last executing test programs: 2.501508873s ago: executing program 4 (id=5221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000003c0)={0x1008}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 2.005883754s ago: executing program 0 (id=5228): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xd, 0x3, "7acc6338a90000b03b"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010004b040000000002ebff007a000000", @ANYRES32=0x0, @ANYBLOB="00000100000000005000128008000100677265"], 0x70}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x49, @loopback, 0x7}}}, 0x88) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0xc) 1.748781334s ago: executing program 0 (id=5231): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r1, 0x2, 0x8, "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"}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x2, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x40) r5 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118300000000008510008002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r6 = accept4$rose(0xffffffffffffffff, &(0x7f00000011c0)=@full={0xb, @dev, @netrom, 0x0, [@null, @default, @null, @remote, @rose, @rose]}, &(0x7f0000001200)=0x40, 0x800) ioctl$SIOCRSSCAUSE(r6, 0x89e1, &(0x7f0000001240)=0x6) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060103000000000000000000000000140007800800124000000000050015001200000005000d0006000000050005000a000000050004000400000009ffffffffff04b6a37de0c49498dd16f52d00a9ffffff00c6e3016cd3be3d1c3db29bf750000011000300686173"], 0x60}}, 0x800) 1.60285892s ago: executing program 0 (id=5232): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x2278, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x1100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7b, 0x5, "12276f0779675024dda6f55d122a5284689da6c44b373ae91686c3ce68a7a0921cd3f2e22c369d4d91148e6fa08f16d704772c22ac669e779df7a19fe0cc60591dbeec7c674edc9a5655cdcda6790a11000c7870e21add94d3e32c613708d36663229b6c987d75469790234b7865fb8f60724b756abb13"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',))%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "e60e0c35ce86077b4b27a18f744760de55c32f4dda08e14686960d5213bddf0f147049c5511fce6157653f91b34b7211eb1c90f7bbe4a2ff8ccbc592eaad34cb188bacab60d14f5ef042bb0168a4c8469b3c94"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_LINKMODES_OURS={0x1128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "411f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffc0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69e2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@\']+\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!\xc1-}.{!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "ec582d851b"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x2278}, 0x1, 0x0, 0x0, 0x24000881}, 0x4010) 1.479665145s ago: executing program 4 (id=5234): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) (rerun: 64) 1.467426745s ago: executing program 0 (id=5235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x44, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, '^'}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44050) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) 1.397038314s ago: executing program 2 (id=5236): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.219048597s ago: executing program 2 (id=5238): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000180), 0x8, 0x2e, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtclass={0x5c, 0x28, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xf, 0x9}, {0xfff3, 0xfff3}, {0x0, 0x4}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xc}}, @TCA_RATE={0x6, 0x5, {0xf4, 0x2}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_taprio={0xb}]}, 0x5c}}, 0x0) 1.12898004s ago: executing program 0 (id=5239): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000004fc0)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003840010800bd7000fadbdb2506000000"], 0x14}}, 0x4000001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005180), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000005200)={'tunl0\x00', &(0x7f0000005380)={'gretap0\x00', 0x0, 0xb099a29ebb4bb3a7, 0x8, 0xd, 0x4, {{0x6, 0x4, 0x0, 0xb, 0x18, 0x64, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end, @lsrr={0x83, 0x3, 0x54}]}}}}}) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000005340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005300)={&(0x7f0000005240)={0x94, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x42}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000954}, 0x800) recvmmsg(r1, &(0x7f0000004d80)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005100)=[{&(0x7f0000000180)=""/223, 0xdf}, {&(0x7f0000000080)=""/152, 0x98}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000005000)=""/206, 0xce}], 0x5, &(0x7f0000000380)=""/170, 0xaa}, 0x10}, {{&(0x7f0000000440)=@vsock, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/7, 0x7}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000700)=""/51, 0x33}, {&(0x7f0000000740)=""/209, 0xd1}, {&(0x7f0000000840)=""/48, 0x30}], 0x7, &(0x7f0000000900)=""/154, 0x9a}, 0x1}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/149, 0x95}], 0x1}, 0x98}, {{&(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/165, 0xa5}, {&(0x7f0000000c00)=""/70, 0x46}, {&(0x7f0000000c80)=""/124, 0x7c}], 0x3, &(0x7f0000000d40)=""/148, 0x94}, 0xbd6c}, {{&(0x7f0000000e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004180)=[{&(0x7f0000000e80)=""/9, 0x9}, {&(0x7f0000000ec0)=""/83, 0x53}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/168, 0xa8}, {&(0x7f00000030c0)=""/135, 0x87}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x6, &(0x7f0000004200)=""/84, 0x54}, 0x80000001}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000004280)=""/95, 0x5f}, {&(0x7f0000004300)=""/87, 0x57}, {&(0x7f0000004380)=""/136, 0x88}, {&(0x7f0000004440)=""/103, 0x67}], 0x4, &(0x7f00000044c0)=""/231, 0xe7}, 0x10}, {{&(0x7f00000045c0)=@can, 0x80, &(0x7f0000004800)=[{&(0x7f0000004640)=""/108, 0x6c}, {&(0x7f00000046c0)=""/120, 0x78}, {&(0x7f0000004740)=""/163, 0xa3}], 0x3, &(0x7f0000004840)=""/138, 0x8a}, 0x200}, {{&(0x7f0000004900)=@alg, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004980)=""/29, 0x1d}, {&(0x7f00000049c0)=""/193, 0xc1}, {&(0x7f0000004ac0)=""/51, 0x33}, {&(0x7f0000004b00)=""/226, 0xe2}, {&(0x7f0000004c00)=""/74, 0x4a}], 0x5, &(0x7f0000004d00)=""/97, 0x61}, 0x2}], 0x8, 0x2, &(0x7f0000004f80)={0x0, 0x989680}) 1.003473546s ago: executing program 3 (id=5241): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="300200001e0005050000000000000000200214802c005e800f000b002d3a2c3a24232d5b0b210000040014801400490000000000000000000000ffff7f0000010800b700", @ANYRES32=r0, @ANYRESDEC=r4, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="c840b6915614aa6343211f2d565bd714f1a5cd2c17ada0b3098105a1668f0cea0b1708ae48b9b464aede0075b5c720d8a9633cb54ba060f4b59686a2cf"], 0x230}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.002875357s ago: executing program 2 (id=5242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) 898.58525ms ago: executing program 2 (id=5243): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x29, @private=0xa010102, 0x4e24, 0x2, 'wlc\x00', 0xa, 0x563995c3, 0x21}, 0x2c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 859.831058ms ago: executing program 3 (id=5244): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) listen(r0, 0x3) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) (async) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x4000000) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x100}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x2000094) (async) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) ppoll(&(0x7f0000000180)=[{r10}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='objagg_obj_parent_unassign\x00', r3, 0x0, 0xb9a}, 0x18) (async) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000340)=""/3, &(0x7f0000000380)=0x3) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 660.435849ms ago: executing program 3 (id=5245): ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r0 = socket(0x26, 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x20000040) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000300)={{r1}, {@void, @max}}) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000100)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f00000002c0)=0xc68) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f00000007c0), 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 602.855745ms ago: executing program 2 (id=5246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3, 0x6, 0x8, 0x81, 0x8, 0x2, 0x6, {0x0, @in6={{0xa, 0x4e21, 0x2, @private0, 0xd}}, 0xff, 0x9, 0x2, 0x2, 0x6}}, &(0x7f0000000040)=0xb0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) 552.113317ms ago: executing program 3 (id=5247): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @dev}, &(0x7f0000000100)=0xc) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000225bd7000fddbdf250300000008000800030000f4f9c5304481916dac4e128400", @ANYRES32=r3, @ANYBLOB="0800020001000000"], 0x34}}, 0x4c845) 507.517426ms ago: executing program 1 (id=5248): r0 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400ea0034000701fdc4df0500000000"], 0x14}}, 0x8004) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="10040000003f00002c0012800b00010067726574617000001c00028008000100", @ANYRES32=r0, @ANYBLOB="06000e00030000000800070064"], 0x54}}, 0x0) 506.881627ms ago: executing program 4 (id=5249): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[], 0x64}}, 0x0) 455.792733ms ago: executing program 1 (id=5250): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x19) r1 = socket(0x2, 0x2, 0xff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x2a, "bbea32f2fbca5bbbf220b1cd53255644bbb030fc4db206cc72ae124336a25d6b317f93374a9077fde27d"}, &(0x7f00000000c0)=0x8c) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) 420.249465ms ago: executing program 2 (id=5251): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000380), 0x4) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x46}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x41150}}, 0x20}}, 0x0) 419.679333ms ago: executing program 3 (id=5252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYBLOB="210acfa0075ccad127ae2e299f9bf2fd5e983cfbd56c7472a61dfb11b4bce4d4ae3af28c5d716b70ab9cc34a8580852da7a894798e773e4ea4e66dafef81c170fc3753e50fd4438439425ce889c28b854ef91127bda9aa421105d01a3e9fdc38124fff71368a962861b7d68e74d4efa8181b9b1199c0e9956fbfabf68c9226df85c54fa41b0b331c3ad2ff8a29120cf69cc0ed001fb2bb7f5ac79dba1cb332b30e49ba06c9bd81ef099e200382e7e14cd6a3c2da96e5035704d9d24459c682cff39233bc4476431f37613e882b4b9cffb767482b7151f2d96825afe5813cac41e8dce2ae470c", @ANYBLOB="077413b4e72c272d48dd9b41a73078129b2f64e44ba344464a793b8d4800004bdf602535d1536d6695f7b5abef49d7", @ANYRES64=0x0], 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x300, 0x0, 0x0, {0xe, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x20008080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) 419.06857ms ago: executing program 4 (id=5253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000485000000a600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000170c000180080001006e617400090001008d3cf9e308c0bb0e0900020073797a3200000000140000001100010000000000000000000000000aefbca662df90d75af8cc67c5ef3a4d50c5c7442322500360c783c782948f33bb8e1a10b1a05b4067ee3f40f05dfc72268fb66479eaa006cec45b228ae693ca1eb5c9817adde957a30b4474564a8f3c15774fcc576545b8c31e7ba0992f46883c67dcacf388ec2ad9af022b873a870faa475b8eb903aba1416363fd7b0ed9ee1e934c8677be30ebcf62cf84ade0c495db52d3ffcf81367397804fd96cceccc268e7864cee1160243e7625c43fce4cb6379070eaeac8c5e8db8ae8987035debe54a463c4e5310bb6213b19e9e4726ea04e10d8117c71e0dc3ad8fd66e1a96a02051bc0b929217d338c078e544c27eb0000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 243.541662ms ago: executing program 4 (id=5254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000400) r2 = bpf$PROG_LOAD(0x25, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) recvfrom$inet6(r3, 0x0, 0x0, 0x40000040, 0x0, 0x0) unshare(0x28000000) getsockopt$sock_timeval(r1, 0x1, 0x4c, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 243.112403ms ago: executing program 1 (id=5255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977", @ANYBLOB="16604fe7ca91c8fd5329f9849de6b306516f0010379d335cc7d0d36bd57a8c177b5b29947c0eb7a601cfe4959654a5e6fa4669b5108828737902a4a7aefb7ec44511357379ef493e1adde1d5ec6f8eec5381793cd42a38ab3838bf399e1b1d60301200"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000aaaaaaaaaa26bbbbbbbbbbbb88a80000810000000800452f9ada17e4553d05145142b700002400006000002f9078ac1e0001ac1414aa000086dd"], 0x3e) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 242.799873ms ago: executing program 3 (id=5256): r0 = socket(0x15, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000c000000000000000000000043a5d0791f2f7148e988662bc3e217bd0ef0468509431d14770cae9299f9461e32f04eabd993d7a02c97fe3576263f82304c1d6bb6a21b4e59fd1d6b2171cf6f2e12d88cd1cf13c0a3e159b5d5af57d18f9db386744394afa365f2f37b6d5b112b1638d7ba517b7e", @ANYRES32=r3, @ANYBLOB="1400040070696d3672656730000000000000000008000500060000000800178004000200"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000c000000000000000000000043a5d0791f2f7148e988662bc3e217bd0ef0468509431d14770cae9299f9461e32f04eabd993d7a02c97fe3576263f82304c1d6bb6a21b4e59fd1d6b2171cf6f2e12d88cd1cf13c0a3e159b5d5af57d18f9db386744394afa365f2f37b6d5b112b1638d7ba517b7e", @ANYRES32=r3, @ANYBLOB="1400040070696d3672656730000000000000000008000500060000000800178004000200"], 0x40}}, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) (async) write(r4, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0x134, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x120, 0x1, [@m_simple={0x11c, 0x11, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x0, 0x7, 0x70}}, @TCA_DEF_DATA={0xa, 0x3, 'pedit\x00'}]}, {0xc9, 0x6, "c381242aadd8244fd4f2b96ff3b39e8e8c421641ce8f8e2634994b94cbc502e433caea076302318af426372e3d6e9df53746ea43d796a962e5cd043c544768b65f25c1c3df37f4206e936c882b2924e9ac22dd5d11e7af0b3eec8fd6391a0689125ca9741523ef0ca58e5396b699d587c192cb0b28fd8c7723bb195fb4324ba533d8b615c607a372448252fff615755d37be62ae8ac4911c9cfba1535c6b4263409880e1e1372319f6c85ce809d59842ffd442a66fb475d347f3694c5e590d853356174727"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x134}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 221.048318ms ago: executing program 0 (id=5257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) (async) sendmmsg(r1, &(0x7f0000009040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ac0)="e2", 0x1}], 0x1}}], 0x2, 0x20004004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0) 182.075712ms ago: executing program 1 (id=5258): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001840)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000001900)=""/155, 0x9b}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/200, 0xc8}], 0x6, &(0x7f00000001c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}], 0x3fffcd1, 0x7, &(0x7f00000018c0)) recvmsg$unix(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000019c0)=""/227, 0xe3}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000002ac0)=""/58, 0x3a}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x7}, 0x10002) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) 87.398979ms ago: executing program 4 (id=5259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)={0x10}) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000a20000000000a0f000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030000000000080001400000001508000240000000050900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef916b57193d97a5a6e30703f99b14892d", 0x21) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045"], 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x18) (async) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) 86.464462ms ago: executing program 1 (id=5260): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x19, "a94cd3b554f8f99328a4e05f5dde7359f54e7d934b52e3760c"}, &(0x7f0000000080)=0x21) 0s ago: executing program 1 (id=5261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) r2 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r7, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r5, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4040000) kernel console output (not intermixed with test programs): 467.431216][T17523] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.475126][T17523] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 467.635584][T17536] netlink: 'syz.0.3377': attribute type 2 has an invalid length. [ 467.669383][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 467.798586][T17232] veth0_vlan: entered promiscuous mode [ 467.837921][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'. [ 467.851724][T17232] veth1_vlan: entered promiscuous mode [ 467.861223][T17544] netlink: 'syz.0.3380': attribute type 7 has an invalid length. [ 467.891403][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'. [ 467.894546][T17542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3379'. [ 467.910511][T17232] veth0_macvtap: entered promiscuous mode [ 467.953234][T17544] : entered promiscuous mode [ 467.977191][T17232] veth1_macvtap: entered promiscuous mode [ 468.055051][T17232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.097384][T17232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.158585][T11141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.180240][T11141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.205583][T11141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.265703][T11141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.281704][ T5875] Bluetooth: hci3: command tx timeout [ 468.518102][T11135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.549863][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'. [ 468.553831][T11135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.712993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.738596][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.893616][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3288'. [ 469.024553][T17587] macvtap1: entered promiscuous mode [ 469.042292][T17587] vlan0: entered promiscuous mode [ 469.047707][T17587] macvtap1: entered allmulticast mode [ 469.055670][T17587] vlan0: entered allmulticast mode [ 469.062259][T17587] veth0_vlan: entered allmulticast mode [ 469.068088][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3397'. [ 469.968668][T17617] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 470.035307][T17617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.193637][T17617] vlan2: entered allmulticast mode [ 470.198990][T17617] veth1: entered allmulticast mode [ 470.271648][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.279489][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.321175][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.331282][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.339108][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.352720][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.376115][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.388288][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 470.401706][T17643] sock: sock_timestamping_bind_phc: sock not bind to device [ 470.421317][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 470.449837][T17630] netlink: 'syz.0.3406': attribute type 3 has an invalid length. [ 471.500449][T17681] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 471.543732][T17681] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 471.990859][T17716] tipc: Enabling of bearer rejected, failed to enable media [ 472.082106][T17718] vlan2: entered allmulticast mode [ 472.098069][T17718] bridge3: entered allmulticast mode [ 472.292116][T17730] __nla_validate_parse: 14 callbacks suppressed [ 472.292135][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3435'. [ 472.566641][T17730] hsr_slave_1 (unregistering): left promiscuous mode [ 473.175351][T17777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3447'. [ 473.229818][T17781] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 473.356051][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 473.437772][T17793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3454'. [ 473.460373][T17796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3456'. [ 473.476402][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 473.505874][T17796] veth3: entered allmulticast mode [ 473.584058][T17797] tipc: New replicast peer: 255.255.255.255 [ 473.627272][T17797] tipc: Enabled bearer , priority 10 [ 473.779766][T17817] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3460'. [ 473.925683][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3463'. [ 473.935094][T17826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3463'. [ 473.944260][T17824] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 473.954431][T17826] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 474.160193][T17835] syzkaller1: entered promiscuous mode [ 474.166016][T17835] syzkaller1: entered allmulticast mode [ 474.314672][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3467'. [ 474.355387][T17839] gretap1: entered promiscuous mode [ 474.360752][T17839] gretap1: entered allmulticast mode [ 474.400131][T17844] veth0: mtu less than device minimum [ 474.583096][T17862] Bluetooth: MGMT ver 1.23 [ 474.613373][T17864] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 474.731378][ T5940] tipc: Node number set to 1115688820 [ 476.786081][T17912] nbd: device at index 4 is going down [ 477.005109][T17930] validate_nla: 46 callbacks suppressed [ 477.005129][T17930] netlink: 'syz.3.3496': attribute type 1 has an invalid length. [ 477.057177][T17930] bond2: (slave gretap1): making interface the new active one [ 477.066444][T17930] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 477.080159][T17930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.289943][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.316888][T17937] __nla_validate_parse: 12 callbacks suppressed [ 477.316907][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.350578][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.373108][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.382943][T17946] tipc: Started in network mode [ 477.385465][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.387839][T17946] tipc: Node identity 8a8fdce6c061, cluster identity 4711 [ 477.399893][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.403179][T17946] tipc: Enabled bearer , priority 0 [ 477.430918][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.439356][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.479548][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.500403][T17946] tipc: Disabling bearer [ 477.507585][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.539126][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.561688][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.576421][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.594486][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.678790][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.697577][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 477.710191][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 477.719962][T17937] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 477.721407][T17963] tipc: Enabling of bearer rejected, failed to enable media [ 477.745787][T17937] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3498'. [ 478.272946][T18004] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 478.277869][T18007] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 478.508432][T18026] ipvlan2: entered promiscuous mode [ 478.545837][T18026] bridge0: port 3(ipvlan2) entered blocking state [ 478.552832][T18026] bridge0: port 3(ipvlan2) entered disabled state [ 478.559614][T18026] ipvlan2: entered allmulticast mode [ 478.566283][T18026] bridge0: entered allmulticast mode [ 478.576311][T18026] ipvlan2: left allmulticast mode [ 478.583354][T18026] bridge0: left allmulticast mode [ 479.688934][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.717239][T18087] vlan3: entered promiscuous mode [ 479.724847][T18087] bridge0: entered promiscuous mode [ 479.746708][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.792054][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.823155][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.209847][T18110] TCP: TCP_TX_DELAY enabled [ 483.398154][T18172] __nla_validate_parse: 39 callbacks suppressed [ 483.398176][T18172] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3564'. [ 483.585163][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3569'. [ 483.918725][T18206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3574'. [ 483.954920][T18211] validate_nla: 36 callbacks suppressed [ 483.954939][T18211] netlink: 'syz.0.3578': attribute type 3 has an invalid length. [ 483.973446][T18206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3574'. [ 484.134901][T18222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.184298][T18227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3583'. [ 484.639987][T18246] tipc: Started in network mode [ 484.656337][T18246] tipc: Node identity aa74a208b192, cluster identity 4711 [ 484.665331][T18246] tipc: Enabled bearer , priority 0 [ 484.696433][T18246] syzkaller0: entered promiscuous mode [ 484.718041][T18246] syzkaller0: entered allmulticast mode [ 484.846715][T18246] tipc: Resetting bearer [ 484.921691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.971639][T18265] netlink: 'syz.3.3593': attribute type 10 has an invalid length. [ 484.992270][T18267] netlink: 'syz.2.3594': attribute type 1 has an invalid length. [ 485.000474][T18267] netlink: 'syz.2.3594': attribute type 3 has an invalid length. [ 485.011649][T18245] tipc: Resetting bearer [ 485.042715][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 485.060724][T18267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3594'. [ 485.098822][T18245] tipc: Disabling bearer [ 485.111422][T18267] NCSI netlink: No device for ifindex 0 [ 485.137294][T18265] team0: Device ipvlan1 failed to register rx_handler [ 485.198077][T18269] netlink: 'syz.2.3594': attribute type 1 has an invalid length. [ 485.207064][T18269] netlink: 'syz.2.3594': attribute type 2 has an invalid length. [ 485.328680][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 485.350388][T18276] macvlan3: entered allmulticast mode [ 485.365900][T18276] veth1_vlan: entered allmulticast mode [ 485.379683][T18276] bond0: (slave macvlan3): making interface the new active one [ 485.397543][T18276] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 485.846427][T18305] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 485.938116][T18323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.007310][T18326] syzkaller1: entered promiscuous mode [ 486.016696][T18326] syzkaller1: entered allmulticast mode [ 486.116545][T18331] sctp: [Deprecated]: syz.3.3611 (pid 18331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.116545][T18331] Use struct sctp_sack_info instead [ 486.540288][T18328] netlink: 'syz.4.3610': attribute type 1 has an invalid length. [ 486.561167][T18328] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3610'. [ 486.650603][T18337] netlink: 'syz.1.3612': attribute type 1 has an invalid length. [ 486.668916][T18337] netlink: 'syz.1.3612': attribute type 2 has an invalid length. [ 486.764440][T18345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3615'. [ 486.867371][T18352] Unsupported ieee802154 address type: 0 [ 486.893633][T18352] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 486.924771][T18352] netlink: 'syz.1.3616': attribute type 7 has an invalid length. [ 487.213020][T18370] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 487.461898][T18387] netlink: zone id is out of range [ 487.467054][T18387] netlink: zone id is out of range [ 487.477356][T18387] netlink: zone id is out of range [ 487.489117][T18387] netlink: zone id is out of range [ 487.522595][T18387] netlink: zone id is out of range [ 487.532054][T18387] netlink: zone id is out of range [ 487.944134][T18365] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 489.024749][T18438] validate_nla: 1 callbacks suppressed [ 489.024767][T18438] netlink: 'syz.1.3641': attribute type 1 has an invalid length. [ 489.038453][T18438] __nla_validate_parse: 5 callbacks suppressed [ 489.038471][T18438] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3641'. [ 489.164033][ T5875] Bluetooth: hci0: command 0x0405 tx timeout [ 489.365099][T18455] netlink: 'syz.1.3648': attribute type 29 has an invalid length. [ 489.379678][T18457] netlink: 'syz.0.3649': attribute type 4 has an invalid length. [ 489.548765][T18464] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 489.575283][T18464] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 489.735376][T18486] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3656'. [ 489.746186][T18488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3657'. [ 489.770739][T18486] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3656'. [ 489.944374][T18503] netlink: 'syz.1.3661': attribute type 15 has an invalid length. [ 489.975453][T18497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.092135][T18513] netlink: 'syz.2.3664': attribute type 4 has an invalid length. [ 490.160712][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 490.274798][T18524] netlink: 'syz.1.3667': attribute type 1 has an invalid length. [ 490.308857][T18497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.444172][T18497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.516116][T18534] netlink: 'syz.4.3670': attribute type 2 has an invalid length. [ 490.527814][T18534] netlink: 'syz.4.3670': attribute type 8 has an invalid length. [ 490.540213][T18534] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3670'. [ 490.576667][T18497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.628712][T18537] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3670'. [ 490.877888][T11138] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.952559][T18553] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3677'. [ 490.982339][ T3484] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.007310][ T3484] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.203528][T14061] IPVS: starting estimator thread 0... [ 491.203990][T18565] net_ratelimit: 19 callbacks suppressed [ 491.204005][T18565] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 491.224715][T11138] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.225852][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3680'. [ 491.331050][T18568] IPVS: using max 30 ests per chain, 72000 per kthread [ 491.379834][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 491.458689][T18572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.726623][T18572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.957119][T18572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.001263][T18607] tipc: Enabled bearer , priority 0 [ 492.055390][T18572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.118014][T18607] syzkaller0: entered promiscuous mode [ 492.135966][T18607] syzkaller0: entered allmulticast mode [ 492.186643][T18607] tipc: Resetting bearer [ 492.198077][T18605] tipc: Resetting bearer [ 492.257638][T18605] tipc: Disabling bearer [ 492.341670][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.413082][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.436670][T18636] netlink: 'syz.4.3698': attribute type 1 has an invalid length. [ 492.459311][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.486646][T11135] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.549450][T18641] bond1 (unregistering): Released all slaves [ 492.656234][T18650] ip6tnl2: entered promiscuous mode [ 492.667251][T18650] ip6tnl2: entered allmulticast mode [ 493.211952][T18686] team0: Device vti0 is of different type [ 493.861673][T18714] netlink: 'syz.2.3722': attribute type 21 has an invalid length. [ 493.869530][T18714] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.185456][T18724] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 494.302794][T18723] netlink: 'syz.0.3723': attribute type 21 has an invalid length. [ 494.310718][T18723] __nla_validate_parse: 40 callbacks suppressed [ 494.310737][T18723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3723'. [ 494.483225][T18732] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3727'. [ 494.600521][T18740] netlink: 'syz.3.3729': attribute type 11 has an invalid length. [ 494.620479][T18740] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3729'. [ 495.136798][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3737'. [ 495.137908][T18763] netlink: 'syz.0.3734': attribute type 1 has an invalid length. [ 495.160653][T18763] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3734'. [ 495.279331][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 495.642085][T18786] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 495.695837][T18786] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.705420][T18786] gretap2: entered promiscuous mode [ 495.710654][T18786] gretap2: entered allmulticast mode [ 495.726763][T18789] netlink: 'syz.3.3743': attribute type 1 has an invalid length. [ 495.766530][T18789] netlink: 'syz.3.3743': attribute type 1 has an invalid length. [ 495.931370][T18793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3744'. [ 496.048398][T18795] netlink: 'syz.0.3745': attribute type 1 has an invalid length. [ 496.192334][T18804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.223861][T18804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.235873][T18804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.248402][T18804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.259692][T18804] batman_adv: batadv0: Removing interface: team0 [ 496.767912][T18818] pim6reg: entered allmulticast mode [ 496.782893][T18817] pim6reg: left allmulticast mode [ 496.846250][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3753'. [ 497.249026][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3756'. [ 497.358708][T18835] bridge_slave_1: left allmulticast mode [ 497.405449][T18835] bridge_slave_1: left promiscuous mode [ 497.436964][T18835] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.476735][T18835] bridge_slave_0: left allmulticast mode [ 497.491178][T18835] bridge_slave_0: left promiscuous mode [ 497.503174][T18835] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.845788][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3761'. [ 497.884715][T18852] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 498.031706][T18869] sctp: [Deprecated]: syz.1.3765 (pid 18869) Use of int in max_burst socket option. [ 498.031706][T18869] Use struct sctp_assoc_value instead [ 498.063421][T18869] netlink: 'syz.1.3765': attribute type 13 has an invalid length. [ 498.107324][T18869] veth0_macvtap: left promiscuous mode [ 498.151167][T18869] macvtap0: entered allmulticast mode [ 498.194549][T18869] macvtap0: refused to change device tx_queue_len [ 498.350349][T18883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.789288][T18900] openvswitch: netlink: Unknown key attributes 2 [ 498.842055][T18904] netlink: 'syz.1.3775': attribute type 12 has an invalid length. [ 498.850851][T18900] netlink: 'syz.0.3774': attribute type 4 has an invalid length. [ 498.871274][T18905] netlink: 'syz.0.3774': attribute type 4 has an invalid length. [ 499.003444][T18913] gtp0: entered promiscuous mode [ 499.028196][T18913] gtp0: entered allmulticast mode [ 499.358071][T18936] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 500.255883][T18962] __nla_validate_parse: 5 callbacks suppressed [ 500.255900][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3791'. [ 500.328401][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3793'. [ 500.376855][T18967] validate_nla: 2 callbacks suppressed [ 500.376872][T18967] netlink: 'syz.0.3793': attribute type 5 has an invalid length. [ 500.416421][T18967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3793'. [ 500.456462][T18967] geneve2: entered promiscuous mode [ 500.461945][T18967] geneve2: entered allmulticast mode [ 500.469119][ T49] netdevsim netdevsim0 : set [1, 1] type 2 family 0 port 256 - 0 [ 500.507224][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 500.776048][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 500.815458][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 500.836993][T18988] netlink: 'syz.3.3800': attribute type 7 has an invalid length. [ 500.941835][T18988] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3800'. [ 500.950121][T18991] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 500.961905][T18990] netlink: 'syz.3.3800': attribute type 3 has an invalid length. [ 500.966165][T14059] IPVS: starting estimator thread 0... [ 500.980569][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 500.993840][T18991] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 501.071234][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3800'. [ 501.094362][T18991] gretap1: entered promiscuous mode [ 501.099604][T18991] gretap1: entered allmulticast mode [ 501.162183][T18992] IPVS: using max 25 ests per chain, 60000 per kthread [ 501.245261][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3801'. [ 502.311443][T19041] 8021q: VLANs not supported on wg2 [ 502.343587][T19044] netlink: 'syz.4.3814': attribute type 2 has an invalid length. [ 502.357662][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'. [ 502.435849][T19049] netlink: 'syz.2.3815': attribute type 4 has an invalid length. [ 502.444433][T19049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3815'. [ 502.473159][T19049] `: renamed from bond0 (while UP) [ 502.737664][T19065] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3820'. [ 502.760647][T19065] xt_socket: unknown flags 0xd0 [ 503.183375][T19084] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 503.208075][T19084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 503.240090][T19090] netlink: 'syz.1.3827': attribute type 21 has an invalid length. [ 504.066822][T19135] veth0: entered promiscuous mode [ 504.162688][T19134] veth0: left promiscuous mode [ 504.448808][T19165] nbd: couldn't find a device at index -373156329 [ 504.492586][T19162] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.552366][T19167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.628900][T19172] syz_tun: entered allmulticast mode [ 504.702214][T19172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.767292][T19171] syz_tun: left allmulticast mode [ 505.424908][T19209] __nla_validate_parse: 10 callbacks suppressed [ 505.424927][T19209] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3859'. [ 505.465913][T19209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3859'. [ 505.490011][T19215] syzkaller1: entered promiscuous mode [ 505.517566][T19215] syzkaller1: entered allmulticast mode [ 505.600031][T19221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3861'. [ 505.655391][T19225] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 505.664162][T14072] IPVS: starting estimator thread 0... [ 505.684184][T19229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3864'. [ 505.697246][T19221] netlink: 'syz.3.3861': attribute type 19 has an invalid length. [ 505.761497][T19227] IPVS: using max 31 ests per chain, 74400 per kthread [ 506.024856][T19250] netlink: 'syz.0.3870': attribute type 1 has an invalid length. [ 506.037813][T19251] netlink: 'syz.4.3871': attribute type 29 has an invalid length. [ 506.043302][T19250] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3870'. [ 506.072885][T19250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3870'. [ 506.084974][T19251] netlink: 'syz.4.3871': attribute type 29 has an invalid length. [ 506.111849][T19251] netlink: 'syz.4.3871': attribute type 29 has an invalid length. [ 506.130737][T19251] netlink: 'syz.4.3871': attribute type 29 has an invalid length. [ 506.149487][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 506.217995][T19261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3873'. [ 506.290708][T19263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3874'. [ 506.321550][T19266] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3875'. [ 506.370501][T19266] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 506.482248][T19273] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 507.609221][T19344] netlink: 'syz.4.3898': attribute type 1 has an invalid length. [ 507.700704][T19351] netlink: 'syz.0.3899': attribute type 4 has an invalid length. [ 507.840368][T19363] netlink: 'syz.4.3904': attribute type 1 has an invalid length. [ 507.914252][T19363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.980345][T19377] netlink: 'syz.0.3902': attribute type 1 has an invalid length. [ 508.050660][T19379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 508.111306][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 508.182870][T19383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.713027][T19422] tipc: Enabled bearer , priority 0 [ 508.720567][T19422] syzkaller0: entered promiscuous mode [ 508.726311][T19422] syzkaller0: entered allmulticast mode [ 508.849823][T19433] tipc: Resetting bearer [ 509.357377][T19447] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 509.584821][T19421] tipc: Resetting bearer [ 509.617988][T19421] tipc: Disabling bearer [ 509.920155][T19472] pim6reg1: entered promiscuous mode [ 509.930411][T19472] pim6reg1: entered allmulticast mode [ 510.459180][T19496] __nla_validate_parse: 83 callbacks suppressed [ 510.459198][T19496] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3938'. [ 510.522410][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3938'. [ 510.570525][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3938'. [ 510.594403][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3942'. [ 510.640166][T19512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3943'. [ 510.653967][T19514] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.668536][T19514] team0: Cannot enslave team device to itself [ 510.684087][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3938'. [ 510.844122][T19525] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 510.926914][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'. [ 511.099837][T19543] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3949'. [ 511.179453][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3951'. [ 511.257956][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 512.243064][T19605] vcan0: tx drop: invalid sa for name 0x0000020000000000 [ 512.317261][T19609] netlink: 'syz.4.3967': attribute type 11 has an invalid length. [ 513.127290][T14062] hid-generic 0005:0B57:0008.0004: collection stack underflow [ 513.140134][T14062] hid-generic 0005:0B57:0008.0004: item 0 0 0 12 parsing failed [ 513.140458][T19652] validate_nla: 3 callbacks suppressed [ 513.140471][T19652] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 513.151547][T14062] hid-generic 0005:0B57:0008.0004: probe with driver hid-generic failed with error -22 [ 513.280444][T19657] bridge_slave_0: left allmulticast mode [ 513.296956][T19657] bridge_slave_0: left promiscuous mode [ 513.330880][T19657] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.450661][T19657] bridge_slave_1: left allmulticast mode [ 513.522355][T19669] netlink: 'syz.3.3983': attribute type 2 has an invalid length. [ 513.539643][T19657] bridge_slave_1: left promiscuous mode [ 513.620553][T19657] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.737006][T19657] team0: Port device team_slave_0 removed [ 513.773319][T19657] team0: Port device team_slave_1 removed [ 513.787177][T19657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.795169][T19657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.819352][T19657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.849266][T19657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.914862][T19657] bond0: (slave macvlan3): Releasing active interface [ 513.944703][T19657] veth1_vlan: left allmulticast mode [ 514.238816][T19714] netlink: 'syz.0.3994': attribute type 12 has an invalid length. [ 514.400898][T19726] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 514.424457][T19726] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 514.444746][T19726] gretap2: entered promiscuous mode [ 514.458398][T19726] gretap2: entered allmulticast mode [ 514.876122][T19749] batman_adv: batadv0: Adding interface: dummy0 [ 514.899568][T19749] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.968848][T19749] batman_adv: batadv0: Interface activated: dummy0 [ 514.998869][T19755] batadv0: mtu less than device minimum [ 515.028330][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.040310][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.052275][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.064185][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.076162][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.088111][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.100024][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.111941][T19755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 515.254288][T19767] IPv6: NLM_F_REPLACE set, but no existing node found! [ 515.523071][T19782] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20005 [ 515.880514][T19810] pim6reg: entered allmulticast mode [ 515.922562][T19810] pim6reg: left allmulticast mode [ 516.215380][T19832] sctp: [Deprecated]: syz.1.4026 (pid 19832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.215380][T19832] Use struct sctp_sack_info instead [ 516.294396][T19838] team0: Device gtp0 is of different type [ 516.319504][T19836] __nla_validate_parse: 16 callbacks suppressed [ 516.319522][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4027'. [ 516.393287][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4027'. [ 516.549507][T19847] netlink: 'syz.2.4030': attribute type 1 has an invalid length. [ 516.565910][T19847] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4030'. [ 516.593011][T19847] netlink: 'syz.2.4030': attribute type 2 has an invalid length. [ 516.610311][T19847] netlink: 'syz.2.4030': attribute type 1 has an invalid length. [ 516.619555][T19850] netlink: 'syz.3.4032': attribute type 29 has an invalid length. [ 516.643033][T19850] netlink: 'syz.3.4032': attribute type 29 has an invalid length. [ 516.698567][T19855] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 516.732162][T19855] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 516.970344][T19868] geneve2: entered promiscuous mode [ 516.975748][T19868] geneve2: entered allmulticast mode [ 516.985011][T11138] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 516.985098][T19870] netlink: 'syz.0.4039': attribute type 8 has an invalid length. [ 517.145855][T19868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.165178][T19868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.245349][T11138] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 517.259491][T11138] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 517.448706][T19890] team0: Cannot enslave team device to itself [ 517.460238][T19892] net_ratelimit: 12 callbacks suppressed [ 517.460255][T19892] openvswitch: netlink: Flow actions attr not present in new flow. [ 517.921115][ T5875] Bluetooth: hci3: link tx timeout [ 517.926803][ T5875] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.937696][ T5875] Bluetooth: hci3: link tx timeout [ 517.943070][ T5875] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.950915][ T5875] Bluetooth: hci3: link tx timeout [ 517.956296][ T5875] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.995811][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 518.080206][T19924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4054'. [ 518.136764][T19923] bridge_slave_0: left allmulticast mode [ 518.147785][T19923] bridge_slave_0: left promiscuous mode [ 518.153825][T19923] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.169464][T19923] bridge_slave_1: left allmulticast mode [ 518.183209][T19923] bridge_slave_1: left promiscuous mode [ 518.225197][T19923] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.267946][T19923] bond0: (slave bond_slave_0): Releasing backup interface [ 518.362155][T19923] bond_slave_0: left allmulticast mode [ 518.401396][T19923] bond0: (slave bond_slave_1): Releasing backup interface [ 518.413204][T19923] bond_slave_1: left allmulticast mode [ 518.439803][T19923] team0: Port device team_slave_0 removed [ 518.459583][T19923] team0: Port device team_slave_1 removed [ 518.466353][T19923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.474044][T19923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.486246][T19923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.494578][T19923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.513549][T19923] bond2: (slave gretap1): Releasing active interface [ 518.608578][T19943] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O&PRaGͽ ' [ 518.631858][T19943] CPU: 1 UID: 0 PID: 19943 Comm: syz.1.4060 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 518.631886][T19943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.631900][T19943] Call Trace: [ 518.631907][T19943] [ 518.631917][T19943] dump_stack_lvl+0x189/0x250 [ 518.631949][T19943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.631971][T19943] ? __pfx__printk+0x10/0x10 [ 518.632002][T19943] ? kernfs_path_from_node+0x2f/0x290 [ 518.632022][T19943] ? kernfs_path_from_node+0x250/0x290 [ 518.632040][T19943] ? kernfs_path_from_node+0x2f/0x290 [ 518.632063][T19943] sysfs_warn_dup+0x8e/0xa0 [ 518.632083][T19943] sysfs_do_create_link_sd+0xc0/0x110 [ 518.632105][T19943] device_add_class_symlinks+0x1cf/0x240 [ 518.632136][T19943] device_add+0x475/0xb50 [ 518.632166][T19943] wiphy_register+0x1ba6/0x28d0 [ 518.632209][T19943] ? __pfx_wiphy_register+0x10/0x10 [ 518.632230][T19943] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 518.632265][T19943] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 518.632298][T19943] ieee80211_register_hw+0x3425/0x4080 [ 518.632343][T19943] ? ieee80211_register_hw+0x1401/0x4080 [ 518.632379][T19943] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 518.632409][T19943] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 518.632448][T19943] ? __hrtimer_setup+0x187/0x210 [ 518.632465][T19943] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 518.632492][T19943] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 518.632549][T19943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 518.632568][T19943] ? trace_kmalloc+0x1f/0xd0 [ 518.632588][T19943] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 518.632613][T19943] ? kstrndup+0xbf/0x160 [ 518.632643][T19943] hwsim_new_radio_nl+0xea4/0x1b10 [ 518.632666][T19943] ? __pfx___nla_validate_parse+0x10/0x10 [ 518.632706][T19943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 518.632743][T19943] ? __nla_parse+0x40/0x60 [ 518.632770][T19943] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 518.632800][T19943] genl_family_rcv_msg_doit+0x212/0x300 [ 518.632828][T19943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 518.632870][T19943] ? bpf_lsm_capable+0x9/0x20 [ 518.632893][T19943] ? security_capable+0x7e/0x2e0 [ 518.632924][T19943] genl_rcv_msg+0x60e/0x790 [ 518.632949][T19943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.632966][T19943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 518.633004][T19943] netlink_rcv_skb+0x208/0x470 [ 518.633025][T19943] ? __lock_acquire+0xab9/0xd20 [ 518.633050][T19943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.633069][T19943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.633113][T19943] ? down_read+0x1ad/0x2e0 [ 518.633140][T19943] genl_rcv+0x28/0x40 [ 518.633163][T19943] netlink_unicast+0x82f/0x9e0 [ 518.633195][T19943] ? __pfx_netlink_unicast+0x10/0x10 [ 518.633218][T19943] ? netlink_sendmsg+0x642/0xb30 [ 518.633237][T19943] ? skb_put+0x11b/0x210 [ 518.633266][T19943] netlink_sendmsg+0x805/0xb30 [ 518.633300][T19943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.633327][T19943] ? aa_sock_msg_perm+0xf1/0x1d0 [ 518.633357][T19943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.633377][T19943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.633401][T19943] __sock_sendmsg+0x219/0x270 [ 518.633426][T19943] ____sys_sendmsg+0x505/0x830 [ 518.633458][T19943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.633495][T19943] ? import_iovec+0x74/0xa0 [ 518.633518][T19943] ___sys_sendmsg+0x21f/0x2a0 [ 518.633546][T19943] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.633615][T19943] ? __fget_files+0x2a/0x420 [ 518.633638][T19943] ? __fget_files+0x3a0/0x420 [ 518.633677][T19943] __x64_sys_sendmsg+0x19b/0x260 [ 518.633705][T19943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.633744][T19943] ? do_user_addr_fault+0xc8a/0x1390 [ 518.633776][T19943] ? do_syscall_64+0xbe/0x3b0 [ 518.633803][T19943] do_syscall_64+0xfa/0x3b0 [ 518.633823][T19943] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.633844][T19943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.633870][T19943] ? clear_bhb_loop+0x60/0xb0 [ 518.633893][T19943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.633918][T19943] RIP: 0033:0x7fafb4d8ebe9 [ 518.633936][T19943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.633953][T19943] RSP: 002b:00007fafb5c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.633972][T19943] RAX: ffffffffffffffda RBX: 00007fafb4fb6180 RCX: 00007fafb4d8ebe9 [ 518.633985][T19943] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 518.633995][T19943] RBP: 00007fafb4e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 518.634004][T19943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.634014][T19943] R13: 00007fafb4fb6218 R14: 00007fafb4fb6180 R15: 00007fff99426a48 [ 518.634046][T19943] [ 519.356479][T19967] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 519.366928][T19967] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 519.536237][T19868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.568841][T19868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.604678][T19868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 519.658517][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'. [ 519.734491][T19868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.769890][T19868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.797337][T19868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 519.919428][T19868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.929997][T19868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.940442][T19868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 519.961286][ T5875] Bluetooth: hci3: command 0x0405 tx timeout [ 520.125682][T11141] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.140848][T11141] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 520.150519][T11141] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 520.166148][T11141] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.176553][T11141] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 520.193445][T11141] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 520.249666][T11135] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.269361][T11135] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 520.299104][T11135] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 520.332907][T11135] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.409227][T11135] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 520.416760][T20019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4080'. [ 520.435216][T11135] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 520.642547][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4083'. [ 520.874814][T20032] hsr_slave_1 (unregistering): left promiscuous mode [ 520.969160][T20050] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 520.986066][T20050] CPU: 1 UID: 0 PID: 20050 Comm: syz.0.4091 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 520.986095][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.986105][T20050] Call Trace: [ 520.986112][T20050] [ 520.986120][T20050] dump_stack_lvl+0x189/0x250 [ 520.986150][T20050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.986173][T20050] ? __pfx__printk+0x10/0x10 [ 520.986203][T20050] ? kernfs_path_from_node+0x2f/0x290 [ 520.986223][T20050] ? kernfs_path_from_node+0x250/0x290 [ 520.986241][T20050] ? kernfs_path_from_node+0x2f/0x290 [ 520.986266][T20050] sysfs_warn_dup+0x8e/0xa0 [ 520.986286][T20050] sysfs_do_create_link_sd+0xc0/0x110 [ 520.986310][T20050] device_add_class_symlinks+0x1cf/0x240 [ 520.986342][T20050] device_add+0x475/0xb50 [ 520.986373][T20050] wiphy_register+0x1ba6/0x28d0 [ 520.986415][T20050] ? __pfx_wiphy_register+0x10/0x10 [ 520.986437][T20050] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 520.986472][T20050] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 520.986504][T20050] ieee80211_register_hw+0x3425/0x4080 [ 520.986552][T20050] ? ieee80211_register_hw+0x1401/0x4080 [ 520.986587][T20050] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 520.986619][T20050] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 520.986649][T20050] ? __hrtimer_setup+0x187/0x210 [ 520.986666][T20050] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 520.986693][T20050] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 520.986756][T20050] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 520.986775][T20050] ? trace_kmalloc+0x1f/0xd0 [ 520.986795][T20050] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 520.986820][T20050] ? kstrndup+0xbf/0x160 [ 520.986851][T20050] hwsim_new_radio_nl+0xea4/0x1b10 [ 520.986875][T20050] ? __pfx___nla_validate_parse+0x10/0x10 [ 520.986917][T20050] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.986952][T20050] ? __nla_parse+0x40/0x60 [ 520.986979][T20050] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 520.987010][T20050] genl_family_rcv_msg_doit+0x212/0x300 [ 520.987037][T20050] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.987072][T20050] ? bpf_lsm_capable+0x9/0x20 [ 520.987094][T20050] ? security_capable+0x7e/0x2e0 [ 520.987126][T20050] genl_rcv_msg+0x60e/0x790 [ 520.987152][T20050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.987170][T20050] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.987208][T20050] netlink_rcv_skb+0x208/0x470 [ 520.987228][T20050] ? __lock_acquire+0xab9/0xd20 [ 520.987254][T20050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.987275][T20050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.987321][T20050] ? down_read+0x1ad/0x2e0 [ 520.987347][T20050] genl_rcv+0x28/0x40 [ 520.987370][T20050] netlink_unicast+0x82f/0x9e0 [ 520.987402][T20050] ? __pfx_netlink_unicast+0x10/0x10 [ 520.987425][T20050] ? netlink_sendmsg+0x642/0xb30 [ 520.987446][T20050] ? skb_put+0x11b/0x210 [ 520.987473][T20050] netlink_sendmsg+0x805/0xb30 [ 520.987508][T20050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.987535][T20050] ? aa_sock_msg_perm+0xf1/0x1d0 [ 520.987562][T20050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.987581][T20050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.987605][T20050] __sock_sendmsg+0x219/0x270 [ 520.987629][T20050] ____sys_sendmsg+0x505/0x830 [ 520.987660][T20050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.987693][T20050] ? import_iovec+0x74/0xa0 [ 520.987721][T20050] ___sys_sendmsg+0x21f/0x2a0 [ 520.987749][T20050] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.987825][T20050] ? __fget_files+0x2a/0x420 [ 520.987849][T20050] ? __fget_files+0x3a0/0x420 [ 520.987884][T20050] __x64_sys_sendmsg+0x19b/0x260 [ 520.987910][T20050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.987946][T20050] ? rcu_is_watching+0x15/0xb0 [ 520.987968][T20050] ? do_syscall_64+0xbe/0x3b0 [ 520.987994][T20050] do_syscall_64+0xfa/0x3b0 [ 520.988013][T20050] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.988033][T20050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.988050][T20050] ? clear_bhb_loop+0x60/0xb0 [ 520.988072][T20050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.988087][T20050] RIP: 0033:0x7f06e6f8ebe9 [ 520.988104][T20050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.988119][T20050] RSP: 002b:00007f06e7d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.988137][T20050] RAX: ffffffffffffffda RBX: 00007f06e71b5fa0 RCX: 00007f06e6f8ebe9 [ 520.988150][T20050] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 520.988160][T20050] RBP: 00007f06e7011e19 R08: 0000000000000000 R09: 0000000000000000 [ 520.988170][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.988180][T20050] R13: 00007f06e71b6038 R14: 00007f06e71b5fa0 R15: 00007fffee2d4e18 [ 520.988211][T20050] [ 521.736183][T20073] netlink: 'syz.4.4099': attribute type 10 has an invalid length. [ 521.744235][T20073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4099'. [ 521.808688][T20073] team0: Port device geneve0 added [ 522.049618][ T5872] Bluetooth: hci3: command 0x0405 tx timeout [ 522.297713][T20103] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 522.397882][T20105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.417110][T20105] netlink: 816 bytes leftover after parsing attributes in process `syz.1.4108'. [ 522.500140][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4109'. [ 522.791646][T20096] lo: entered promiscuous mode [ 522.800006][T20096] tunl0: entered promiscuous mode [ 522.825311][T20096] gre0: entered promiscuous mode [ 522.852681][T20096] gretap0: entered promiscuous mode [ 522.895726][T20096] erspan0: entered promiscuous mode [ 522.924974][T20096] ip_vti0: entered promiscuous mode [ 523.189110][T20130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4115'. [ 523.251494][T20130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4115'. [ 523.743479][T20153] netlink: 'syz.3.4117': attribute type 1 has an invalid length. [ 523.748613][T20155] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 523.790510][T20156] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4118'. [ 523.964380][T14051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.976597][T20163] bridge_slave_0: left allmulticast mode [ 523.987551][T20172] netlink: 'syz.0.4120': attribute type 21 has an invalid length. [ 523.996573][T20163] bridge_slave_0: left promiscuous mode [ 524.004456][T20163] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.022379][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4123'. [ 524.061413][T14062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.070554][T20163] bond0: (slave bridge_slave_1): Releasing backup interface [ 524.175639][T20163] bond0: (slave bond_slave_0): Releasing backup interface [ 524.279191][T20163] bond0: (slave bond_slave_1): Releasing backup interface [ 524.333584][T20163] team0: Port device team_slave_0 removed [ 524.341574][T20185] netlink: 'syz.3.4127': attribute type 9 has an invalid length. [ 524.393521][T20163] team0: Port device team_slave_1 removed [ 524.499603][T20163] bond2: (slave ip6erspan0): Releasing active interface [ 524.646476][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4125'. [ 524.837390][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4130'. [ 525.201951][T20223] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 525.210314][T20222] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 525.357132][T20230] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 525.481439][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4141'. [ 525.569771][ C1] vcan0: j1939_session_tx_dat: 0xffff888055c18000: queue data error: -100 [ 525.581614][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 525.588079][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.596064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.603927][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.611880][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.619706][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.627676][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.635670][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.643659][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.651513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.659561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.667517][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.675493][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.683360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.691356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.699289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.707267][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.715231][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.723213][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.731076][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.739136][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.747171][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.755135][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.763196][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.771149][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.778985][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.786962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.795027][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.803158][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.811104][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.819037][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.827009][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.835132][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.842988][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.850908][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.858785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.866738][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.874603][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.882607][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.890442][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.898833][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.906787][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.914753][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.922614][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.930578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.938431][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.946406][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.954289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.962391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.970305][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.978262][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 525.986214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 525.994296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.002176][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.010118][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.017975][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.026002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.033944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.041889][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.049716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.057674][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.065534][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.073512][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.081551][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.089498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.097361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.105325][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.113189][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.121142][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 526.128972][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 526.328342][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d623c00: rx timeout, send abort [ 526.455213][T20269] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 526.518641][T20276] netlink: 'syz.4.4150': attribute type 1 has an invalid length. [ 526.542904][T20278] netlink: 'syz.1.4151': attribute type 1 has an invalid length. [ 526.579073][T20269] bond4: entered promiscuous mode [ 526.594506][T20269] bond4: entered allmulticast mode [ 526.609079][T20284] netlink: 'syz.1.4151': attribute type 3 has an invalid length. [ 526.610523][T20269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 526.755465][T20270] __nla_validate_parse: 28 callbacks suppressed [ 526.755484][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.779689][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.789774][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.799694][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.810278][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.822397][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.832389][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.841462][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803d623c00: abort rx timeout. Force session deactivation [ 526.854954][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.864559][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.882592][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4151'. [ 526.923475][T20270] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 527.119690][T20299] netlink: 'syz.3.4157': attribute type 9 has an invalid length. [ 527.202748][T20300] netlink: 'syz.3.4157': attribute type 9 has an invalid length. [ 527.527651][T20334] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 527.596085][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 527.787684][T20353] netlink: 'syz.0.4172': attribute type 5 has an invalid length. [ 527.808140][T20353] netlink: 'syz.0.4172': attribute type 5 has an invalid length. [ 527.960666][T20363] openvswitch: netlink: Actions may not be safe on all matching packets [ 528.569519][T20396] netlink: 'syz.4.4185': attribute type 1 has an invalid length. [ 528.689545][T20404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 529.254490][ T5875] Bluetooth: hci0: command 0x0405 tx timeout [ 529.538528][T20428] vlan4: entered allmulticast mode [ 529.543965][T20428] bond0: entered allmulticast mode [ 529.619235][T20431] erspan0: entered promiscuous mode [ 529.641593][T20431] vlan5: entered promiscuous mode [ 529.749600][T20440] tap0: tun_chr_ioctl cmd 1074025676 [ 529.755785][T20440] tap0: owner set to 0 [ 529.771991][T20440] tap0: tun_chr_ioctl cmd 1074025676 [ 529.777884][T20440] tap0: owner set to 0 [ 529.784072][T20443] tap0: tun_chr_ioctl cmd 1074025673 [ 530.312765][T20479] netlink: 'syz.2.4212': attribute type 15 has an invalid length. [ 530.661722][T20494] veth0: entered promiscuous mode [ 530.844835][T20499] bond0 (unregistering): Released all slaves [ 531.054116][T20493] veth0: left promiscuous mode [ 531.797949][T20554] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 531.916195][T20567] __nla_validate_parse: 60 callbacks suppressed [ 531.916213][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4239'. [ 531.992392][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4242'. [ 532.103462][T20578] netlink: 'syz.2.4243': attribute type 8 has an invalid length. [ 532.220590][T20587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4246'. [ 532.385679][T20594] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 532.398552][T20594] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 532.435088][T20594] dvmrp0: left allmulticast mode [ 532.494493][T20597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4250'. [ 532.853511][T20619] nbd: must specify a size in bytes for the device [ 533.276950][T20645] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 533.412212][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4265'. [ 533.504939][T20652] geneve2: entered promiscuous mode [ 534.305252][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4276'. [ 534.388370][T20697] netlink: 'syz.3.4279': attribute type 1 has an invalid length. [ 534.408357][T20697] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 534.559779][T20712] netlink: 'syz.4.4282': attribute type 15 has an invalid length. [ 534.580602][T20715] netlink: 'syz.4.4282': attribute type 15 has an invalid length. [ 534.590332][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4281'. [ 534.841991][ T5872] Bluetooth: hci0: command 0x0405 tx timeout [ 535.854527][T20739] Set syz1 is full, maxelem 6117 reached [ 536.386479][T20780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4298'. [ 536.845529][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'. [ 536.949775][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 536.989941][T20819] dummy0: entered promiscuous mode [ 537.026021][T20819] batadv_slave_1: entered promiscuous mode [ 537.058408][T20819] debugfs: 'hsr1' already exists in 'hsr' [ 537.075887][T20819] Cannot create hsr debugfs directory [ 537.142291][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 537.347215][T20829] hsr_slave_0 (unregistering): left promiscuous mode [ 537.415145][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'. [ 537.430142][T20831] nbd: must specify a size in bytes for the device [ 537.452727][T20839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4317'. [ 537.481045][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4317'. [ 537.902178][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'. [ 537.937959][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4324'. [ 538.100572][T20871] macvlan3: entered allmulticast mode [ 538.107239][T20871] veth1_vlan: entered allmulticast mode [ 538.153835][T20871] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 538.357340][T20884] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4332'. [ 538.594154][T20895] lo: left promiscuous mode [ 538.606847][T20895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.986692][T20922] netlink: 'syz.4.4343': attribute type 4 has an invalid length. [ 539.197546][T20934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4346'. [ 539.260403][T20943] veth0: entered promiscuous mode [ 539.278465][T20941] tipc: Enabled bearer , priority 0 [ 539.286285][T20941] syzkaller0: entered promiscuous mode [ 539.311517][T20941] syzkaller0: entered allmulticast mode [ 539.330149][T20943] veth0: left promiscuous mode [ 539.350441][T20941] tipc: Resetting bearer [ 539.370292][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4351'. [ 539.526272][T20940] tipc: Resetting bearer [ 539.593526][T20940] tipc: Disabling bearer [ 539.605488][T20950] veth0: entered promiscuous mode [ 539.610783][T20951] veth0: left promiscuous mode [ 539.782428][T20963] tipc: Enabled bearer , priority 0 [ 539.880567][T20963] syzkaller0: entered promiscuous mode [ 539.888133][T20963] syzkaller0: entered allmulticast mode [ 539.919778][T20961] tipc: Resetting bearer [ 539.959441][T20961] tipc: Disabling bearer [ 540.138342][T20983] syzkaller0: entered promiscuous mode [ 540.144788][T20983] syzkaller0: entered allmulticast mode [ 542.659641][T21047] __nla_validate_parse: 8 callbacks suppressed [ 542.659660][T21047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4378'. [ 542.690339][T21047] bond0: entered promiscuous mode [ 542.710178][T21047] bond0: left promiscuous mode [ 543.017191][T21067] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4385'. [ 543.026980][T21068] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4384'. [ 543.041606][T21067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4385'. [ 543.079660][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4385'. [ 543.102679][T21072] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 543.124700][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4385'. [ 543.310269][T21079] lo: entered promiscuous mode [ 543.329906][T21079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.409303][T21079] netlink: 'syz.3.4387': attribute type 21 has an invalid length. [ 543.441786][T21079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4387'. [ 543.662412][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4391'. [ 543.671994][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4391'. [ 543.685468][T21089] vlan0: entered promiscuous mode [ 543.867192][T14055] IPVS: starting estimator thread 0... [ 543.883755][T21100] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 543.910157][T21104] IPVS: set_ctl: invalid protocol: 536 0.0.0.0:0 [ 543.961888][T21101] IPVS: using max 28 ests per chain, 67200 per kthread [ 544.087131][T21118] netlink: 'syz.1.4399': attribute type 1 has an invalid length. [ 544.246076][T21130] veth0: entered promiscuous mode [ 544.272891][T21126] veth0: left promiscuous mode [ 544.569701][T21156] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4412'. [ 544.945084][T21179] gtp1: entered promiscuous mode [ 544.953328][T21179] gtp1: entered allmulticast mode [ 545.002325][T21182] netlink: zone id is out of range [ 545.034605][T21182] openvswitch: netlink: Message has 4 unknown bytes. [ 545.051892][T21182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.547194][T21208] tipc: Enabled bearer , priority 0 [ 545.570006][T21208] syzkaller0: entered promiscuous mode [ 545.576966][T21208] syzkaller0: entered allmulticast mode [ 545.609380][T21208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 545.680516][T21210] netlink: 'syz.1.4428': attribute type 10 has an invalid length. [ 545.728935][T21208] tipc: Resetting bearer [ 545.752733][T21215] netlink: 'syz.0.4429': attribute type 10 has an invalid length. [ 545.781739][T21215] syz_tun: entered promiscuous mode [ 545.803590][T21215] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 545.873855][T21207] tipc: Resetting bearer [ 545.937354][T21207] tipc: Disabling bearer [ 546.012926][T21238] netlink: 'syz.0.4434': attribute type 1 has an invalid length. [ 546.314026][T21250] netlink: 'syz.0.4438': attribute type 12 has an invalid length. [ 546.445905][T21212] delete_channel: no stack [ 547.018472][T21298] netlink: 'syz.4.4450': attribute type 1 has an invalid length. [ 547.119266][T21308] bond5: (slave gretap3): making interface the new active one [ 547.127839][T21308] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 547.154731][T21298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 547.336637][T21321] netlink: 'syz.3.4458': attribute type 1 has an invalid length. [ 547.377662][T21321] netlink: 'syz.3.4458': attribute type 2 has an invalid length. [ 547.455684][T21325] vlan2: entered promiscuous mode [ 547.508282][T21335] netlink: 'syz.1.4459': attribute type 29 has an invalid length. [ 547.525800][T21324] netlink: 'syz.1.4459': attribute type 29 has an invalid length. [ 547.684679][T21345] __nla_validate_parse: 15 callbacks suppressed [ 547.684697][T21345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4466'. [ 548.246941][T21382] sctp: [Deprecated]: syz.3.4475 (pid 21382) Use of int in max_burst socket option deprecated. [ 548.246941][T21382] Use struct sctp_assoc_value instead [ 548.322082][T21386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4476'. [ 548.368956][T21388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 548.758752][T21413] lo: left promiscuous mode [ 548.808565][T21413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.199010][T21441] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 549.258925][T21443] validate_nla: 1 callbacks suppressed [ 549.258941][T21443] netlink: 'syz.0.4492': attribute type 1 has an invalid length. [ 549.291166][T21443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4492'. [ 549.321665][T21447] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4494'. [ 549.373612][T21447] IPv6: sit1: Disabled Multicast RS [ 549.380011][T21447] sit1: entered allmulticast mode [ 549.494665][T21460] netlink: 'syz.2.4498': attribute type 1 has an invalid length. [ 549.526102][T21460] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 549.723125][ T5875] Bluetooth: hci5: command 0x0406 tx timeout [ 549.754631][T21476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.923546][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4506'. [ 549.934239][T21499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4505'. [ 550.066678][T21503] netlink: 'syz.4.4508': attribute type 3 has an invalid length. [ 550.144407][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 550.221328][T21514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4512'. [ 550.316455][T21519] netlink: 176956 bytes leftover after parsing attributes in process `syz.4.4513'. [ 550.385755][T21527] netlink: 'syz.3.4516': attribute type 7 has an invalid length. [ 550.445897][T21527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.320624][T21574] wg1: entered promiscuous mode [ 551.342160][T21579] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 551.342561][T21574] wg1: entered allmulticast mode [ 551.513189][T21584] tipc: Started in network mode [ 551.518096][T21584] tipc: Node identity c6d117be0b88, cluster identity 4711 [ 551.539727][T21584] tipc: Enabled bearer , priority 0 [ 551.550004][T21588] netlink: 'syz.2.4533': attribute type 10 has an invalid length. [ 551.579180][T21584] syzkaller0: entered promiscuous mode [ 551.592115][T21584] syzkaller0: entered allmulticast mode [ 551.698979][T21590] vlan2: entered allmulticast mode [ 551.705467][T21590] bridge0: entered allmulticast mode [ 551.712279][T21594] sctp: [Deprecated]: syz.2.4537 (pid 21594) Use of int in maxseg socket option. [ 551.712279][T21594] Use struct sctp_assoc_value instead [ 551.732129][T21590] bridge5: port 1(vlan2) entered blocking state [ 551.748905][T21590] bridge5: port 1(vlan2) entered disabled state [ 551.782502][T21590] vlan2: entered promiscuous mode [ 551.804278][T21590] bridge0: entered promiscuous mode [ 551.834554][T21585] tipc: Resetting bearer [ 551.901979][T21585] tipc: Disabling bearer [ 552.113525][T21615] 8021q: adding VLAN 0 to HW filter on device ` [ 552.119473][T21618] netlink: 'syz.0.4543': attribute type 1 has an invalid length. [ 552.157002][T21615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.283457][T21618] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.323868][T21627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.332286][T21627] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 552.345895][T21627] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 552.396960][T21615] netem: change failed [ 552.470131][T21632] veth5: entered promiscuous mode [ 552.488788][T21632] bond6: (slave veth5): Enslaving as an active interface with a down link [ 552.519057][T21618] vlan3: entered allmulticast mode [ 552.530838][T21618] bond6: entered allmulticast mode [ 552.740745][T21650] __nla_validate_parse: 6 callbacks suppressed [ 552.740763][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'. [ 552.758210][T21658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4553'. [ 553.461913][T21684] netlink: 'syz.4.4559': attribute type 33 has an invalid length. [ 553.469889][T21684] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4559'. [ 553.706704][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 553.733123][T21696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.765392][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4561'. [ 553.981878][T21706] netlink: 'syz.4.4566': attribute type 16 has an invalid length. [ 554.001333][T21706] netlink: 'syz.4.4566': attribute type 17 has an invalid length. [ 554.119306][T21708] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 554.288380][T21706] tunl0: left promiscuous mode [ 554.296045][T21706] gre0: left promiscuous mode [ 554.366028][T21706] erspan0: left promiscuous mode [ 554.374923][T21706] ip_vti0: left promiscuous mode [ 554.411995][T21706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.416410][T21728] netlink: 'syz.2.4570': attribute type 21 has an invalid length. [ 554.502615][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4568'. [ 554.525198][T21723] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 554.543266][T21723] CPU: 1 UID: 0 PID: 21723 Comm: syz.3.4569 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 554.543293][T21723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.543305][T21723] Call Trace: [ 554.543312][T21723] [ 554.543320][T21723] dump_stack_lvl+0x189/0x250 [ 554.543351][T21723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.543374][T21723] ? __pfx__printk+0x10/0x10 [ 554.543405][T21723] ? kernfs_path_from_node+0x2f/0x290 [ 554.543425][T21723] ? kernfs_path_from_node+0x250/0x290 [ 554.543443][T21723] ? kernfs_path_from_node+0x2f/0x290 [ 554.543469][T21723] sysfs_warn_dup+0x8e/0xa0 [ 554.543489][T21723] sysfs_do_create_link_sd+0xc0/0x110 [ 554.543513][T21723] device_add_class_symlinks+0x1cf/0x240 [ 554.543544][T21723] device_add+0x475/0xb50 [ 554.543574][T21723] wiphy_register+0x1ba6/0x28d0 [ 554.543617][T21723] ? __pfx_wiphy_register+0x10/0x10 [ 554.543638][T21723] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 554.543672][T21723] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 554.543704][T21723] ieee80211_register_hw+0x3425/0x4080 [ 554.543748][T21723] ? ieee80211_register_hw+0x1401/0x4080 [ 554.543784][T21723] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 554.543815][T21723] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 554.543846][T21723] ? __hrtimer_setup+0x187/0x210 [ 554.543864][T21723] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 554.543890][T21723] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 554.543976][T21723] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 554.543996][T21723] ? trace_kmalloc+0x1f/0xd0 [ 554.544016][T21723] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 554.544041][T21723] ? kstrndup+0xbf/0x160 [ 554.544072][T21723] hwsim_new_radio_nl+0xea4/0x1b10 [ 554.544097][T21723] ? __pfx___nla_validate_parse+0x10/0x10 [ 554.544137][T21723] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 554.544173][T21723] ? __nla_parse+0x40/0x60 [ 554.544201][T21723] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 554.544231][T21723] genl_family_rcv_msg_doit+0x212/0x300 [ 554.544258][T21723] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 554.544297][T21723] ? bpf_lsm_capable+0x9/0x20 [ 554.544319][T21723] ? security_capable+0x7e/0x2e0 [ 554.544351][T21723] genl_rcv_msg+0x60e/0x790 [ 554.544377][T21723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.544395][T21723] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 554.544433][T21723] netlink_rcv_skb+0x208/0x470 [ 554.544454][T21723] ? __lock_acquire+0xab9/0xd20 [ 554.544479][T21723] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.544506][T21723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.544550][T21723] ? down_read+0x1ad/0x2e0 [ 554.544576][T21723] genl_rcv+0x28/0x40 [ 554.544600][T21723] netlink_unicast+0x82f/0x9e0 [ 554.544632][T21723] ? __pfx_netlink_unicast+0x10/0x10 [ 554.544655][T21723] ? netlink_sendmsg+0x642/0xb30 [ 554.544675][T21723] ? skb_put+0x11b/0x210 [ 554.544704][T21723] netlink_sendmsg+0x805/0xb30 [ 554.544738][T21723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.544766][T21723] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.544793][T21723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.544812][T21723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.544835][T21723] __sock_sendmsg+0x219/0x270 [ 554.544860][T21723] ____sys_sendmsg+0x505/0x830 [ 554.544903][T21723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.544940][T21723] ? import_iovec+0x74/0xa0 [ 554.544963][T21723] ___sys_sendmsg+0x21f/0x2a0 [ 554.544992][T21723] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.545062][T21723] ? __fget_files+0x2a/0x420 [ 554.545086][T21723] ? __fget_files+0x3a0/0x420 [ 554.545124][T21723] __x64_sys_sendmsg+0x19b/0x260 [ 554.545154][T21723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.545193][T21723] ? rcu_is_watching+0x15/0xb0 [ 554.545219][T21723] ? do_syscall_64+0xbe/0x3b0 [ 554.545247][T21723] do_syscall_64+0xfa/0x3b0 [ 554.545268][T21723] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.545290][T21723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.545309][T21723] ? clear_bhb_loop+0x60/0xb0 [ 554.545333][T21723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.545351][T21723] RIP: 0033:0x7f91c2d8ebe9 [ 554.545369][T21723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.545385][T21723] RSP: 002b:00007f91c3b60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.545405][T21723] RAX: ffffffffffffffda RBX: 00007f91c2fb5fa0 RCX: 00007f91c2d8ebe9 [ 554.545418][T21723] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 554.545430][T21723] RBP: 00007f91c2e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 554.545441][T21723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.545451][T21723] R13: 00007f91c2fb6038 R14: 00007f91c2fb5fa0 R15: 00007ffc5670f988 [ 554.545485][T21723] [ 555.127518][T21735] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4572'. [ 555.233863][T21735] netlink: 'syz.2.4572': attribute type 1 has an invalid length. [ 555.275117][T21735] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4572'. [ 555.284241][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 555.295134][T21743] netlink: 'syz.3.4571': attribute type 11 has an invalid length. [ 555.326093][T21743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4571'. [ 555.576076][T21759] tipc: Enabled bearer , priority 0 [ 555.583530][T21759] syzkaller0: entered promiscuous mode [ 555.589110][T21759] syzkaller0: entered allmulticast mode [ 555.669478][T21767] tipc: Resetting bearer [ 555.722452][T21759] tipc: Enabling of bearer rejected, already enabled [ 555.834665][T21759] tipc: Resetting bearer [ 555.896584][T21759] tipc: Disabling bearer [ 556.404311][T21810] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 556.417407][T21810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.466044][T21838] nbd: must specify a size in bytes for the device [ 557.493185][T21843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.667345][T21850] netlink: 'syz.2.4606': attribute type 24 has an invalid length. [ 557.698001][T21853] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 557.881982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.954301][T21866] netlink: 'syz.4.4607': attribute type 16 has an invalid length. [ 558.038560][T21869] netlink: 'syz.2.4610': attribute type 7 has an invalid length. [ 558.429546][T21895] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 558.430131][T21893] IPVS: stopping master sync thread 21895 ... [ 558.479427][T21898] __nla_validate_parse: 12 callbacks suppressed [ 558.479445][T21898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4620'. [ 558.516994][T21900] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4617'. [ 558.716678][T21913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4623'. [ 558.739057][T21913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4623'. [ 558.955746][T21919] tipc: Enabled bearer , priority 0 [ 559.002213][T21919] syzkaller0: entered promiscuous mode [ 559.022261][T21919] syzkaller0: entered allmulticast mode [ 559.054932][T21919] tipc: Resetting bearer [ 559.081465][T21932] tipc: Enabling of bearer rejected, already enabled [ 559.113107][T21928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4630'. [ 559.128904][T21932] tipc: Resetting bearer [ 559.170027][T21932] tipc: Disabling bearer [ 559.373139][T21944] IPv6: sit1: Disabled Multicast RS [ 559.402159][T21944] sit1: entered allmulticast mode [ 559.647142][T21965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.519190][T22021] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4654'. [ 560.546789][T22023] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4656'. [ 560.568886][T22016] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4654'. [ 560.601300][T22016] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4654'. [ 560.669940][T22019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.689108][T22011] tipc: Cannot configure node identity twice [ 560.874869][T22035] netlink: 344 bytes leftover after parsing attributes in process `syz.2.4659'. [ 560.929209][T22044] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.966582][T22044] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 561.005743][T22050] netlink: 'syz.2.4664': attribute type 1 has an invalid length. [ 561.014421][T22050] netlink: 'syz.2.4664': attribute type 1 has an invalid length. [ 561.047110][T22053] netlink: 'syz.2.4664': attribute type 1 has an invalid length. [ 561.047684][T22052] netlink: 'syz.0.4665': attribute type 1 has an invalid length. [ 561.077347][T22052] netlink: 'syz.0.4665': attribute type 2 has an invalid length. [ 561.089492][T22053] netlink: 'syz.2.4664': attribute type 1 has an invalid length. [ 561.266376][T22069] geneve2: entered promiscuous mode [ 561.459267][T22084] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 561.630782][T22091] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 561.671577][T22091] netlink: 'syz.4.4675': attribute type 10 has an invalid length. [ 561.961052][T22107] netlink: 'syz.3.4681': attribute type 11 has an invalid length. [ 561.986195][T22107] netlink: 'syz.3.4681': attribute type 11 has an invalid length. [ 562.147836][T22122] netlink: 'syz.2.4684': attribute type 7 has an invalid length. [ 562.161158][T22122] netlink: 'syz.2.4684': attribute type 8 has an invalid length. [ 562.174081][T22125] netlink: 'syz.2.4684': attribute type 7 has an invalid length. [ 562.245874][T22129] tc_dump_action: action bad kind [ 562.871427][T22173] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 562.986302][T22183] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 563.928042][T22220] tipc: Enabled bearer , priority 0 [ 563.962707][T22222] syzkaller0: entered promiscuous mode [ 563.976693][T22222] syzkaller0: entered allmulticast mode [ 564.149851][T22233] dvmrp1: entered allmulticast mode [ 564.159633][T22222] tipc: Resetting bearer [ 564.184127][T22229] __nla_validate_parse: 19 callbacks suppressed [ 564.184145][T22229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4714'. [ 564.184990][T22222] tipc: Disabling bearer [ 564.219664][T22233] dvmrp1: left allmulticast mode [ 564.408004][T22247] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4720'. [ 564.520176][T22255] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4722'. [ 564.727060][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4728'. [ 565.798932][T22306] syzkaller0: entered promiscuous mode [ 565.822558][T22306] syzkaller0: entered allmulticast mode [ 566.012292][T22299] infiniband syz!: set down [ 566.021495][T22299] infiniband syz!: added team_slave_0 [ 566.065992][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4739'. [ 566.085705][T22299] RDS/IB: syz!: added [ 566.089976][T22299] smc: adding ib device syz! with port count 1 [ 566.103266][T22299] smc: ib device syz! port 1 has pnetid [ 567.544562][T22320] geneve2: entered promiscuous mode [ 567.549893][T22320] geneve2: entered allmulticast mode [ 567.577007][T22324] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4741'. [ 567.586845][T22324] netlink: zone id is out of range [ 567.593025][T22324] netlink: zone id is out of range [ 567.598340][T22324] netlink: get zone limit has 8 unknown bytes [ 567.769670][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 567.794922][T22331] netlink: 50 bytes leftover after parsing attributes in process `syz.3.4743'. [ 567.821395][T22331] netlink: 50 bytes leftover after parsing attributes in process `syz.3.4743'. [ 567.960054][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4742'. [ 569.088687][T22381] team0 (unregistering): Port device team_slave_0 removed [ 569.104641][T22381] team0 (unregistering): Port device team_slave_1 removed [ 569.125578][T22381] team0 (unregistering): Port device geneve0 removed [ 569.310601][T22398] __nla_validate_parse: 2 callbacks suppressed [ 569.310619][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4758'. [ 570.180903][T22429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.190158][T22429] team0: Port device bond0 added [ 570.201643][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 570.398194][T22442] validate_nla: 4 callbacks suppressed [ 570.398213][T22442] netlink: 'syz.0.4770': attribute type 7 has an invalid length. [ 570.408130][T22444] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4772'. [ 570.750165][T22451] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4775'. [ 570.946097][T22465] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4779'. [ 571.112299][T22474] netlink: zone id is out of range [ 571.124980][T22473] netlink: zone id is out of range [ 571.146350][T22474] netlink: zone id is out of range [ 571.154746][T22476] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4783'. [ 571.161258][T22473] netlink: zone id is out of range [ 571.218011][T22474] netlink: zone id is out of range [ 571.219291][T22473] netlink: zone id is out of range [ 571.261341][T22473] netlink: zone id is out of range [ 571.808112][T22502] pim6reg: entered allmulticast mode [ 571.827066][T22502] pim6reg: left allmulticast mode [ 571.861303][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4794'. [ 571.944407][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4794'. [ 572.079377][T22515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4795'. [ 572.470366][T22537] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.4803'. [ 572.629646][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4806'. [ 572.683209][T22549] hsr_slave_0: left promiscuous mode [ 573.159680][T22572] netlink: 'syz.1.4811': attribute type 4 has an invalid length. [ 573.177340][T22577] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 574.292534][T22639] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 574.477784][T22645] delete_channel: no stack [ 574.526093][T22647] __nla_validate_parse: 46 callbacks suppressed [ 574.526115][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4833'. [ 574.604960][T22647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4833'. [ 574.676230][T22659] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4839'. [ 574.782205][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4842'. [ 574.822691][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4842'. [ 574.854016][T22674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4843'. [ 575.072836][T22685] net_ratelimit: 23 callbacks suppressed [ 575.072856][T22685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.162375][T22692] netlink: 'syz.4.4849': attribute type 8 has an invalid length. [ 575.235384][T22692] tipc: Enabled bearer , priority 10 [ 575.254124][T22699] netlink: 'syz.4.4849': attribute type 8 has an invalid length. [ 575.272476][T22698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4850'. [ 575.372424][T22711] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4852'. [ 575.428631][T22714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4853'. [ 575.443301][T22716] Bluetooth: MGMT ver 1.23 [ 575.509601][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4855'. [ 576.231640][T22753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.342254][T22759] bond0: (slave syz_tun): Releasing backup interface [ 576.351447][T14055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.376007][T22762] sctp: [Deprecated]: syz.4.4866 (pid 22762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.376007][T22762] Use struct sctp_sack_info instead [ 576.389956][T14055] tipc: Node number set to 1257168102 [ 576.600131][T22759] bond0: (slave macvlan3): Releasing backup interface [ 576.646031][T22763] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 576.658735][T22759] veth1_vlan: left allmulticast mode [ 576.670799][T22759] bond6: (slave veth5): Releasing active interface [ 576.733374][T22766] team0: Mode changed to "activebackup" [ 576.739277][T22777] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 576.809927][T22759] vlan0: entered promiscuous mode [ 576.827098][T22759] team0: Port device vlan0 added [ 577.012958][T22789] netlink: 'syz.0.4873': attribute type 1 has an invalid length. [ 577.108364][T22790] bond8 (unregistering): Released all slaves [ 577.241607][T14062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.940902][T22852] netlink: 'syz.4.4892': attribute type 2 has an invalid length. [ 578.038754][T22857] netlink: 'syz.3.4894': attribute type 29 has an invalid length. [ 578.064141][T22857] netlink: 'syz.3.4894': attribute type 29 has an invalid length. [ 578.252038][T22867] netlink: 'syz.2.4898': attribute type 1 has an invalid length. [ 578.295907][T22867] team0: Device ip6gre2 is of different type [ 578.389546][T22870] netlink: 'syz.4.4899': attribute type 10 has an invalid length. [ 578.420125][T22867] team0: Device vti0 is of different type [ 578.526355][T22870] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 578.559293][T22879] batman_adv: batadv0: Interface deactivated: dummy0 [ 578.568273][T22879] batman_adv: batadv0: Removing interface: dummy0 [ 578.586230][T22879] bridge_slave_0: left allmulticast mode [ 578.593210][T22879] bridge_slave_0: left promiscuous mode [ 578.599196][T22879] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.610168][T22879] bridge_slave_1: left allmulticast mode [ 578.617465][T22879] bridge_slave_1: left promiscuous mode [ 578.623986][T22879] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.639849][T22879] bond0: (slave bond_slave_0): Releasing backup interface [ 578.653954][T22879] bond0: (slave bond_slave_1): Releasing backup interface [ 578.667525][T22879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.675858][T22879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.684407][T22879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.692924][T22879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.705896][T22879] bond0: (slave wlan1): Releasing backup interface [ 578.725266][T22879] bond5: (slave gretap3): Releasing active interface [ 578.738127][T22879] vlan2: left promiscuous mode [ 578.743530][T22879] bridge0: left promiscuous mode [ 578.748955][T22879] bridge5: port 1(vlan2) entered disabled state [ 578.904713][T22886] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 579.317681][T22911] netlink: 'syz.3.4913': attribute type 7 has an invalid length. [ 580.426805][T22985] bond1: entered promiscuous mode [ 580.429478][T22992] __nla_validate_parse: 14 callbacks suppressed [ 580.429494][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4932'. [ 580.453749][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 580.461117][T22985] bond1: entered allmulticast mode [ 580.468391][T22985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.567086][T22990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4934'. [ 580.663829][T23002] syzkaller1: entered promiscuous mode [ 580.669365][T23002] syzkaller1: entered allmulticast mode [ 580.697294][T23002] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4936'. [ 580.742353][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4937'. [ 580.771615][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4937'. [ 580.798445][T23007] netlink: 'syz.0.4937': attribute type 1 has an invalid length. [ 580.837298][T23007] netlink: 'syz.0.4937': attribute type 2 has an invalid length. [ 581.182930][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4945'. [ 581.191536][T23034] netlink: 'syz.1.4944': attribute type 4 has an invalid length. [ 581.209930][T23025] tipc: Enabled bearer , priority 0 [ 581.218811][T23025] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 581.227000][T23025] syzkaller0: entered promiscuous mode [ 581.233137][T23025] syzkaller0: entered allmulticast mode [ 581.303713][T23025] tipc: Resetting bearer [ 581.359127][T23021] tipc: Resetting bearer [ 581.466951][T23046] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4948'. [ 581.487490][T23046] netlink: zone id is out of range [ 581.496642][T23021] tipc: Disabling bearer [ 581.496988][T23046] netlink: get zone limit has 8 unknown bytes [ 581.810884][T23064] vlan3: entered promiscuous mode [ 581.831812][T23064] bridge0: entered promiscuous mode [ 582.038677][T23084] syzkaller1: entered promiscuous mode [ 582.048391][T23084] syzkaller1: entered allmulticast mode [ 582.159142][T23085] syzkaller0: entered promiscuous mode [ 582.165088][T23085] syzkaller0: entered allmulticast mode [ 582.650818][T23094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4959'. [ 582.856800][T23106] netlink: 'syz.3.4965': attribute type 1 has an invalid length. [ 582.969233][T23106] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.010915][T23113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.041779][T23117] bond3: (slave ip6erspan0): making interface the new active one [ 583.051080][T23117] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 583.173164][T23132] netlink: 'syz.0.4970': attribute type 11 has an invalid length. [ 583.181207][T23132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4970'. [ 583.298394][T23139] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 584.042380][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4984'. [ 585.357996][T23207] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 585.652642][ T30] audit: type=1804 audit(1755086007.429:12): pid=23216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4997" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1743 res=1 errno=0 [ 585.713060][ T30] audit: type=1800 audit(1755086007.429:13): pid=23216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4997" name="cgroup.controllers" dev="tmpfs" ino=1743 res=0 errno=0 [ 585.758983][T23218] __nla_validate_parse: 3 callbacks suppressed [ 585.759004][T23218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4998'. [ 586.026939][T23229] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5003'. [ 586.030146][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5004'. [ 586.123835][T23235] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5005'. [ 586.220723][T23242] pim6reg: entered allmulticast mode [ 586.254647][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5005'. [ 586.263841][T23241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5005'. [ 586.310637][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5005'. [ 586.380016][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'. [ 586.408087][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.438076][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.443648][T23252] netlink: 'syz.2.5010': attribute type 1 has an invalid length. [ 586.462100][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.497191][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.514672][T23252] netlink: 'syz.2.5010': attribute type 2 has an invalid length. [ 586.523400][T23257] netlink: 'syz.1.5009': attribute type 1 has an invalid length. [ 587.007897][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5016'. [ 587.238310][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'. [ 587.295065][T23296] nbd: nbd0 already in use [ 587.306716][T23289] bond4: entered promiscuous mode [ 587.312531][T23289] bond4: entered allmulticast mode [ 587.312621][T23296] nbd: nbd0 already in use [ 587.318220][T23289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.333903][T23296] nbd: nbd0 already in use [ 587.453916][T23289] bond4 (unregistering): Released all slaves [ 587.612838][T23307] netdevsim netdevsim0 : entered allmulticast mode [ 587.870196][T23314] can: request_module (can-proto-0) failed. [ 588.157431][T23339] netlink: 'syz.1.5035': attribute type 1 has an invalid length. [ 588.459505][T23356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.871577][T23357] netlink: 'syz.4.5037': attribute type 1 has an invalid length. [ 588.908089][T23357] netlink: 'syz.4.5037': attribute type 2 has an invalid length. [ 588.946952][T23357] netlink: 'syz.4.5037': attribute type 1 has an invalid length. [ 588.988262][T23356] netlink: 'syz.4.5037': attribute type 1 has an invalid length. [ 589.031402][T23356] netlink: 'syz.4.5037': attribute type 2 has an invalid length. [ 589.048487][T23356] netlink: 'syz.4.5037': attribute type 1 has an invalid length. [ 589.118752][T23364] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 589.254734][T23372] FAULT_INJECTION: forcing a failure. [ 589.254734][T23372] name failslab, interval 1, probability 0, space 0, times 1 [ 589.311137][T23372] CPU: 0 UID: 0 PID: 23372 Comm: syz.3.5043 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 589.311162][T23372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.311172][T23372] Call Trace: [ 589.311179][T23372] [ 589.311187][T23372] dump_stack_lvl+0x189/0x250 [ 589.311215][T23372] ? __pfx____ratelimit+0x10/0x10 [ 589.311237][T23372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.311256][T23372] ? __pfx__printk+0x10/0x10 [ 589.311281][T23372] ? __lock_acquire+0xab9/0xd20 [ 589.311315][T23372] should_fail_ex+0x414/0x560 [ 589.311340][T23372] should_failslab+0xa8/0x100 [ 589.311367][T23372] kmem_cache_alloc_noprof+0x73/0x3c0 [ 589.311388][T23372] ? skb_clone+0x212/0x3a0 [ 589.311409][T23372] skb_clone+0x212/0x3a0 [ 589.311429][T23372] __netlink_deliver_tap+0x404/0x850 [ 589.311464][T23372] ? netlink_deliver_tap+0x2e/0x1b0 [ 589.311488][T23372] netlink_deliver_tap+0x19c/0x1b0 [ 589.311512][T23372] netlink_unicast+0x7fa/0x9e0 [ 589.311542][T23372] ? __pfx_netlink_unicast+0x10/0x10 [ 589.311565][T23372] ? netlink_sendmsg+0x642/0xb30 [ 589.311593][T23372] ? skb_put+0x11b/0x210 [ 589.311620][T23372] netlink_sendmsg+0x805/0xb30 [ 589.311650][T23372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.311675][T23372] ? aa_sock_msg_perm+0xf1/0x1d0 [ 589.311701][T23372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.311719][T23372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.311742][T23372] __sock_sendmsg+0x219/0x270 [ 589.311765][T23372] ____sys_sendmsg+0x505/0x830 [ 589.311796][T23372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.311830][T23372] ? import_iovec+0x74/0xa0 [ 589.311852][T23372] ___sys_sendmsg+0x21f/0x2a0 [ 589.311879][T23372] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.311941][T23372] ? __fget_files+0x2a/0x420 [ 589.311965][T23372] ? __fget_files+0x3a0/0x420 [ 589.311998][T23372] __x64_sys_sendmsg+0x19b/0x260 [ 589.312024][T23372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.312061][T23372] ? rcu_is_watching+0x15/0xb0 [ 589.312079][T23372] ? trace_sys_enter+0x25/0x100 [ 589.312111][T23372] do_syscall_64+0xfa/0x3b0 [ 589.312131][T23372] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.312151][T23372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.312169][T23372] ? clear_bhb_loop+0x60/0xb0 [ 589.312191][T23372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.312210][T23372] RIP: 0033:0x7f91c2d8ebe9 [ 589.312227][T23372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.312243][T23372] RSP: 002b:00007f91c3b60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.312261][T23372] RAX: ffffffffffffffda RBX: 00007f91c2fb5fa0 RCX: 00007f91c2d8ebe9 [ 589.312274][T23372] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 589.312285][T23372] RBP: 00007f91c3b60090 R08: 0000000000000000 R09: 0000000000000000 [ 589.312296][T23372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.312306][T23372] R13: 00007f91c2fb6038 R14: 00007f91c2fb5fa0 R15: 00007ffc5670f988 [ 589.312336][T23372] [ 589.844255][T23395] netlink: 'syz.2.5049': attribute type 6 has an invalid length. [ 589.852546][T23395] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 589.910289][T23395] netlink: 'syz.2.5049': attribute type 6 has an invalid length. [ 590.020002][T23404] pim6reg1: entered promiscuous mode [ 590.025777][T23404] pim6reg1: entered allmulticast mode [ 590.138440][T23407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 590.163779][T23410] vlan2: entered allmulticast mode [ 590.169280][T23410] veth1: entered allmulticast mode [ 590.190192][T23410] bond4: (slave vlan2): making interface the new active one [ 590.255164][T23410] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 590.409817][T23419] smc: net device erspan0 applied user defined pnetid SYZ0 [ 590.426581][T23419] netlink: 'syz.4.5056': attribute type 11 has an invalid length. [ 590.435925][T23426] FAULT_INJECTION: forcing a failure. [ 590.435925][T23426] name failslab, interval 1, probability 0, space 0, times 0 [ 590.450172][T23426] CPU: 1 UID: 0 PID: 23426 Comm: syz.3.5058 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 590.450196][T23426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.450207][T23426] Call Trace: [ 590.450214][T23426] [ 590.450222][T23426] dump_stack_lvl+0x189/0x250 [ 590.450249][T23426] ? __pfx____ratelimit+0x10/0x10 [ 590.450271][T23426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.450293][T23426] ? __pfx__printk+0x10/0x10 [ 590.450320][T23426] ? __pfx___might_resched+0x10/0x10 [ 590.450339][T23426] ? fs_reclaim_acquire+0x7d/0x100 [ 590.450370][T23426] should_fail_ex+0x414/0x560 [ 590.450397][T23426] should_failslab+0xa8/0x100 [ 590.450424][T23426] __kmalloc_noprof+0xcb/0x4f0 [ 590.450446][T23426] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 590.450473][T23426] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 590.450500][T23426] genl_family_rcv_msg_doit+0xb8/0x300 [ 590.450527][T23426] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 590.450563][T23426] ? apparmor_capable+0x137/0x1b0 [ 590.450585][T23426] ? bpf_lsm_capable+0x9/0x20 [ 590.450608][T23426] ? security_capable+0x7e/0x2e0 [ 590.450639][T23426] genl_rcv_msg+0x60e/0x790 [ 590.450664][T23426] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.450681][T23426] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 590.450704][T23426] ? __pfx_nl80211_start_ap+0x10/0x10 [ 590.450720][T23426] ? __pfx_nl80211_post_doit+0x10/0x10 [ 590.450746][T23426] ? __asan_memcpy+0x40/0x70 [ 590.450765][T23426] ? __pfx_ref_tracker_free+0x10/0x10 [ 590.450793][T23426] netlink_rcv_skb+0x208/0x470 [ 590.450814][T23426] ? __lock_acquire+0xab9/0xd20 [ 590.450840][T23426] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.450859][T23426] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.450903][T23426] ? down_read+0x1ad/0x2e0 [ 590.450929][T23426] genl_rcv+0x28/0x40 [ 590.450955][T23426] netlink_unicast+0x82f/0x9e0 [ 590.450982][T23426] ? __pfx_netlink_unicast+0x10/0x10 [ 590.451003][T23426] ? netlink_sendmsg+0x642/0xb30 [ 590.451023][T23426] ? skb_put+0x11b/0x210 [ 590.451049][T23426] netlink_sendmsg+0x805/0xb30 [ 590.451082][T23426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.451108][T23426] ? aa_sock_msg_perm+0xf1/0x1d0 [ 590.451133][T23426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.451151][T23426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.451173][T23426] __sock_sendmsg+0x219/0x270 [ 590.451197][T23426] ____sys_sendmsg+0x505/0x830 [ 590.451226][T23426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.451261][T23426] ? import_iovec+0x74/0xa0 [ 590.451281][T23426] ___sys_sendmsg+0x21f/0x2a0 [ 590.451308][T23426] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.451375][T23426] ? __fget_files+0x2a/0x420 [ 590.451399][T23426] ? __fget_files+0x3a0/0x420 [ 590.451436][T23426] __x64_sys_sendmsg+0x19b/0x260 [ 590.451464][T23426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.451504][T23426] ? rcu_is_watching+0x15/0xb0 [ 590.451524][T23426] ? trace_sys_enter+0x25/0x100 [ 590.451569][T23426] do_syscall_64+0xfa/0x3b0 [ 590.451591][T23426] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.451612][T23426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.451631][T23426] ? clear_bhb_loop+0x60/0xb0 [ 590.451654][T23426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.451672][T23426] RIP: 0033:0x7f91c2d8ebe9 [ 590.451690][T23426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.451705][T23426] RSP: 002b:00007f91c3b60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.451725][T23426] RAX: ffffffffffffffda RBX: 00007f91c2fb5fa0 RCX: 00007f91c2d8ebe9 [ 590.451738][T23426] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 590.451749][T23426] RBP: 00007f91c3b60090 R08: 0000000000000000 R09: 0000000000000000 [ 590.451760][T23426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.451770][T23426] R13: 00007f91c2fb6038 R14: 00007f91c2fb5fa0 R15: 00007ffc5670f988 [ 590.451802][T23426] [ 590.932046][T23438] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 591.014923][T23447] __nla_validate_parse: 13 callbacks suppressed [ 591.014940][T23447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5064'. [ 591.032549][T23447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5064'. [ 591.323008][T23468] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5069'. [ 591.366475][T23469] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 591.435328][T23480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5071'. [ 591.724118][T23493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5077'. [ 592.115400][T23509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 592.156133][T23516] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5085'. [ 592.240461][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5085'. [ 592.260493][T23527] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.5087'. [ 592.285085][T23527] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.5087'. [ 592.814432][T23550] syzkaller0: entered promiscuous mode [ 592.829075][T23550] syzkaller0: entered allmulticast mode [ 592.900560][T23562] tipc: Enabling of bearer rejected, failed to enable media [ 595.606317][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.641351][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.662708][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.686721][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.703801][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.717225][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.717557][T23609] validate_nla: 8 callbacks suppressed [ 595.717571][T23609] netlink: 'syz.3.5108': attribute type 1 has an invalid length. [ 595.729167][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.786209][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.842495][T23609] bond4: entered promiscuous mode [ 595.848087][T23609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.858663][T23613] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 596.868889][T23653] __nla_validate_parse: 5 callbacks suppressed [ 596.868910][T23653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5119'. [ 597.101421][T23653] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 597.328799][T23669] netlink: 'syz.1.5126': attribute type 1 has an invalid length. [ 597.354862][T23669] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5126'. [ 597.688081][T23703] netlink: 'syz.3.5136': attribute type 1 has an invalid length. [ 597.761546][T23703] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5136'. [ 597.770690][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5136'. [ 597.821565][T23716] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5139'. [ 598.099019][T23739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5146'. [ 598.405172][T23762] netlink: 'syz.1.5148': attribute type 10 has an invalid length. [ 598.518082][T23768] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 598.785499][T23782] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5158'. [ 599.030818][T23789] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5161'. [ 599.054753][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5161'. [ 599.072574][T23802] sctp: [Deprecated]: syz.3.5164 (pid 23802) Use of int in maxseg socket option. [ 599.072574][T23802] Use struct sctp_assoc_value instead [ 599.234809][T23811] netlink: 'syz.1.5166': attribute type 2 has an invalid length. [ 599.588103][T23835] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5172'. [ 599.930414][T23852] pim6reg: entered allmulticast mode [ 599.938733][T23853] pim6reg: left allmulticast mode [ 600.996161][T23912] nbd: nbd1 already in use [ 601.360664][T23930] pim6reg: left allmulticast mode [ 601.658408][T23935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.903060][T23963] __nla_validate_parse: 10 callbacks suppressed [ 601.903078][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5207'. [ 601.945954][T23963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5207'. [ 602.029574][T23970] netem: incorrect gi model size [ 602.039053][T23971] sctp: [Deprecated]: syz.0.5210 (pid 23971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.039053][T23971] Use struct sctp_sack_info instead [ 602.040827][T23970] netem: change failed [ 602.067642][T23972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5208'. [ 602.080672][T23971] sctp: [Deprecated]: syz.0.5210 (pid 23971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.080672][T23971] Use struct sctp_sack_info instead [ 602.089640][T23970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5209'. [ 602.113346][T23971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5210'. [ 602.124760][T23971] netlink: 73 bytes leftover after parsing attributes in process `syz.0.5210'. [ 602.134384][T23971] netlink: 198 bytes leftover after parsing attributes in process `syz.0.5210'. [ 602.144061][T23971] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.5210'. [ 602.154220][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'. [ 602.165000][T23971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5210'. [ 602.328474][T23986] erspan0: entered promiscuous mode [ 602.336559][T23986] erspan0: left promiscuous mode [ 602.568060][T24000] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 602.955050][T24015] veth0: entered promiscuous mode [ 603.206537][T24027] netlink: 'syz.0.5228': attribute type 21 has an invalid length. [ 603.267715][T24027] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 603.918704][T24058] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 603.976225][T24062] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 603.985010][T24062] netlink: 'syz.3.5237': attribute type 2 has an invalid length. [ 604.001123][T24062] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 604.124519][T24068] lo: entered promiscuous mode [ 604.129606][T24068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.454434][T24082] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20004 [ 605.138908][T24124] tipc: Enabled bearer , priority 0 [ 605.263770][T24125] syzkaller0: entered promiscuous mode [ 605.269608][T24125] syzkaller0: entered allmulticast mode [ 605.276548][T24125] tipc: Resetting bearer [ 605.284738][T24123] tipc: Resetting bearer Connection to 10.128.0.139 closed by remote host. [ 607.584858][T24123] tipc: Disabling bearer [ 608.100467][ T3484] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 608.544466][ T3484] bond1 (unregistering): Released all slaves [ 608.661920][ T3484] bond2 (unregistering): Released all slaves [ 608.769080][ T3484] team0: Port device bond0 removed [ 608.776048][ T3484] bond0 (unregistering): Released all slaves [ 608.883066][ T3484] bond3 (unregistering): Released all slaves [ 608.988161][ T3484] bond4 (unregistering): Released all slaves [ 609.106249][ T3484] tipc: Left network mode [ 609.430048][ T3484] hsr_slave_0: left promiscuous mode [ 610.505438][ T3484] IPVS: stop unused estimator thread 0... [ 610.622949][ T3484] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.632918][ T3484] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 610.643683][ T3484] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 610.689594][ T3484] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.700556][ T3484] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 610.710497][ T3484] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 610.756112][ T3484] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.766298][ T3484] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 610.776255][ T3484] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 610.838685][ T3484] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.849165][ T3484] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 610.859564][ T3484] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 611.007429][ T3484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.087069][ T3484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.157067][ T3484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.232595][ T3484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.354367][ T3484] bond0 (unregistering): Released all slaves [ 612.369660][ T3484] bond1 (unregistering): Released all slaves [ 612.477733][ T3484] bond2 (unregistering): Released all slaves [ 612.490857][ T3484] bond3 (unregistering): Released all slaves [ 612.595505][ T3484] bond4 (unregistering): Released all slaves [ 612.698188][ T3484] bond5 (unregistering): Released all slaves [ 612.711124][ T3484] bond6 (unregistering): Released all slaves [ 612.723811][ T3484] bond7 (unregistering): Released all slaves [ 613.358251][T11141] smc: removing ib device syz1 [ 613.365111][ T3484] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.377014][ T3484] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.387691][ T3484] ` (unregistering): Released all slaves [ 613.399966][ T3484] bond0 (unregistering): Released all slaves [ 613.413181][ T3484] bond1 (unregistering): Released all slaves [ 613.431219][ T3484] bond2 (unregistering): Released all slaves [ 613.445705][ T3484] bond3 (unregistering): Released all slaves [ 613.553662][ T3484] bond4 (unregistering): (slave vlan2): Releasing active interface [ 613.565491][ T3484] bond4 (unregistering): Released all slaves [ 614.581298][ T3484] tipc: Disabling bearer [ 614.593192][ T3484] tipc: Left network mode [ 614.612593][ T3484] tipc: Disabling bearer [ 614.629202][ T3484] tipc: Left network mode [ 615.108216][ T3484] hsr_slave_1: left promiscuous mode [ 615.123430][ T3484] dummy0: left promiscuous mode [ 615.129248][ T3484] batadv_slave_1: left promiscuous mode [ 615.138283][ T3484] hsr_slave_0: left promiscuous mode [ 615.144601][ T3484] hsr_slave_1: left promiscuous mode [ 615.150317][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.157803][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.166089][ T3484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.173688][ T3484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.209324][ T3484] vlan0: left allmulticast mode [ 615.214301][ T3484] veth0_vlan: left allmulticast mode [ 615.219592][ T3484] vlan0: left promiscuous mode [ 615.225502][ T3484] veth1_macvtap: left promiscuous mode [ 615.231414][ T3484] veth0_macvtap: left promiscuous mode [ 615.237045][ T3484] veth1_vlan: left promiscuous mode [ 615.245341][ T3484] veth1_macvtap: left promiscuous mode [ 615.252418][ T3484] veth0_macvtap: left promiscuous mode [ 615.257940][ T3484] veth1_vlan: left promiscuous mode [ 615.358769][ T3484] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 615.370661][ T3484] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 615.380186][ T3484] CPU: 0 UID: 0 PID: 3484 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 615.391965][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.402013][ T3484] Workqueue: netns cleanup_net [ 615.406788][ T3484] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 615.412404][ T3484] Code: ff ff ff e8 13 d6 41 01 89 c5 31 ff 89 c6 e8 08 cb 88 f7 85 ed 74 45 e8 bf c6 88 f7 eb 05 e8 b8 c6 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 42 31 ec f7 49 8b 2c 24 49 8d 7c [ 615.432095][ T3484] RSP: 0018:ffffc9000c0e7098 EFLAGS: 00010206 [ 615.438140][ T3484] RAX: 000000001fffe000 RBX: 1ffff1100af66102 RCX: ffff888030559e00 [ 615.446091][ T3484] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 615.454043][ T3484] RBP: 0000000000000001 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6 [ 615.462000][ T3484] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: 00000000ffff0000 [ 615.470254][ T3484] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888057b30810 [ 615.478210][ T3484] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 615.487201][ T3484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.493775][ T3484] CR2: 00007f3e2b3f84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 615.501741][ T3484] Call Trace: [ 615.505021][ T3484] [ 615.507933][ T3484] __ipv6_dev_mc_dec+0x2e4/0x330 [ 615.512852][ T3484] __ipv6_ifa_notify+0x43d/0xac0 [ 615.517769][ T3484] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 615.523206][ T3484] ? __lock_acquire+0xab9/0xd20 [ 615.528041][ T3484] ? __local_bh_enable_ip+0x12d/0x1c0 [ 615.533397][ T3484] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.538749][ T3484] ? __local_bh_enable_ip+0x12d/0x1c0 [ 615.544097][ T3484] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 615.549798][ T3484] addrconf_ifdown+0xe69/0x1880 [ 615.554636][ T3484] ? tls_dev_event+0x717/0xec0 [ 615.559553][ T3484] ? __pfx_addrconf_ifdown+0x10/0x10 [ 615.564825][ T3484] addrconf_notify+0x1bc/0x1010 [ 615.569668][ T3484] notifier_call_chain+0x1b6/0x3e0 [ 615.574758][ T3484] netif_close_many+0x29c/0x410 [ 615.579586][ T3484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.585545][ T3484] ? __pfx_netif_close_many+0x10/0x10 [ 615.590914][ T3484] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 615.597246][ T3484] ? __local_bh_enable_ip+0x12d/0x1c0 [ 615.602613][ T3484] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 615.608328][ T3484] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 615.615072][ T3484] ? unregister_netdevice_queue+0x1b3/0x380 [ 615.620956][ T3484] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 615.627217][ T3484] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 615.633364][ T3484] default_device_exit_batch+0x819/0x890 [ 615.638991][ T3484] ? __pfx___might_resched+0x10/0x10 [ 615.644257][ T3484] ? __pfx_default_device_exit_batch+0x10/0x10 [ 615.650435][ T3484] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 615.655881][ T3484] ? net_generic+0x1e/0x240 [ 615.660384][ T3484] ? __pfx_default_device_exit_batch+0x10/0x10 [ 615.666529][ T3484] ops_undo_list+0x525/0x990 [ 615.671119][ T3484] ? __pfx_ops_undo_list+0x10/0x10 [ 615.676325][ T3484] ? do_raw_spin_unlock+0x122/0x240 [ 615.681521][ T3484] cleanup_net+0x4c5/0x800 [ 615.685942][ T3484] ? __pfx_cleanup_net+0x10/0x10 [ 615.690910][ T3484] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.696105][ T3484] ? process_scheduled_works+0x9ef/0x17b0 [ 615.701810][ T3484] ? process_scheduled_works+0x9ef/0x17b0 [ 615.707543][ T3484] process_scheduled_works+0xade/0x17b0 [ 615.713095][ T3484] ? __pfx_process_scheduled_works+0x10/0x10 [ 615.719073][ T3484] worker_thread+0x8a0/0xda0 [ 615.723645][ T3484] kthread+0x70e/0x8a0 [ 615.727696][ T3484] ? __pfx_worker_thread+0x10/0x10 [ 615.732786][ T3484] ? __pfx_kthread+0x10/0x10 [ 615.737356][ T3484] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.742546][ T3484] ? lockdep_hardirqs_on+0x9c/0x150 [ 615.747757][ T3484] ? __pfx_kthread+0x10/0x10 [ 615.752331][ T3484] ret_from_fork+0x3fc/0x770 [ 615.756912][ T3484] ? __pfx_ret_from_fork+0x10/0x10 [ 615.762008][ T3484] ? __switch_to_asm+0x39/0x70 [ 615.766773][ T3484] ? __switch_to_asm+0x33/0x70 [ 615.771534][ T3484] ? __pfx_kthread+0x10/0x10 [ 615.776105][ T3484] ret_from_fork_asm+0x1a/0x30 [ 615.780856][ T3484] [ 615.783864][ T3484] Modules linked in: [ 615.788825][ T3484] ---[ end trace 0000000000000000 ]--- [ 615.794659][ T3484] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 615.800303][ T3484] Code: ff ff ff e8 13 d6 41 01 89 c5 31 ff 89 c6 e8 08 cb 88 f7 85 ed 74 45 e8 bf c6 88 f7 eb 05 e8 b8 c6 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 42 31 ec f7 49 8b 2c 24 49 8d 7c [ 615.820334][ T3484] RSP: 0018:ffffc9000c0e7098 EFLAGS: 00010206 [ 615.826713][ T3484] RAX: 000000001fffe000 RBX: 1ffff1100af66102 RCX: ffff888030559e00 [ 615.834881][ T3484] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 615.843189][ T3484] RBP: 0000000000000001 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6 [ 615.851432][ T3484] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: 00000000ffff0000 [ 615.859388][ T3484] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888057b30810 [ 615.867369][ T3484] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 615.876459][ T3484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.883368][ T3484] CR2: 00007f3e2b3f84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 615.891698][ T3484] Kernel panic - not syncing: Fatal exception [ 615.898003][ T3484] Kernel Offset: disabled [ 615.902316][ T3484] Rebooting in 86400 seconds..