearer [ 281.962836][T14838] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 281.971211][T14838] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 282.060196][T14841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'. [ 282.296930][T14861] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 282.305027][T14861] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2473'. [ 282.366288][T14864] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 282.561416][T14875] netlink: 'syz.1.2475': attribute type 32 has an invalid length. [ 282.588529][T14875] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 282.969687][T14903] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004 [ 284.629444][T14934] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 284.806473][T14937] syzkaller0: entered promiscuous mode [ 284.823888][T14937] syzkaller0: entered allmulticast mode [ 285.004691][T14965] __nla_validate_parse: 3 callbacks suppressed [ 285.004707][T14965] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2503'. [ 285.043354][T14965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.071260][T14965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.269023][T14982] netlink: 'syz.0.2507': attribute type 15 has an invalid length. [ 285.291845][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2507'. [ 285.638319][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2514'. [ 285.698518][T15008] sctp: [Deprecated]: syz.2.2514 (pid 15008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.698518][T15008] Use struct sctp_sack_info instead [ 285.816240][T15010] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2515'. [ 285.996853][T15014] dvmrp0: entered allmulticast mode [ 286.015325][T15023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 286.035665][T15023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 286.074947][T15022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 286.112260][T15022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 286.123272][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'. [ 286.161196][T15024] dvmrp0: left allmulticast mode [ 286.230875][T15036] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 286.248446][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 286.350780][T15040] netlink: 'syz.1.2523': attribute type 10 has an invalid length. [ 286.742450][T15068] lo speed is unknown, defaulting to 1000 [ 286.843073][T15071] syzkaller1: entered promiscuous mode [ 286.859089][T15071] syzkaller1: entered allmulticast mode [ 287.713996][T15120] nbd: must specify at least one socket [ 288.266564][T15146] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 288.663129][T15178] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 288.749014][T15188] netlink: 'syz.3.2571': attribute type 21 has an invalid length. [ 288.824458][T15188] netlink: 'syz.3.2571': attribute type 4 has an invalid length. [ 288.854103][T15188] netlink: 'syz.3.2571': attribute type 5 has an invalid length. [ 288.935736][T15188] netlink: 'syz.3.2571': attribute type 21 has an invalid length. [ 288.957295][T15188] netlink: 'syz.3.2571': attribute type 4 has an invalid length. [ 288.988448][T15188] netlink: 'syz.3.2571': attribute type 5 has an invalid length. [ 289.165527][T15212] sctp: [Deprecated]: syz.0.2581 (pid 15212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.165527][T15212] Use struct sctp_sack_info instead [ 289.358380][T15222] netem: change failed [ 291.034390][T15237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.042103][T15237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.341206][T15275] __nla_validate_parse: 22 callbacks suppressed [ 291.341225][T15275] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2600'. [ 291.410040][T15278] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.417800][T15278] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.445446][T15274] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2600'. [ 291.580445][ T30] audit: type=1804 audit(1756743558.992:5): pid=15302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2608" name="/newroot/506/cgroup.controllers" dev="tmpfs" ino=2592 res=1 errno=0 [ 291.603344][ T30] audit: type=1800 audit(1756743558.992:6): pid=15302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2608" name="cgroup.controllers" dev="tmpfs" ino=2592 res=0 errno=0 [ 292.408169][T15322] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2614'. [ 292.449336][T15322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2614'. [ 292.624618][T15343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2621'. [ 292.638675][T15344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2621'. [ 292.754493][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 292.798547][T15351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2622'. [ 292.853266][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2624'. [ 292.867629][T15359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2624'. [ 293.024133][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 293.080423][T15367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.729744][T15431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.823251][T15376] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 295.430871][ T9883] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.455745][ T9883] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.483490][ T9883] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.509875][ T9883] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.616277][T15520] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 295.685818][T15515] bridge_slave_1 (unregistering): left allmulticast mode [ 295.735745][T15534] sctp: [Deprecated]: syz.2.2672 (pid 15534) Use of int in maxseg socket option. [ 295.735745][T15534] Use struct sctp_assoc_value instead [ 295.743333][T15515] bridge_slave_1 (unregistering): left promiscuous mode [ 295.770673][T15515] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.005113][T15550] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 296.025488][ T9883] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.034722][ T9883] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.369776][T15568] syzkaller1: entered promiscuous mode [ 296.384055][T15568] syzkaller1: entered allmulticast mode [ 296.395226][T15570] veth0: entered promiscuous mode [ 296.403540][T15570] veth0: left promiscuous mode [ 296.487530][T15579] __nla_validate_parse: 7 callbacks suppressed [ 296.487547][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'. [ 296.784944][T15605] netlink: 'syz.4.2693': attribute type 12 has an invalid length. [ 296.796850][T15605] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 297.164228][T15634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2701'. [ 297.412494][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 297.539319][T15667] netlink: 'syz.2.2709': attribute type 10 has an invalid length. [ 297.576633][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 297.588838][T15673] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2710'. [ 297.627124][T15675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2709'. [ 297.787093][T15688] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 297.826559][T15688] bond2: entered promiscuous mode [ 297.832128][T15688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.089772][T15709] netlink: 'syz.1.2721': attribute type 10 has an invalid length. [ 298.137081][T15711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2722'. [ 298.294702][T15721] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2725'. [ 298.525490][T15730] netlink: 'syz.2.2729': attribute type 2 has an invalid length. [ 298.570090][T15738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2732'. [ 298.587236][T15730] netlink: 'syz.2.2729': attribute type 2 has an invalid length. [ 298.607188][T15730] netlink: 'syz.2.2729': attribute type 2 has an invalid length. [ 298.660050][T15730] netlink: 'syz.2.2729': attribute type 2 has an invalid length. [ 298.684065][T15730] netlink: 'syz.2.2729': attribute type 2 has an invalid length. [ 298.764885][T15749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2735'. [ 298.864992][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.904022][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.935830][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.115408][T15776] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 299.166528][ T95] block nbd1: Possible stuck request ffff888025325080: control (read@0,1024B). Runtime 210 seconds [ 299.177496][ T95] block nbd1: Possible stuck request ffff888025325240: control (read@1024,1024B). Runtime 210 seconds [ 299.189284][ T95] block nbd1: Possible stuck request ffff888025325400: control (read@2048,1024B). Runtime 210 seconds [ 299.201014][ T95] block nbd1: Possible stuck request ffff8880253255c0: control (read@3072,1024B). Runtime 210 seconds [ 299.541201][T15804] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 [ 300.769694][T15886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.802026][T15886] bond0: (slave rose0): Enslaving as an active interface with an up link [ 301.063993][T15895] validate_nla: 32 callbacks suppressed [ 301.064011][T15895] netlink: 'syz.4.2777': attribute type 33 has an invalid length. [ 301.092241][T15895] batman_adv: batadv0: Interface deactivated: team0 [ 301.114545][T15895] team_slave_0: left promiscuous mode [ 301.131869][T15895] team_slave_1: left promiscuous mode [ 301.863700][T15943] netlink: 'syz.0.2791': attribute type 4 has an invalid length. [ 301.887027][T15943] __nla_validate_parse: 20 callbacks suppressed [ 301.887044][T15943] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2791'. [ 301.915433][T15943] `: renamed from bond0 [ 302.006523][T15945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2792'. [ 302.212537][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 302.229013][T15956] netlink: 'syz.3.2795': attribute type 83 has an invalid length. [ 302.230625][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 302.247639][T15954] netlink: 'syz.2.2796': attribute type 11 has an invalid length. [ 302.566305][T15976] netlink: 'syz.1.2799': attribute type 14 has an invalid length. [ 302.623072][T15975] lo speed is unknown, defaulting to 1000 [ 302.897724][T15985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2803'. [ 302.993578][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 303.011720][T15997] netlink: 'syz.1.2807': attribute type 2 has an invalid length. [ 303.048337][T16000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2808'. [ 303.059221][T15995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.079249][T15995] vlan2: entered allmulticast mode [ 303.084387][T15995] bond0: entered allmulticast mode [ 303.092291][T16000] netlink: 'syz.4.2808': attribute type 7 has an invalid length. [ 303.100710][T16000] netlink: 'syz.4.2808': attribute type 8 has an invalid length. [ 303.110030][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 303.396954][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2814'. [ 303.571582][T16030] openvswitch: netlink: Flow actions attr not present in new flow. [ 303.585061][T16023] syzkaller0: entered promiscuous mode [ 303.590899][T16023] syzkaller0: entered allmulticast mode [ 303.604363][T16028] batadv1: entered allmulticast mode [ 303.613817][T16025] tipc: Enabled bearer , priority 0 [ 303.628953][T16026] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2816'. [ 303.649331][T16023] tipc: Resetting bearer [ 303.679178][T16022] tipc: Resetting bearer [ 304.667400][ T5973] tipc: Node number set to 1843894810 [ 305.135929][T16022] tipc: Disabling bearer [ 305.378184][T16054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.490087][T16070] bond0: entered allmulticast mode [ 305.517391][T16070] bond_slave_0: entered allmulticast mode [ 305.533393][T16070] bond_slave_1: entered allmulticast mode [ 305.548452][T16070] bridge_slave_1: entered allmulticast mode [ 305.739345][T16079] veth21: entered allmulticast mode [ 306.426004][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.906877][T16111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.070102][T16125] __nla_validate_parse: 6 callbacks suppressed [ 307.070121][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'. [ 307.121646][T16131] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 307.226134][T16141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2850'. [ 307.232607][T16142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2851'. [ 307.363365][T16150] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 307.384402][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2854'. [ 307.410089][T16153] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.431861][T16150] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 307.578672][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'. [ 307.597786][T16167] veth13: entered allmulticast mode [ 307.614282][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2858'. [ 307.638610][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'. [ 307.655921][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2858'. [ 307.673060][T16174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2859'. [ 307.697604][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2861'. [ 307.833374][T16180] netlink: 'syz.0.2864': attribute type 1 has an invalid length. [ 307.870648][T16180] netlink: 'syz.0.2864': attribute type 1 has an invalid length. [ 308.081431][T16199] netlink: 'syz.0.2870': attribute type 9 has an invalid length. [ 308.091205][T16199] netlink: 'syz.0.2870': attribute type 9 has an invalid length. [ 308.104799][T16201] netlink: 'syz.1.2871': attribute type 32 has an invalid length. [ 308.119223][T16201] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 308.205264][T16205] C: renamed from lo [ 308.560003][T16229] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 308.577357][T16176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.583433][T16229] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 308.598660][T16176] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 309.283394][T16250] tipc: Enabled bearer , priority 0 [ 309.293517][T16250] syzkaller0: entered promiscuous mode [ 309.327406][T16250] syzkaller0: entered allmulticast mode [ 309.349962][T16250] tipc: Resetting bearer [ 309.365758][T16249] tipc: Resetting bearer [ 309.399123][T16249] tipc: Disabling bearer [ 309.429105][T16258] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 309.491480][T16263] netlink: 'syz.0.2886': attribute type 30 has an invalid length. [ 309.735766][T16268] netlink: 'syz.1.2889': attribute type 4 has an invalid length. [ 309.963029][T16282] netlink: 'syz.3.2894': attribute type 21 has an invalid length. [ 310.187082][T16288] syzkaller1: entered promiscuous mode [ 310.192602][T16288] syzkaller1: entered allmulticast mode [ 310.379630][T12208] ------------[ cut here ]------------ [ 310.385697][T12208] refcount_t: underflow; use-after-free. [ 310.391894][T12208] WARNING: CPU: 0 PID: 12208 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 310.401394][T12208] Modules linked in: [ 310.405511][T12208] CPU: 0 UID: 0 PID: 12208 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 310.415164][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.425407][T12208] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 310.431733][T12208] Code: 00 b3 e2 8b e8 f7 38 bb fc 90 0f 0b 90 90 eb d7 e8 4b 9a f7 fc c6 05 77 6f c5 0a 01 90 48 c7 c7 60 b3 e2 8b e8 d7 38 bb fc 90 <0f> 0b 90 90 eb b7 e8 2b 9a f7 fc c6 05 54 6f c5 0a 01 90 48 c7 c7 [ 310.451703][T12208] RSP: 0018:ffffc9001c76f700 EFLAGS: 00010246 [ 310.457816][T12208] RAX: 4f354b4ad069b400 RBX: 0000000000000003 RCX: ffff8880575b3c00 [ 310.465798][T12208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 310.473746][T12208] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 310.481716][T12208] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 310.489679][T12208] R13: ffff8880303c4060 R14: ffff8880303c4078 R15: ffffffff86002070 [ 310.497805][T12208] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 310.506734][T12208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.513297][T12208] CR2: 00007f31e84f56c0 CR3: 0000000077b24000 CR4: 00000000003526f0 [ 310.521288][T12208] Call Trace: [ 310.524547][T12208] [ 310.527472][T12208] klist_dec_and_del+0x3c7/0x3d0 [ 310.532399][T12208] ? __pfx_klist_children_put+0x10/0x10 [ 310.537942][T12208] klist_del+0xa6/0x110 [ 310.542106][T12208] device_del+0x280/0x8e0 [ 310.546523][T12208] ? _raw_spin_unlock_irq+0x2e/0x50 [ 310.551701][T12208] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 310.557782][T12208] ? __pfx_device_del+0x10/0x10 [ 310.562606][T12208] ? netdev_unregister_kobject+0x344/0x450 [ 310.568410][T12208] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 310.574812][T12208] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 310.581569][T12208] ? rtnl_net_dev_lock+0x257/0x2f0 [ 310.586702][T12208] unregister_netdevice_queue+0x33c/0x380 [ 310.592430][T12208] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 310.598774][T12208] ? rtnl_net_dev_lock+0x36/0x2f0 [ 310.603800][T12208] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 310.608913][T12208] unregister_netdev+0x1f/0x60 [ 310.613702][T12208] bnep_session+0x294d/0x2b40 [ 310.618414][T12208] ? rcu_is_watching+0x15/0xb0 [ 310.623197][T12208] ? trace_sched_exit_tp+0x36/0x110 [ 310.628449][T12208] ? __lock_acquire+0xab9/0xd20 [ 310.633304][T12208] ? __pfx_bnep_session+0x10/0x10 [ 310.638371][T12208] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 310.644262][T12208] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 310.650658][T12208] ? __pfx_woken_wake_function+0x10/0x10 [ 310.656293][T12208] ? __kthread_parkme+0x7b/0x200 [ 310.661223][T12208] ? __kthread_parkme+0x1a1/0x200 [ 310.666295][T12208] kthread+0x70e/0x8a0 [ 310.670350][T12208] ? __pfx_bnep_session+0x10/0x10 [ 310.675350][T12208] ? __pfx_kthread+0x10/0x10 [ 310.679939][T12208] ? _raw_spin_unlock_irq+0x23/0x50 [ 310.685124][T12208] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.690326][T12208] ? __pfx_kthread+0x10/0x10 [ 310.694897][T12208] ret_from_fork+0x3f9/0x770 [ 310.699584][T12208] ? __pfx_ret_from_fork+0x10/0x10 [ 310.704677][T12208] ? __switch_to_asm+0x39/0x70 [ 310.709441][T12208] ? __switch_to_asm+0x33/0x70 [ 310.714183][T12208] ? __pfx_kthread+0x10/0x10 [ 310.718788][T12208] ret_from_fork_asm+0x1a/0x30 [ 310.723540][T12208] [ 310.726556][T12208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.733837][T12208] CPU: 0 UID: 0 PID: 12208 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 310.743376][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.753417][T12208] Call Trace: [ 310.756685][T12208] [ 310.759623][T12208] dump_stack_lvl+0x99/0x250 [ 310.764228][T12208] ? __asan_memcpy+0x40/0x70 [ 310.768809][T12208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.773985][T12208] ? __pfx__printk+0x10/0x10 [ 310.778565][T12208] vpanic+0x281/0x750 [ 310.782525][T12208] ? __pfx__printk+0x10/0x10 [ 310.787109][T12208] ? __pfx_vpanic+0x10/0x10 [ 310.791605][T12208] ? is_bpf_text_address+0x26/0x2b0 [ 310.796790][T12208] panic+0xb9/0xc0 [ 310.800487][T12208] ? __pfx_panic+0x10/0x10 [ 310.804907][T12208] __warn+0x31b/0x4b0 [ 310.808868][T12208] ? refcount_warn_saturate+0x11a/0x1d0 [ 310.814390][T12208] ? refcount_warn_saturate+0x11a/0x1d0 [ 310.819912][T12208] report_bug+0x2be/0x4f0 [ 310.824269][T12208] ? refcount_warn_saturate+0x11a/0x1d0 [ 310.829806][T12208] ? refcount_warn_saturate+0x11a/0x1d0 [ 310.835344][T12208] ? refcount_warn_saturate+0x11c/0x1d0 [ 310.840875][T12208] handle_bug+0x84/0x160 [ 310.845097][T12208] exc_invalid_op+0x1a/0x50 [ 310.849578][T12208] asm_exc_invalid_op+0x1a/0x20 [ 310.854435][T12208] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 310.860569][T12208] Code: 00 b3 e2 8b e8 f7 38 bb fc 90 0f 0b 90 90 eb d7 e8 4b 9a f7 fc c6 05 77 6f c5 0a 01 90 48 c7 c7 60 b3 e2 8b e8 d7 38 bb fc 90 <0f> 0b 90 90 eb b7 e8 2b 9a f7 fc c6 05 54 6f c5 0a 01 90 48 c7 c7 [ 310.880161][T12208] RSP: 0018:ffffc9001c76f700 EFLAGS: 00010246 [ 310.886215][T12208] RAX: 4f354b4ad069b400 RBX: 0000000000000003 RCX: ffff8880575b3c00 [ 310.894698][T12208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 310.902654][T12208] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 310.910691][T12208] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 310.918671][T12208] R13: ffff8880303c4060 R14: ffff8880303c4078 R15: ffffffff86002070 [ 310.926632][T12208] ? __pfx_klist_children_put+0x10/0x10 [ 310.932174][T12208] klist_dec_and_del+0x3c7/0x3d0 [ 310.937098][T12208] ? __pfx_klist_children_put+0x10/0x10 [ 310.942660][T12208] klist_del+0xa6/0x110 [ 310.946812][T12208] device_del+0x280/0x8e0 [ 310.951125][T12208] ? _raw_spin_unlock_irq+0x2e/0x50 [ 310.956325][T12208] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 310.962377][T12208] ? __pfx_device_del+0x10/0x10 [ 310.967209][T12208] ? netdev_unregister_kobject+0x344/0x450 [ 310.973028][T12208] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 310.979461][T12208] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 310.986206][T12208] ? rtnl_net_dev_lock+0x257/0x2f0 [ 310.991309][T12208] unregister_netdevice_queue+0x33c/0x380 [ 310.997006][T12208] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 311.003239][T12208] ? rtnl_net_dev_lock+0x36/0x2f0 [ 311.008240][T12208] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 311.013348][T12208] unregister_netdev+0x1f/0x60 [ 311.018106][T12208] bnep_session+0x294d/0x2b40 [ 311.022759][T12208] ? rcu_is_watching+0x15/0xb0 [ 311.027499][T12208] ? trace_sched_exit_tp+0x36/0x110 [ 311.032677][T12208] ? __lock_acquire+0xab9/0xd20 [ 311.037522][T12208] ? __pfx_bnep_session+0x10/0x10 [ 311.042518][T12208] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 311.048386][T12208] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.054692][T12208] ? __pfx_woken_wake_function+0x10/0x10 [ 311.060300][T12208] ? __kthread_parkme+0x7b/0x200 [ 311.065218][T12208] ? __kthread_parkme+0x1a1/0x200 [ 311.070236][T12208] kthread+0x70e/0x8a0 [ 311.074283][T12208] ? __pfx_bnep_session+0x10/0x10 [ 311.079280][T12208] ? __pfx_kthread+0x10/0x10 [ 311.083843][T12208] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.089017][T12208] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.094188][T12208] ? __pfx_kthread+0x10/0x10 [ 311.098760][T12208] ret_from_fork+0x3f9/0x770 [ 311.103327][T12208] ? __pfx_ret_from_fork+0x10/0x10 [ 311.108412][T12208] ? __switch_to_asm+0x39/0x70 [ 311.113150][T12208] ? __switch_to_asm+0x33/0x70 [ 311.117886][T12208] ? __pfx_kthread+0x10/0x10 [ 311.122456][T12208] ret_from_fork_asm+0x1a/0x30 [ 311.127211][T12208] [ 312.204475][T12208] Shutting down cpus with NMI [ 312.209501][T12208] Kernel Offset: disabled [ 312.213810][T12208] Rebooting in 86400 seconds..