last executing test programs: 10.973757229s ago: executing program 4 (id=2783): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) close(0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x1, 0x30, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 9.916194599s ago: executing program 4 (id=2801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040801}, 0x20008040) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r3, 0x0, 0xffffffff004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r5 = accept4$tipc(r0, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010003b15000000000000000000000000e355a80942368660c468464855d220e58da2e8457c72d05c739f4d0ca221769b0c4bd1e4fe8227a6d362fbe0da6a3cc8c92297d2a64ab298f3503c244d4cdaeb163054eb86fd5980724c148d1d2eb95784b0670bffb5c627a8f5c1fb5910ffad0f308b216c", @ANYRES32=0x0, @ANYBLOB="0000000001500100140012800b00010062726964676500000400028008000a00", @ANYRES16=r4, @ANYBLOB="925ca0af7d4bfb03406c14c273f9f257a09756a909dc6a7de77f459f7bd89117600e4d"], 0x3c}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 8.761562908s ago: executing program 4 (id=2817): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 8.124928023s ago: executing program 2 (id=2825): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000d00)={0x11ac, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x118c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+#/!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+)%]\\@.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\\&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9332}, @ETHTOOL_A_BITSET_VALUE={0x7e, 0x4, "e448e4b74dbec9a7150e9b0ea23575c858b7ea1f0afcc81adff28a8960e24f399a0971a1599bd2c947010c94f3fe173415902fcbe2d3f034d396062dc57816f1f2896cdc45b36fcdda26b39bc873e684d62d11c32dfd895184004cc41495480fd031beb301b42baaa5e8d3b7916709622d5e848ae728766cb932"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xef8}]}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 7.975549834s ago: executing program 2 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000100)=0x10, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 7.681956897s ago: executing program 2 (id=2832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) 7.44428676s ago: executing program 2 (id=2834): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) (async) syz_emit_ethernet(0x1ce, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) 7.36658397s ago: executing program 2 (id=2836): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r2, &(0x7f0000000300)=""/212, 0xd4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x4808) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f00000003c0)={0x14ae4701}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x4000000) close(r0) sendto$inet6(r2, &(0x7f0000000240)="658ca8370c9de698e4fba8d395ed70b4ec67234d66", 0x15, 0x8045, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @private2, 0x3}, 0x1c) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)="a976cc", 0x3}], 0x1, 0x1e9b, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd006}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 7.305487678s ago: executing program 4 (id=2837): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket(0x2a, 0x2, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.19285953s ago: executing program 0 (id=2838): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000005ec0)={0x0, 0x989680}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) connect(r0, &(0x7f0000000000)=@hci, 0x80) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008840) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48010) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 6.9055095s ago: executing program 4 (id=2839): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="a90d0100000000000000ef11f3c90ed7000005000000bdb26ec500001247c807662b5203fd5b7eae7a0b9e47a35e1b0cb39d6dcf134f21139356778f"], 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xc, "9d87d802459dbc68f11e8687"}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x2}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000001040)) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 6.525101909s ago: executing program 4 (id=2840): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x4a040080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x2, 0x2}) shutdown(r0, 0x1) 3.139883161s ago: executing program 3 (id=2862): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x9, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.76847942s ago: executing program 3 (id=2865): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xab, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, @tail_call, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfa2}]}, &(0x7f0000000600)='GPL\x00', 0x1000, 0x97, &(0x7f0000000640)=""/151, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xe, 0x7fffffff, 0xa}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x2, 0xe, 0x8}, {0x5, 0x1, 0xa, 0x9}, {0x5, 0x4, 0x5, 0xc}, {0x0, 0x3, 0xd, 0x2}], 0x10, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x12, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002f000000182a0000", @ANYRES32, @ANYBLOB="0000000000ffffffbf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sk_msg=0x7, r6, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x3, 0xffff8001, 0x6}, 0x10, r7, r8, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="000000000001000014001680100001800c000400feffffff0400000008001b"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) 2.520107525s ago: executing program 3 (id=2868): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 2.43808958s ago: executing program 3 (id=2869): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'gre0\x00', @remote}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.644049169s ago: executing program 1 (id=2873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x184}, 0x1, 0x0, 0x0, 0x400}, 0x2004d80c) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x184}, 0x1, 0x0, 0x0, 0x400}, 0x2004d80c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7210fbdbdf250300000008000300020000000500050010000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x20000000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7210fbdbdf250300000008000300020000000500050010000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x20000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xf}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xff81, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xff81, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltclass={0x24, 0x29, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffed, 0x7}, {0xe}, {0x2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'xfrm0\x00', &(0x7f0000000380)=@ethtool_stats={0x1d, 0x7, [0x4, 0x8000, 0x9, 0x7, 0x1, 0x2, 0xfffffffffffffe01]}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000640)={@private, @initdev}, &(0x7f0000000540)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000002000)=ANY=[@ANYRESHEX, @ANYBLOB="e483bb5d5ee9bcf2d30de817608e284ebbe054350cb26d6276084c7d99814559086b3b2f06a401eab89ecfa4fb6c000693ca58b4b4b6bd8bf45fe20abb6577b6096f3e380835781d8e07e32db17cf397dcb623277f26ee1ae359656d526c8f6c919823b0d68580a9e256f17c3385230c6a4f49f953838d21d8f47c3973a40fed9e1544a3ec135c1ff22ffb0200c680fb96a804e7941f5bc5facdb04ada9421df936cc09618", @ANYRES32, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400feffffff08000600", @ANYRESHEX=r2, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e696e000008000100", @ANYRES32=r6, @ANYBLOB="fc00028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0000004c000100240001006270665f686173685f66756e6300000000000000000000000000400000000000050003000b0000001c000400e10b054c020000000500fa07f7ffffff00004004000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYBLOB="79f47c52220aa2b58a47dc82f66755ccfde029fb8aed624b8ef9b04efdbfe18f532549c4e4067fbb46c3466a7dc01c6dd669d9d53a23d039c439996fd39f54aa38e60ad9cad6ea021c865a04f0d2aa06201656dac15a466d1007ffccee9d6624daf28cf7e2e5f6c36962a31fba50bce3d7fe1653294ae035f187381e82a7d7f97064cdead10d34d4585c86630971579735795b97b32d4f44be", @ANYBLOB="0400028008000100", @ANYRES64=r14, @ANYBLOB="68000280640001002400010062706643686173685f66756e63000000000000f369711b000000000000000000050003000b00000034000400ad01000f090000000f00c47f1794000005000b77020000000900620706000000d8450504fcffffff060003010900000008000100", @ANYRES32=0x0, @ANYBLOB="d40002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f9ffffff4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRESOCT=r10, @ANYBLOB="000202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="400001002480000000625f74787f686173685f746f5f706f72745f6d617070696e6700000007000400caf9de2839d50e7c103f1675306c9cee0cf657a0269c288882eeda22e854c5b1be1e1f48759919a194bd355913ae959d2b384c430e9e73dab730453c8ee1917b894c33ab1a5ff84811bc2c02fdebdfb402d7769999269f583e052d6fc002d613fd0d2d4ef7072cbf9efecdad7b69af8f3f156194db74e75b7bf0d4a8a25eda1527312b867450f53968dff6c3b792de23ce1b9dbca9c382fa46a6e5bb0ced914597cd056f2c2dadc10bb3839627854c9d13709d9cca5e9a6b5b352f850de179b03b282a02", @ANYRES32=r2, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000002000008000600", @ANYRES64, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000002000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="c58bfe6adbb10b60c5ed5d26ac765caae70b8f2c2616a0d9f59ad6e7b818cd39a8267e6ed8fb0fed308b0569a150ae794c83f24bb904ee08978993cf2b3cc12d9f32c6dc399f5c4a0a504f7a58cf322a2c0f05aff9c015a68d3ae498f07556da59d6eb356fe128e3610f49d71bc52e058acac7d002691f3893887e478a413b1c63386ad344587cfbba37416c1cac0d220ec19615d2ebe505b657e5e0feae29b4c65fd968b541eb4c5943f6061680ea8dc976af844d6e4512eb077c59902085501135e1f53554d080", @ANYRESHEX=r13, @ANYRES32=r13, @ANYRES32=r4, @ANYRESHEX, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES16=r3, @ANYBLOB], 0x6f0}, 0x1, 0x0, 0x0, 0x40080}, 0x4008010) 1.368301172s ago: executing program 0 (id=2874): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 1.29198527s ago: executing program 3 (id=2875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000f00)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r9, r0, 0x4}, 0x10) syz_80211_inject_frame(&(0x7f0000000600), &(0x7f0000000080)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @from_mac=@broadcast, @device_b, @random="cb050793c9c8", {0x6, 0x3}, "", @value={0x3, 0x0, 0x2, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x6f, "1b0997198c7ad6a3b65bb0e645b45e3a7b92baba7a159b36bf292596d1c95c27a187daad50811ea279922b78b62e99d0e2e2497e7b6eec675423f1d5858d3a07a71c18570ce6bbabeeb1860338ed937dd07666a98802cb72aba8aac74b6b40548c8ff7993f1329a1628021190b2dc9"}, {@device_b, @device_a, 0x4d, "a7f7f36a59173376705a741e19120adb933829320acab5d23899e82c80a2dc13ffd4e25a481dad652c03d624608ac6e5adbc51da8f72b992aa2dbf933074993a5260e6004cd006311023b30824"}, {@device_b, @broadcast, 0x74, "eecb8dd7690b27bada9f54309cc972d2d69b3f30c2afa397fd1a3647abdff734ccbe0d280acc68fb650bd15fc97e51c76ff32e97fecdfd50c357252b87ec1db6aa103cf40f90914ddd99e3d2a4e0208c4328f3cd8a961d3b2adf31a6cd7b18aed75bc3e7bb7f79b5bd987d5fc913a249bfeaa6fd"}, {@device_b, @device_a, 0x57, "1f390d1c349cb3408226615f6b4a687296d726eadff92ed6763f31948e4b38d5c71e1eb3436598447a6d7881807cec64daf1a0a174092a78a266be4cee81f5d0cc30e0fe8f193fc12e2fe8fdbd505987a75fd828c78c60"}, {@device_b, @device_a, 0x6c, "291f6821510959ed71a3b9e222b6f595c9a43344190481adee40db7b33b320a3acc6dc7ea153b7667ee5d98cf9f872ac984b7541570b3c1b5c176cf24ccaaa60394c4b7d7dce7c0e023e9697b7c95796a5a6f86f7cc7c7d1c8e8c1b06c1c0801402f5baa3c5747dcc8fbb3b5"}]}, 0x25e) 1.275387792s ago: executing program 0 (id=2876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.188067256s ago: executing program 1 (id=2877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c2ad8e98be22f76b333c631c72065771"}, @md5sig={0x13, 0x12, "3e485e6a2fef685077d0813fabcb4246"}]}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000000001010400000000000000000200000070000d8014000400fe88000000000000000000000000000114000497fe8000000000000000000000000000aa140005000000000000000000000000000000000008000200ffffffff14000500fe80000000000000000000000000002614000400fe800000000000000000000000000042240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x20008820) 1.081802776s ago: executing program 1 (id=2878): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)={r1, 0x3, 0x3, "2a9a9e"}, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r4, @ANYBLOB="8bafea1f010804001000128008000100677265000400028008000400730000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', r4, 0x2f, 0x2, 0x7f, 0x9, 0x1, @mcast2, @remote, 0x20, 0x1, 0x6, 0xd}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, 0xffffffffffffffff, 0x26}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0008179329fc997ad06a558f0428bd7000fbdbdf250200000005", @ANYRES32=r9, @ANYBLOB="06000a004e220000050002000a000000050002000200000008000600ac1e010106000a004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000014}, 0x40) 1.071281027s ago: executing program 0 (id=2879): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x840) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='macsec0\x00', 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (rerun: 64) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000800), &(0x7f0000000880)=0x4) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x1, 0x7, 0xfffffffd, 0x400, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x4}, 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1d, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @ldst={0x2, 0x3, 0x4, 0x8, 0x2, 0x1, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2994, 0x1000, &(0x7f0000000b40)=""/4096, 0x41100, 0x4, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x2, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, r8, r9, r10], &(0x7f0000000700)=[{0x5, 0x1, 0x5, 0xb}, {0x4, 0x5, 0x9, 0x1}], 0x10, 0x25a54}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000951}, 0x4040800) 891.033778ms ago: executing program 0 (id=2880): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x8000050) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f00000000c0)={0x24, @long}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000004000a0002"], 0x28}}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r3}, 0x94) r10 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r10, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x0, r4, 0x3c}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="e2525835d8812082f07e65e40e0360c378ccad7a555ff4d6ad1dfcf8618fd1b9cf254da3c90c384deff3fbed104d561042966861b2aaddde6812e3c44ba2466aba1862183931e7140891919c7ae05b7028d1ea8376b7a67578014eb6f0c516d1d814229e7d79dd084c52bafd620b7cea1747675c824d77b67cd34e376a763d6051a118dd533bc7d31808771dc2ebc0aba2f3e4846c288dca88b0d02e867ba45ebb64", 0xa2}, {&(0x7f0000000480)="93c96468b67b6b7d1a854286803b14d42736ab8991a5f4bec0f0fdc0c5b6e81de825729862d96eaff381bb1838d9a131c9402b8085b20c7c313c0da4d2bdee2990d34fc029a8496a331bdd8c2c471ca5a3f86efff7f3cb51c84bbc93552a624729f9048077f2afa379cb8d517e412f644f9a999c77cbb38bb18ea304a04663668e620c28ac1b3b4b64db24c6e6f1d727f0b133971daa145fa772c640d29ef493d82a0fa835e74f4695d14bc903df61192822", 0xb2}], 0x2, 0x0, 0x0, 0x48080}, 0x4000000) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r11, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC=r4], 0x48) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r13, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r13, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x6e, &(0x7f0000000540), 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000", @ANYRES16=r12, @ANYBLOB="10002abd718a353c5bdf8844000004002d80"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 824.855409ms ago: executing program 1 (id=2881): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000ffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/96, &(0x7f0000000100)=0x60) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 715.318016ms ago: executing program 1 (id=2882): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 644.012292ms ago: executing program 0 (id=2883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x5, 0xb, 0x8, @private2={0xfc, 0x2, '\x00', 0xfc}, @rand_addr=' \x01\x00', 0x10, 0x80, 0x3, 0x10}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x80, 0x40, 0x7, 0x5, {{0x1d, 0x4, 0x0, 0x3, 0x74, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0xc6, 0x0, 0xe, [0x2, 0x9, 0x2, 0x2]}, @cipso={0x86, 0x3b, 0x3, [{0x7, 0x2}, {0x6, 0xe, "13e26cb6b327a0fe904172bf"}, {0x2, 0x8, "2e41c5b7e55b"}, {0x5, 0x7, "c257cde218"}, {0x0, 0x6, "b6a8565b"}, {0x7, 0x10, "8dca8a02b2834b05378416b476ec"}]}, @cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "4176ac40a98041b834"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x7, 0x8, 0x6, 0x3, {{0x8, 0x4, 0x2, 0x3, 0x20, 0x64, 0x0, 0x9f, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x77, 0x3, 0x7, [{@local, 0x907}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, r2, 0x21, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r4], 0x48) ppoll(0x0, 0x0, 0x0, &(0x7f0000000500)={[0xfe9]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919a80000000000950000b200000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 569.478034ms ago: executing program 3 (id=2884): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) (async) connect(r0, &(0x7f0000000040)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(compress_null-generic)\x00'}, 0x80) (async) write(r0, &(0x7f0000000100)="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", 0x1000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0100003201"], 0x138) 445.682083ms ago: executing program 2 (id=2843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000064a0b0400000000000000000200000028000480240001800b000100736f636b4374400014000280080002400000001908000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r4}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r5, 0x4}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sha384-ssse3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 43.556568ms ago: executing program 32 (id=2843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000064a0b0400000000000000000200000028000480240001800b000100736f636b4374400014000280080002400000001908000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r4}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r5, 0x4}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sha384-ssse3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 0s ago: executing program 1 (id=2886): r0 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xb40}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3ff, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) kernel console output (not intermixed with test programs): `syz.2.1125'. [ 189.264110][ T9939] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1124'. [ 189.265621][ T9944] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.315547][ T9942] gretap0: entered promiscuous mode [ 189.365300][ T9950] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1128'. [ 189.383178][ T9944] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.463612][ T9944] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.543067][ T9944] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.688065][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 189.726162][ T9962] veth1_macvtap: left promiscuous mode [ 190.291641][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 190.325441][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.333923][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.347651][ T9994] bridge_slave_1: left allmulticast mode [ 190.357100][ T9994] bridge_slave_1: left promiscuous mode [ 190.364702][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.380542][ T9994] bridge_slave_0: left allmulticast mode [ 190.389183][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.410680][ T9999] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1141'. [ 190.489716][ T55] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.538760][ T55] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.629057][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'. [ 190.665882][T10008] netlink: 'syz.3.1145': attribute type 2 has an invalid length. [ 190.677104][T10008] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 190.687547][T10008] netlink: 'syz.3.1145': attribute type 2 has an invalid length. [ 190.697439][T10008] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 190.709072][T10009] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 190.718605][T10008] netlink: 'syz.3.1145': attribute type 2 has an invalid length. [ 190.726644][T10009] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 190.736676][T10008] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 190.836823][T10014] policy can only be matched on NF_INET_PRE_ROUTING [ 190.836844][T10014] unable to load match [ 190.928774][T10021] geneve3: entered promiscuous mode [ 190.934289][T10021] geneve3: entered allmulticast mode [ 190.952700][T10020] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.002361][T10020] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.060538][T10020] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.069110][T10025] ieee802154 phy0 wpan0: encryption failed: -126 [ 191.153895][T10020] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.208675][T10028] bond7: entered promiscuous mode [ 191.214289][T10028] bond7: entered allmulticast mode [ 191.219775][T10028] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.369164][T10035] IPv6: Can't replace route, no match found [ 191.417365][T10037] validate_nla: 60 callbacks suppressed [ 191.417386][T10037] netlink: 'syz.2.1156': attribute type 2 has an invalid length. [ 191.435635][T10037] nbd: must specify a device to reconfigure [ 191.476413][T10037] 0ªî{X¹¦: renamed from gretap0 [ 191.488307][T10037] 0ªî{X¹¦: left promiscuous mode [ 191.493601][T10037] 0ªî{X¹¦: entered allmulticast mode [ 191.503352][T10037] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 192.087909][T10049] tipc: Enabled bearer , priority 0 [ 192.118551][T10049] syzkaller0: entered promiscuous mode [ 192.127184][T10049] syzkaller0: entered allmulticast mode [ 192.309628][T10059] tipc: Resetting bearer [ 192.323025][T10048] tipc: Resetting bearer [ 192.338284][T10048] tipc: Disabling bearer [ 193.654416][T10098] netlink: 'syz.0.1173': attribute type 2 has an invalid length. [ 193.895855][ T3496] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.929331][ T3496] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.930591][T10112] __nla_validate_parse: 6 callbacks suppressed [ 193.930608][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 193.959097][ T3496] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.968628][ T3496] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.173406][T10123] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1181'. [ 194.363562][T10134] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1183'. [ 194.389677][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.108918][T10175] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1195'. [ 195.122032][T10175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 195.330978][T10184] netlink: 'syz.2.1197': attribute type 4 has an invalid length. [ 195.347642][T10184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1197'. [ 195.351519][T10183] tipc: Enabled bearer , priority 0 [ 195.390444][T10183] syzkaller0: entered promiscuous mode [ 195.400931][T10183] syzkaller0: entered allmulticast mode [ 195.429984][T10183] tipc: Resetting bearer [ 195.457617][T10183] tipc: Resetting bearer [ 195.486039][T10183] tipc: Disabling bearer [ 195.635312][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.660687][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.870212][T10195] sctp: [Deprecated]: syz.4.1201 (pid 10195) Use of int in maxseg socket option. [ 195.870212][T10195] Use struct sctp_assoc_value instead [ 195.988446][T10199] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 196.008935][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 196.130412][T10195] veth0_to_team: entered promiscuous mode [ 196.178846][T10195] veth0_to_team: entered allmulticast mode [ 196.522067][T10224] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 196.567328][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 196.732841][T10236] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 196.768211][T10237] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 196.961576][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 197.028706][T10252] syzkaller1: entered promiscuous mode [ 197.036198][T10252] syzkaller1: entered allmulticast mode [ 197.067882][T10253] netlink: 'syz.2.1219': attribute type 5 has an invalid length. [ 197.197614][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 197.490844][T10276] veth0: entered promiscuous mode [ 197.504454][T10274] veth0: left promiscuous mode [ 197.799078][T10289] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 197.828624][T10295] netlink: 'syz.1.1230': attribute type 10 has an invalid length. [ 197.912236][T10295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.921697][T10295] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 197.930760][T10289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.938709][T10289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.964802][T10289] bond0: (slave batadv0): Releasing backup interface [ 197.990670][T10305] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 198.005805][T10305] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.014214][T10305] gretap0: entered promiscuous mode [ 198.019605][T10305] gretap0: entered allmulticast mode [ 198.138657][T10312] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 198.173900][T10312] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 198.212059][T10311] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.307048][T10315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.364568][T10319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.374933][T10319] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 198.396260][T10319] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 198.548383][T10332] ip6erspan0: entered promiscuous mode [ 198.573042][T10332] ip6erspan0: entered allmulticast mode [ 198.819129][T10349] netlink: 'syz.3.1248': attribute type 2 has an invalid length. [ 198.965641][T10357] 8021q: adding VLAN 0 to HW filter on device bond8 [ 198.980179][T10359] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 198.994995][T10367] __nla_validate_parse: 11 callbacks suppressed [ 198.995015][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 198.996790][T10359] bond8: (slave vcan1): Error -95 calling set_mac_address [ 199.089861][T10366] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.097393][T10366] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 199.118147][T10366] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 199.156609][ T10] syz2: Port: 1 Link ACTIVE [ 199.169463][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1254'. [ 199.455987][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 199.635535][T10400] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1265'. [ 199.677519][T10397] bond9 (unregistering): Released all slaves [ 201.126764][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 201.207786][T10435] netlink: 'syz.0.1276': attribute type 10 has an invalid length. [ 201.216379][T10435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'. [ 201.259887][T10435] team0: Port device geneve0 added [ 201.270287][ T3524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.295204][ T3524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.317979][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 201.349785][ T3524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.359992][ T3524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.384648][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'. [ 201.476765][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 201.490541][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1279'. [ 202.839993][T10509] tipc: Enabled bearer , priority 5 [ 202.858612][T10499] netlink: 'syz.2.1292': attribute type 10 has an invalid length. [ 203.027476][T10499] team0: Device veth1_macvtap failed to register rx_handler [ 203.090102][T10533] sctp: [Deprecated]: syz.0.1301 (pid 10533) Use of int in maxseg socket option. [ 203.090102][T10533] Use struct sctp_assoc_value instead [ 203.550372][T10556] syz.1.1306 (10556) used obsolete PPPIOCDETACH ioctl [ 203.869832][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.901036][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.950397][T10578] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 204.218218][T10598] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 204.263899][T10600] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 204.323306][T10607] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 204.334426][T10598] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 204.414097][T10603] 8021q: adding VLAN 0 to HW filter on device bond11 [ 204.455505][T10603] bond10: (slave bond11): making interface the new active one [ 204.485739][T10603] bond10: (slave bond11): Enslaving as an active interface with an up link [ 204.556655][T10623] netlink: 'syz.1.1324': attribute type 1 has an invalid length. [ 204.708168][T10631] tap0: tun_chr_ioctl cmd 1074025678 [ 204.714646][T10631] tap0: group set to 0 [ 204.720072][T10631] netlink: 'syz.2.1326': attribute type 14 has an invalid length. [ 204.768182][T10637] __nla_validate_parse: 3 callbacks suppressed [ 204.768206][T10637] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1328'. [ 204.836472][T10639] tipc: Enabled bearer , priority 0 [ 204.859029][T10635] tipc: Disabling bearer [ 204.891868][T10639] tipc: Enabled bearer , priority 0 [ 204.899589][T10639] syzkaller0: entered promiscuous mode [ 204.906414][T10639] syzkaller0: entered allmulticast mode [ 204.922095][T10639] tipc: Resetting bearer [ 204.949629][T10634] tipc: Resetting bearer [ 204.990359][T10634] tipc: Disabling bearer [ 205.005783][T10641] tipc: Enabled bearer , priority 0 [ 205.013949][T10641] syzkaller0: entered promiscuous mode [ 205.019702][T10641] syzkaller0: entered allmulticast mode [ 205.031285][T10641] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 205.093625][T10641] tipc: Resetting bearer [ 205.102604][T10650] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1334'. [ 205.121634][T10640] tipc: Resetting bearer [ 205.178978][T10640] tipc: Disabling bearer [ 205.212020][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1335'. [ 205.234048][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 205.408156][T10663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1338'. [ 205.452074][T10663] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 205.460040][T10663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1338'. [ 205.710586][T10677] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1342'. [ 205.796561][T10675] netlink: 'syz.3.1341': attribute type 4 has an invalid length. [ 205.880395][T10682] bond0: (slave bond_slave_0): Releasing backup interface [ 205.944200][T10682] bond0: (slave bond_slave_1): Releasing backup interface [ 205.979294][T10682] team0: Port device team_slave_0 removed [ 205.990205][T10694] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 206.018119][T10682] team0: Port device team_slave_1 removed [ 206.053277][T10682] bond1: (slave veth3): Releasing backup interface [ 206.070621][T10682] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 206.099346][T10680] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 206.677003][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 206.693054][T10719] netlink: 'syz.3.1352': attribute type 9 has an invalid length. [ 207.033795][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 207.177434][T10744] vlan1: entered allmulticast mode [ 207.187190][T10744] veth0_vlan: entered allmulticast mode [ 207.282782][T10748] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1363'. [ 207.297366][T10748] 8021q: VLANs not supported on ip_vti0 [ 207.722176][T10779] ip6gretap0: entered promiscuous mode [ 209.046610][T10863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.093590][T10863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 209.109810][T10863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.126538][T10863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.276525][T10863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.291867][T10863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 209.305071][T10863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.316745][T10863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.428180][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 209.447114][T10882] macvtap1: entered allmulticast mode [ 209.456180][T10882] veth0_macvtap: entered allmulticast mode [ 209.513967][T10863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.560778][T10863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 209.598375][T10863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.628052][T10863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.744149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.789516][T10900] __nla_validate_parse: 11 callbacks suppressed [ 209.789538][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 209.857698][T10863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.876757][T10863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 209.909611][T10863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.936299][T10863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 210.089567][T10909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1405'. [ 210.240883][ T55] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.279723][ T55] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 210.321423][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.329833][ T55] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.461378][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.469667][ T49] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 210.488480][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.507105][ T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.536697][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.558894][ T49] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 210.587606][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.606356][ T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.681798][ T1164] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.690301][ T1164] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 210.700406][ T1164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.762313][ T1164] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.875930][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 210.887553][T10946] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 210.895506][T10946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.908540][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 211.247890][T10967] syzkaller1: entered promiscuous mode [ 211.256988][T10967] syzkaller1: entered allmulticast mode [ 211.394841][T10972] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1419'. [ 211.425788][T10977] tipc: Started in network mode [ 211.430713][T10977] tipc: Node identity 1ab3ac65728f, cluster identity 4711 [ 211.439179][T10977] tipc: Enabled bearer , priority 0 [ 211.449799][T10977] syzkaller0: entered promiscuous mode [ 211.456006][T10977] syzkaller0: entered allmulticast mode [ 211.461539][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 211.484741][T10977] tipc: Resetting bearer [ 211.515326][T10976] tipc: Resetting bearer [ 211.570372][T10976] tipc: Disabling bearer [ 211.604753][T10988] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1425'. [ 211.824072][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 211.830588][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 211.836815][ T5884] Bluetooth: hci0: command 0x0c20 tx timeout [ 212.355646][T11031] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 212.364528][T11031] bridge0: port 1(team0) entered blocking state [ 212.371031][T11031] bridge0: port 1(team0) entered disabled state [ 212.389474][T11031] team0: entered allmulticast mode [ 212.398554][T11031] team0: entered promiscuous mode [ 212.589575][T11038] sctp: [Deprecated]: syz.1.1440 (pid 11038) Use of int in max_burst socket option deprecated. [ 212.589575][T11038] Use struct sctp_assoc_value instead [ 212.636018][T11040] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1441'. [ 212.767047][T11045] veth1_to_hsr: entered allmulticast mode [ 212.867236][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 213.185437][T11056] bond12: entered allmulticast mode [ 213.200821][T11056] 8021q: adding VLAN 0 to HW filter on device bond12 [ 213.222458][T11056] bridge0: port 2(bond12) entered blocking state [ 213.229035][T11056] bridge0: port 2(bond12) entered disabled state [ 213.231365][T11069] netlink: 'syz.4.1450': attribute type 1 has an invalid length. [ 213.241063][T11056] bond12: entered promiscuous mode [ 213.248248][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1450'. [ 213.290785][ T7638] hid (null): unknown global tag 0xe [ 213.298395][ T7638] hid (null): nested delimiters [ 213.514534][T11080] netlink: 'syz.3.1451': attribute type 15 has an invalid length. [ 213.744589][T11086] macvtap2: entered promiscuous mode [ 213.749944][T11086] macvtap2: entered allmulticast mode [ 214.017085][T11097] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 214.106063][T11101] netlink: 'syz.4.1457': attribute type 3 has an invalid length. [ 214.633528][ T7638] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 214.643674][ T7638] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 214.652446][ T7638] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 214.680921][T11117] IPVS: set_ctl: invalid protocol: 24 0.0.2.0:43690 [ 214.691335][T11117] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 214.717441][T11119] netlink: 'syz.3.1463': attribute type 1 has an invalid length. [ 214.733948][T11119] nbd: illegal input index 1048576 [ 215.149249][T11136] netlink: 'syz.1.1465': attribute type 9 has an invalid length. [ 215.275753][T11140] __nla_validate_parse: 5 callbacks suppressed [ 215.275776][T11140] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1466'. [ 215.542471][T11155] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 216.013073][T11179] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 216.078202][T11179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.087534][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 216.189848][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 216.369171][T11207] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1487'. [ 216.380031][T11207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1487'. [ 217.015358][T11240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 217.029238][T11240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 217.467252][T11260] atomic_op ffff8880781a4998 conn xmit_atomic 0000000000000000 [ 217.470426][T11253] pim6reg: entered allmulticast mode [ 217.607617][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1503'. [ 217.635093][T11265] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 217.700628][T11271] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.713753][T11271] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 217.724664][T11271] bond7: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 217.754871][T11265] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1504'. [ 218.128149][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1510'. [ 218.538839][T11317] openvswitch: netlink: Missing key (keys=40, expected=80) [ 218.679280][T11313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.695859][T11313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.740037][T11322] geneve3: entered promiscuous mode [ 218.829322][T11327] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 218.837112][T11327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.840075][T11313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.852461][T11327] openvswitch: netlink: Key type 9744 is out of range max 32 [ 218.862496][T11313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.000264][T11313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.018664][T11313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.122727][T11313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.133898][T11313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.318221][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.327219][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.343769][T11360] netlink: 'syz.2.1526': attribute type 2 has an invalid length. [ 219.390527][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.399003][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.415043][ T1164] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.424357][ T1164] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.443367][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.452286][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.379591][T11412] __nla_validate_parse: 6 callbacks suppressed [ 220.379611][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1539'. [ 220.411594][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1542'. [ 220.524503][T11417] netlink: 'syz.2.1543': attribute type 7 has an invalid length. [ 220.614124][T11417] : entered promiscuous mode [ 220.629291][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 220.881708][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 220.920088][T11437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.973732][T11440] netlink: 'syz.2.1551': attribute type 13 has an invalid length. [ 221.177302][T11456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 221.199149][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1555'. [ 221.458365][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 221.487378][T11465] hsr_slave_0: left promiscuous mode [ 221.508684][T11465] hsr_slave_1: left promiscuous mode [ 222.158178][T11481] bridge7: entered allmulticast mode [ 222.441989][T11500] tc_dump_action: action bad kind [ 222.447795][T11502] netlink: 'syz.2.1569': attribute type 83 has an invalid length. [ 222.489363][T11504] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.520322][T11504] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.614377][T11510] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1573'. [ 222.629102][T11504] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.645297][T11504] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.711439][T11504] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.728219][T11504] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.845814][T11504] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.865849][T11504] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.043657][ T1164] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.054962][ T1164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.116472][T11528] syzkaller0: entered promiscuous mode [ 223.122233][T11528] syzkaller0: entered allmulticast mode [ 223.128573][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.137289][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.148852][T11533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1580'. [ 223.514290][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 224.776045][ T1343] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.786137][ T1343] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.988563][ T3496] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.000248][ T3496] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.467069][T11581] __nla_validate_parse: 3 callbacks suppressed [ 225.467089][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1594'. [ 225.490178][T11581] netlink: 'syz.2.1594': attribute type 161 has an invalid length. [ 225.499018][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 225.537730][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'. [ 225.614522][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 225.761476][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 225.840314][T11597] pimreg: entered allmulticast mode [ 225.967543][T11607] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 226.019310][T11613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1607'. [ 226.505387][T11645] netlink: 'syz.3.1615': attribute type 10 has an invalid length. [ 226.527109][T11645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 226.618729][T11654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 226.632466][T11654] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 226.646005][T11654] gretap2: entered promiscuous mode [ 226.651624][T11654] gretap2: entered allmulticast mode [ 226.700842][T11652] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1618'. [ 226.716491][T11659] netlink: 'syz.3.1620': attribute type 1 has an invalid length. [ 226.823333][T11671] netlink: 'syz.3.1620': attribute type 13 has an invalid length. [ 226.881967][T11659] bond4: entered promiscuous mode [ 226.887761][T11659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.959350][T11664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.977952][T11664] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 226.983667][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 226.999906][T11664] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 227.023386][T11664] bond4: (slave wireguard0): making interface the new active one [ 227.047036][T11664] wireguard0: entered promiscuous mode [ 227.065624][T11664] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 227.171900][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.210653][T11671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.391583][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.465899][T11708] tipc: Enabling of bearer rejected, failed to enable media [ 227.705510][T11721] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 227.723632][T11724] netlink: 'syz.2.1637': attribute type 1 has an invalid length. [ 227.765534][T11721] 8021q: adding VLAN 0 to HW filter on device bond9 [ 227.773527][T11724] tipc: Enabling of bearer rejected, failed to enable media [ 227.828779][T11726] bond9: (slave gretap3): making interface the new active one [ 227.865300][T11726] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 227.947374][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 228.215641][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 228.367538][T11759] netlink: 'syz.3.1646': attribute type 2 has an invalid length. [ 228.389251][T11759] netlink: 'syz.3.1646': attribute type 2 has an invalid length. [ 228.428317][T11763] syzkaller1: entered promiscuous mode [ 228.458482][T11763] syzkaller1: entered allmulticast mode [ 228.468763][T11763] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 228.487723][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.774257][T11785] netlink: 'syz.4.1653': attribute type 32 has an invalid length. [ 228.782926][T11785] (unnamed net_device) (uninitialized): option coupled_control: invalid value (29) [ 228.943179][T11795] sctp: [Deprecated]: syz.1.1657 (pid 11795) Use of int in max_burst socket option. [ 228.943179][T11795] Use struct sctp_assoc_value instead [ 229.083457][T11798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.108151][T11798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.249379][T11806] netlink: 'syz.0.1659': attribute type 10 has an invalid length. [ 229.270783][T11806] team0: Port device dummy0 added [ 229.318772][T11798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.336511][T11798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.497332][T11798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.529500][T11798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.784979][T11798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.842121][T11798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.544201][ T3496] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.565864][ T3496] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.619740][ T3496] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.644379][ T3496] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.713051][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.731859][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.810897][T11861] __nla_validate_parse: 7 callbacks suppressed [ 230.810919][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1669'. [ 230.839042][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.850348][T11871] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1671'. [ 230.855938][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.968494][T11874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1674'. [ 230.995697][T11878] validate_nla: 1 callbacks suppressed [ 230.995718][T11878] netlink: 'syz.2.1673': attribute type 2 has an invalid length. [ 231.010048][T11878] netlink: 'syz.2.1673': attribute type 1 has an invalid length. [ 231.078939][T11881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1674'. [ 231.124103][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 231.128841][T11884] IPVS: Unknown mcast interface: nicvf0 [ 231.148460][T11884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1676'. [ 232.413239][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1695'. [ 232.478713][T11968] sctp: [Deprecated]: syz.3.1698 (pid 11968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.478713][T11968] Use struct sctp_sack_info instead [ 232.522644][T11963] netlink: 'syz.3.1698': attribute type 9 has an invalid length. [ 232.589876][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 232.737910][T11978] xt_l2tp: missing protocol rule (udp|l2tpip) [ 232.795654][T11981] tipc: Enabled bearer , priority 0 [ 232.804955][T11981] syzkaller0: entered promiscuous mode [ 232.810554][T11981] syzkaller0: entered allmulticast mode [ 232.837586][T11981] tipc: Resetting bearer [ 232.845415][T11980] tipc: Resetting bearer [ 232.860909][T11980] tipc: Disabling bearer [ 233.029622][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1704'. [ 233.399664][T11998] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 233.567850][T11998] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 233.671590][T12019] netlink: 'syz.3.1713': attribute type 11 has an invalid length. [ 233.688410][T12019] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1713'. [ 233.920930][T12028] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.955485][T12028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.348405][T12028] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.358604][T12028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.431524][T12028] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.451527][T12028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.534176][T12046] bridge: RTM_NEWNEIGH with invalid ether address [ 234.569667][T12028] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.595340][T12028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.095618][ T1339] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.111275][ T1339] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.172274][ T1164] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.202444][ T1164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.251352][ T1339] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.259586][ T1339] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.300205][ T1339] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.331287][ T1339] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.374667][T12082] netlink: 'syz.0.1730': attribute type 10 has an invalid length. [ 235.385660][T12082] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 235.629657][T12085] team0 (unregistering): left allmulticast mode [ 235.636485][T12085] team0 (unregistering): left promiscuous mode [ 235.646574][T12085] bridge0: port 1(team0) entered disabled state [ 236.198484][T12121] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.230102][T12121] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.472583][T12121] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.487781][T12121] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.642206][T12121] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.663778][T12121] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.778001][T12163] netlink: 'syz.2.1752': attribute type 10 has an invalid length. [ 238.788346][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1752'. [ 238.809319][T12163] dummy0: entered promiscuous mode [ 238.820023][T12163] bridge0: port 1(dummy0) entered blocking state [ 238.853492][T12163] bridge0: port 1(dummy0) entered disabled state [ 238.860081][T12163] dummy0: entered allmulticast mode [ 238.896191][T12121] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.913052][T12121] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.080882][T12181] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1755'. [ 239.115575][ T3496] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.131597][ T3496] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.140112][ T3496] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.148437][ T3496] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.165460][T12186] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.191692][ T3496] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.205443][ T3496] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.232358][ T3496] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.244636][ T3496] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.334882][T12192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1760'. [ 239.473435][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 239.777984][T12219] sctp: [Deprecated]: syz.3.1768 (pid 12219) Use of int in maxseg socket option. [ 239.777984][T12219] Use struct sctp_assoc_value instead [ 240.126091][T12244] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1773'. [ 240.370953][T12252] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.378616][T12255] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1776'. [ 240.391319][T12252] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.501090][T12253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.585683][T12252] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.596323][T12252] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.763121][T12252] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.798655][T12252] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.900792][T12252] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.919410][T12252] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.952099][T12285] openvswitch: netlink: EtherType 0 is less than min 600 [ 240.966880][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 240.982213][T12285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1785'. [ 240.986023][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 240.999996][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 241.238435][T12301] syzkaller0: entered promiscuous mode [ 241.244684][T12301] syzkaller0: entered allmulticast mode [ 242.972933][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.993891][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.144625][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.162899][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.256827][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.266211][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.300063][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.314721][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.537084][T12354] netlink: 'syz.2.1804': attribute type 8 has an invalid length. [ 243.547181][T12354] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.670549][T12364] xt_limit: Overflow, try lower: 271964/0 [ 243.852006][T12374] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 243.962319][T12381] __nla_validate_parse: 4 callbacks suppressed [ 243.962340][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1812'. [ 244.067947][T12386] netlink: 'syz.1.1814': attribute type 1 has an invalid length. [ 244.176527][T12393] bond9: (slave gretap1): making interface the new active one [ 244.189203][T12393] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 244.203686][T12401] netlink: 'syz.0.1816': attribute type 30 has an invalid length. [ 244.204833][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 244.261930][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 244.274939][T12397] netlink: 'syz.0.1816': attribute type 20 has an invalid length. [ 244.284877][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 244.298324][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1816'. [ 244.308750][T12397] netlink: 'syz.0.1816': attribute type 20 has an invalid length. [ 244.520668][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1821'. [ 244.875310][T12427] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 245.336786][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1829'. [ 245.598023][T12466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 245.914326][ T7642] IPVS: starting estimator thread 0... [ 245.921405][T12486] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 246.021682][T12487] IPVS: using max 28 ests per chain, 67200 per kthread [ 246.034678][T12489] tipc: Enabled bearer , priority 0 [ 246.044867][T12489] syzkaller0: entered promiscuous mode [ 246.050368][T12489] syzkaller0: entered allmulticast mode [ 246.067384][T12489] tipc: Resetting bearer [ 246.075020][T12488] tipc: Resetting bearer [ 246.092244][T12488] tipc: Disabling bearer [ 246.207586][T12493] netlink: 'syz.4.1841': attribute type 1 has an invalid length. [ 246.215801][T12493] netlink: 'syz.4.1841': attribute type 11 has an invalid length. [ 246.224215][T12493] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1841'. [ 246.669403][T12502] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 246.708572][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 246.879037][T12534] netlink: 'syz.3.1852': attribute type 11 has an invalid length. [ 247.552850][T12556] team0: Port device bridge5 added [ 248.282106][T12597] syzkaller0: entered promiscuous mode [ 248.287642][T12597] syzkaller0: entered allmulticast mode [ 249.067420][T12605] __nla_validate_parse: 3 callbacks suppressed [ 249.067439][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 249.160261][T12609] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1876'. [ 249.251866][T12618] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 249.282334][T12618] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1879'. [ 249.797597][T12653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1884'. [ 249.814998][T12637] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1877'. [ 249.823655][T12651] netlink: 'syz.2.1885': attribute type 11 has an invalid length. [ 250.112780][T12673] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.1892'. [ 250.155449][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 250.230436][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 250.260743][T12688] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 250.448188][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 250.617193][T12708] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 250.884155][T12720] netlink: 'syz.1.1903': attribute type 11 has an invalid length. [ 250.892862][T12719] netlink: 'syz.1.1903': attribute type 11 has an invalid length. [ 250.913488][T12725] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 250.970048][T12725] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 250.991797][T12725] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 251.000470][T12725] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 251.054976][T12725] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 251.059935][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 251.248061][T12725] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 251.268759][T12725] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 251.269674][T12738] nbd: must specify at least one socket [ 252.313799][T12786] syzkaller1: entered promiscuous mode [ 252.319578][T12786] syzkaller1: entered allmulticast mode [ 252.455993][T12794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.714651][T12799] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.743679][T12799] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 252.782829][T12799] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 252.800463][T12799] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 252.943768][T12799] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.973802][T12799] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 252.992994][T12799] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.017672][T12824] openvswitch: netlink: Missing key (keys=40, expected=80) [ 253.029436][T12799] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.047581][T12827] xt_l2tp: wrong L2TP version: 0 [ 253.087779][T12822] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 253.130425][T12799] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.146627][T12799] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 253.160002][T12799] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.181559][T12799] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.300555][T12799] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.311309][T12799] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 253.355259][T12799] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 253.366687][T12799] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 253.492422][T12848] openvswitch: netlink: IPv6 tunnel dst address is zero [ 253.528240][T12849] geneve4: entered promiscuous mode [ 253.535647][T12849] geneve4: entered allmulticast mode [ 253.554417][ T49] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 3615 - 0 [ 253.572866][ T49] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 3615 - 0 [ 253.584025][ T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 3615 - 0 [ 253.618228][T12849] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.686300][ T3496] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.698402][ T3496] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 253.706939][ T3496] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 253.715492][ T3496] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 253.754389][ T3496] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.763444][ T3496] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 253.772982][ T3496] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 253.782105][ T3496] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 253.812019][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.821471][ T12] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 253.830316][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 253.839885][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 253.887450][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.903514][ T12] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 253.913825][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 253.927222][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 254.284365][T12892] validate_nla: 33 callbacks suppressed [ 254.284389][T12892] netlink: 'syz.0.1957': attribute type 33 has an invalid length. [ 254.302022][T12892] __nla_validate_parse: 8 callbacks suppressed [ 254.302054][T12892] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1957'. [ 254.328183][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 254.669562][T12909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'. [ 254.981605][T12924] netlink: 'syz.2.1964': attribute type 11 has an invalid length. [ 255.011509][T12924] netlink: 'syz.2.1964': attribute type 11 has an invalid length. [ 255.029644][T12924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1964'. [ 255.330793][T12849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.355699][T12849] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 3615 - 0 [ 255.380687][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1972'. [ 255.442579][T12957] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.455349][T12957] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 255.479217][T12849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.492849][T12849] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 3615 - 0 [ 255.570844][T12849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.591346][T12849] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 3615 - 0 [ 255.939925][ T1343] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 3615 - 0 [ 255.959263][ T1343] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 255.987482][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 256.026559][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 3615 - 0 [ 256.026806][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 256.042052][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.077008][ T1107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 3615 - 0 [ 256.095277][ T1107] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.119852][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 3615 - 0 [ 256.128366][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.159921][T12976] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1976'. [ 256.250593][ T1107] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 256.276833][T12984] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 256.399880][T12999] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1983'. [ 256.410322][T12999] xt_socket: unknown flags 0xd0 [ 257.045046][T13009] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1985'. [ 257.083141][T13011] tipc: Enabled bearer , priority 0 [ 257.091878][T13016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.101056][T13011] syzkaller0: entered promiscuous mode [ 257.111297][T13011] syzkaller0: entered allmulticast mode [ 257.188523][T13011] tipc: Resetting bearer [ 257.212799][T13010] tipc: Resetting bearer [ 257.271862][T13010] tipc: Disabling bearer [ 257.519263][T13044] netlink: 'syz.3.1997': attribute type 4 has an invalid length. [ 257.707580][T13049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.765969][T13050] netlink: 'syz.2.2001': attribute type 58 has an invalid length. [ 257.943602][T13054] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 258.428612][T13077] syzkaller1: entered allmulticast mode [ 259.841742][T13158] __nla_validate_parse: 14 callbacks suppressed [ 259.841778][T13158] netlink: 401 bytes leftover after parsing attributes in process `syz.3.2035'. [ 259.986925][ T49] wlan1: Trigger new scan to find an IBSS to join [ 260.009627][T13165] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2038'. [ 260.019421][T13164] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2038'. [ 260.045689][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 260.227729][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 260.238909][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 260.692403][T13191] netlink: 'syz.0.2046': attribute type 10 has an invalid length. [ 260.734371][T13191] netlink: 187476 bytes leftover after parsing attributes in process `syz.0.2046'. [ 261.066734][T13209] xt_limit: Overflow, try lower: 604147548/4200216962 [ 261.302033][T13222] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2059'. [ 261.314700][T13225] netem: change failed [ 261.319934][T13223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.497747][T13231] netlink: 'syz.2.2063': attribute type 33 has an invalid length. [ 261.510292][T13235] tipc: Enabling of bearer rejected, failed to enable media [ 261.796179][T13252] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 261.822415][T13252] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 261.869200][T13258] netlink: 'syz.0.2072': attribute type 1 has an invalid length. [ 261.891536][T13258] netlink: 'syz.0.2072': attribute type 2 has an invalid length. [ 262.028077][T13269] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2074'. [ 262.432598][T13293] IPv6: sit2: Disabled Multicast RS [ 262.445350][T13293] sit2: entered allmulticast mode [ 262.523611][T13296] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2083'. [ 262.779604][T13276] infiniband syz0: set down [ 262.786739][T13276] infiniband syz0: added bond_slave_0 [ 262.864668][T13311] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20004 [ 262.872370][T13311] IPVS: fo: FWM 3 0x00000003 - no destination available [ 262.946825][ T13] wlan1: Trigger new scan to find an IBSS to join [ 262.983347][T13276] RDS/IB: syz0: added [ 262.987630][T13276] smc: adding ib device syz0 with port count 1 [ 263.033325][T13276] smc: ib device syz0 port 1 has pnetid [ 263.255294][T13325] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 265.082598][T13388] __nla_validate_parse: 1 callbacks suppressed [ 265.082618][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 265.103250][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 265.186961][T13390] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.253746][T13394] pim6reg1: entered promiscuous mode [ 265.260375][T13394] pim6reg1: entered allmulticast mode [ 265.722269][T13415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2116'. [ 265.759090][T13409] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2113'. [ 265.982711][ T49] wlan1: Trigger new scan to find an IBSS to join [ 266.106321][T13431] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 266.169770][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2123'. [ 266.178168][T13431] 8021q: adding VLAN 0 to HW filter on device bond12 [ 266.227222][T13441] bond12: (slave gretap4): making interface the new active one [ 266.242819][T13447] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2126'. [ 266.266404][T13441] bond12: (slave gretap4): Enslaving as an active interface with an up link [ 266.327241][T13431] vlan0: entered allmulticast mode [ 266.332738][T13431] bond12: entered allmulticast mode [ 266.340379][T13431] gretap4: entered allmulticast mode [ 266.358257][T13431] bond12: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 266.449383][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'. [ 266.898774][T13483] sctp: [Deprecated]: syz.1.2137 (pid 13483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.898774][T13483] Use struct sctp_sack_info instead [ 266.946172][T13483] sctp: [Deprecated]: syz.1.2137 (pid 13483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.946172][T13483] Use struct sctp_sack_info instead [ 266.981645][ T13] wlan1: Creating new IBSS network, BSSID 86:4a:ae:75:ba:d8 [ 267.019331][T13488] netlink: 'syz.0.2139': attribute type 10 has an invalid length. [ 267.040338][T13488] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.072431][T13488] bond0: (slave team0): Enslaving as an active interface with an up link [ 267.091330][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2143'. [ 267.305270][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'. [ 267.317349][T13506] netlink: 'syz.3.2145': attribute type 10 has an invalid length. [ 267.329808][T13506] batadv0: left promiscuous mode [ 267.342549][T13506] batadv0: left allmulticast mode [ 267.348194][T13506] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 267.359351][T13506] netlink: 'syz.3.2145': attribute type 10 has an invalid length. [ 267.367546][T13506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2145'. [ 267.397918][T13506] batadv0: entered promiscuous mode [ 267.403592][T13506] batadv0: entered allmulticast mode [ 267.410305][T13506] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 267.427550][T13511] C: renamed from lo (while UP) [ 267.438518][T13511] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 267.728070][T13522] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 267.878700][T13524] dummy0: left allmulticast mode [ 267.886415][T13524] bridge0: port 1(dummy0) entered disabled state [ 267.899252][T13524] bond12: left promiscuous mode [ 267.916479][T13524] bridge0: port 2(bond12) entered disabled state [ 268.017367][T13524] bond0: (slave bridge0): Releasing backup interface [ 268.024117][T13538] netlink: 'syz.3.2157': attribute type 11 has an invalid length. [ 268.111566][T13536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.253511][T13544] netlink: 'syz.3.2158': attribute type 21 has an invalid length. [ 268.290620][T13549] delete_channel: no stack [ 268.362873][T13549] delete_channel: no stack [ 268.367731][T13549] delete_channel: no stack [ 268.372538][T13549] delete_channel: no stack [ 268.382404][T13549] delete_channel: no stack [ 268.387192][T13549] delete_channel: no stack [ 268.422318][T13549] delete_channel: no stack [ 268.428194][T13549] delete_channel: no stack [ 268.437325][T13549] delete_channel: no stack [ 268.453340][T13549] delete_channel: no stack [ 268.461035][T13549] delete_channel: no stack [ 268.470768][T13549] delete_channel: no stack [ 268.476693][T13549] delete_channel: no stack [ 268.482123][T13549] delete_channel: no stack [ 268.487996][T13549] delete_channel: no stack [ 268.494878][T13549] delete_channel: no stack [ 268.500730][T13549] delete_channel: no stack [ 268.506128][T13549] delete_channel: no stack [ 268.518612][T13549] delete_channel: no stack [ 268.525783][T13549] delete_channel: no stack [ 268.536319][T13549] delete_channel: no stack [ 268.542505][T13549] delete_channel: no stack [ 268.547275][T13549] delete_channel: no stack [ 268.554406][T13549] delete_channel: no stack [ 268.562530][T13549] delete_channel: no stack [ 268.567379][T13549] delete_channel: no stack [ 268.585405][T13549] delete_channel: no stack [ 268.590565][T13549] delete_channel: no stack [ 268.596076][T13549] delete_channel: no stack [ 268.605862][T13549] delete_channel: no stack [ 268.611008][T13549] delete_channel: no stack [ 268.618364][T13549] delete_channel: no stack [ 268.631982][T13549] delete_channel: no stack [ 268.637372][T13549] delete_channel: no stack [ 268.647032][T13549] delete_channel: no stack [ 268.653697][T13549] delete_channel: no stack [ 268.659542][T13549] delete_channel: no stack [ 268.664403][T13549] delete_channel: no stack [ 268.670894][T13549] delete_channel: no stack [ 268.677326][T13549] delete_channel: no stack [ 268.682430][T13549] delete_channel: no stack [ 268.688332][T13549] delete_channel: no stack [ 268.693351][T13549] delete_channel: no stack [ 268.719830][T13549] delete_channel: no stack [ 268.729865][T13549] delete_channel: no stack [ 268.736390][T13549] delete_channel: no stack [ 268.742664][T13549] delete_channel: no stack [ 268.748135][T13549] delete_channel: no stack [ 268.753103][T13549] delete_channel: no stack [ 268.757904][T13549] delete_channel: no stack [ 268.764257][T13549] delete_channel: no stack [ 268.770538][T13549] delete_channel: no stack [ 268.775498][T13549] delete_channel: no stack [ 268.780290][T13549] delete_channel: no stack [ 268.788462][T13549] delete_channel: no stack [ 268.794673][T13549] delete_channel: no stack [ 268.799583][T13549] delete_channel: no stack [ 268.829507][T13549] delete_channel: no stack [ 268.846428][T13549] delete_channel: no stack [ 268.848649][T13558] mpoa:mpoad_close: () going down [ 268.861613][T13549] delete_channel: no stack [ 268.876525][T13549] delete_channel: no stack [ 268.886669][T13549] delete_channel: no stack [ 268.897345][T13549] delete_channel: no stack [ 268.903607][T13549] delete_channel: no stack [ 268.908453][T13549] delete_channel: no stack [ 268.925721][T13576] sch_fq: defrate 0 ignored. [ 268.953303][T13576] netlink: 'syz.0.2167': attribute type 83 has an invalid length. [ 270.425877][T13623] geneve2: entered promiscuous mode [ 270.477975][T13623] geneve2: entered allmulticast mode [ 270.538480][ T1107] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 270.558491][ T1107] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 270.595089][ T1107] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 270.640712][ T1107] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 270.850509][T13644] __nla_validate_parse: 10 callbacks suppressed [ 270.850533][T13644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 271.000861][T13648] tipc: Enabled bearer , priority 0 [ 271.034670][T13648] syzkaller0: entered promiscuous mode [ 271.047768][T13648] syzkaller0: entered allmulticast mode [ 271.093296][T13653] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2186'. [ 271.207370][T13648] tipc: Resetting bearer [ 271.241569][T13647] tipc: Resetting bearer [ 271.282617][T13661] netlink: 'syz.3.2189': attribute type 1 has an invalid length. [ 271.321318][T13661] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2189'. [ 271.419725][T13647] tipc: Disabling bearer [ 271.632797][T13676] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.664849][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 272.033191][T13699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2201'. [ 272.112716][T13701] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2203'. [ 272.170897][T13704] netlink: 'syz.0.2204': attribute type 21 has an invalid length. [ 272.182121][T13704] netlink: 'syz.0.2204': attribute type 6 has an invalid length. [ 272.189886][T13704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2204'. [ 272.339730][T13720] netlink: 'syz.3.2207': attribute type 11 has an invalid length. [ 272.378001][T13720] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2207'. [ 272.597380][T13729] pimreg: entered allmulticast mode [ 272.851082][T13747] netlink: 'syz.2.2214': attribute type 64 has an invalid length. [ 272.859852][T13747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2214'. [ 272.898199][T13744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 273.342200][T13755] netlink: 'syz.4.2216': attribute type 30 has an invalid length. [ 273.415202][T13777] netlink: 'syz.2.2221': attribute type 9 has an invalid length. [ 273.895009][T13804] kthread_run failed with err -4 [ 274.193984][T13818] bond3: (slave geneve2): Releasing active interface [ 274.243384][T13818] bond9: (slave gretap1): Releasing active interface [ 274.454527][ T1107] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.477220][ T1107] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.492127][ T1107] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.551701][ T1107] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.967259][T13863] netlink: 'syz.4.2246': attribute type 1 has an invalid length. [ 274.980911][T13863] netlink: 'syz.4.2246': attribute type 2 has an invalid length. [ 275.480554][T13882] netlink: 'syz.0.2252': attribute type 4 has an invalid length. [ 275.503828][T13885] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 276.336332][T13920] ip6tnl1: entered promiscuous mode [ 277.401276][T13980] netlink: 'syz.3.2277': attribute type 1 has an invalid length. [ 277.661406][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 277.723925][T13996] vxcan1: tx address claim with different name [ 277.799951][T13990] syzkaller0: entered promiscuous mode [ 277.836202][T13990] syzkaller0: entered allmulticast mode [ 279.707992][T14044] __nla_validate_parse: 15 callbacks suppressed [ 279.708013][T14044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2293'. [ 279.980445][T14062] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 280.015657][T14062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.033496][T14068] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 280.151733][T14078] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2304'. [ 280.183307][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2302'. [ 280.200163][T14071] delete_channel: no stack [ 280.268448][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2306'. [ 280.487623][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 280.487944][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2308'. [ 281.042217][T14139] tipc: Enabled bearer , priority 0 [ 281.062954][T14139] syzkaller0: entered promiscuous mode [ 281.068480][T14139] syzkaller0: entered allmulticast mode [ 281.122285][T14142] netlink: 'syz.3.2324': attribute type 2 has an invalid length. [ 281.149994][T14142] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2324'. [ 281.154247][T14139] tipc: Resetting bearer [ 281.163772][T14142] nbd: must specify at least one socket [ 281.179773][T14148] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2324'. [ 281.194192][T14137] tipc: Resetting bearer [ 281.216668][T14137] tipc: Disabling bearer [ 281.259355][T14147] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.291354][T14147] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.421042][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 281.435367][T14147] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.461235][T14147] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.550785][T14147] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.566065][T14147] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.644606][T14147] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.661278][T14147] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.858857][ T1107] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.873526][ T1107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.927105][ T1164] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.946698][ T1164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.993996][T14193] netlink: 'syz.2.2338': attribute type 2 has an invalid length. [ 282.021375][T14193] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2338'. [ 282.036365][T14174] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 282.045561][ T1164] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.057884][T14193] netlink: 'syz.2.2338': attribute type 142 has an invalid length. [ 282.066331][ T1164] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.126570][T14174] bond2: entered promiscuous mode [ 282.132467][T14174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.139849][ T1107] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.148547][ T1107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.514046][T14226] netlink: 'syz.0.2346': attribute type 15 has an invalid length. [ 282.570587][T14228] netlink: 'syz.3.2347': attribute type 18 has an invalid length. [ 282.605102][T14231] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 282.628527][ T49] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 282.654828][ T49] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 282.668852][ T49] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 282.679062][ T49] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 282.827530][T14241] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 282.840068][T14241] netlink: 'syz.2.2352': attribute type 2 has an invalid length. [ 282.856583][T14241] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 283.006720][T14252] openvswitch: netlink: Flow key attr not present in new flow. [ 283.037366][T14253] tipc: Enabled bearer , priority 0 [ 283.049211][T14256] syzkaller0: entered promiscuous mode [ 283.069478][T14256] syzkaller0: entered allmulticast mode [ 283.164032][T14256] tipc: Resetting bearer [ 283.228599][T14256] tipc: Disabling bearer [ 283.439292][T14280] netlink: 'syz.2.2362': attribute type 1 has an invalid length. [ 283.492093][T14280] bond13: (slave gretap4): making interface the new active one [ 283.500441][T14280] bond13: (slave gretap4): Enslaving as an active interface with an up link [ 283.576385][T14293] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 283.637945][T14301] netlink: 'syz.4.2364': attribute type 3 has an invalid length. [ 283.670799][T14293] 8021q: adding VLAN 0 to HW filter on device bond15 [ 283.679924][T14293] bond14: (slave bond15): making interface the new active one [ 283.688754][T14293] bond14: (slave bond15): Enslaving as an active interface with an up link [ 283.767365][T14293] netlink: 'syz.2.2367': attribute type 11 has an invalid length. [ 283.790866][T14293] 8021q: adding VLAN 0 to HW filter on device bond14 [ 283.929802][T14317] netlink: 'syz.2.2371': attribute type 17 has an invalid length. [ 284.310754][T14342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.330706][T14343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.575377][T14350] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 284.825281][T14366] __nla_validate_parse: 16 callbacks suppressed [ 284.825302][T14366] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2387'. [ 284.829571][T14367] xt_socket: unknown flags 0xe4 [ 284.834168][T14368] tipc: Enabled bearer , priority 0 [ 284.889874][T14364] tipc: Enabling of bearer rejected, already enabled [ 284.958751][T14364] tipc: Disabling bearer [ 285.793329][T14400] syzkaller0: entered promiscuous mode [ 285.798979][T14400] syzkaller0: entered allmulticast mode [ 299.341552][ T1107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 303.778574][T14425] validate_nla: 3 callbacks suppressed [ 303.778594][T14425] netlink: 'syz.2.2403': attribute type 33 has an invalid length. [ 303.817317][T14428] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 303.833979][T14425] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2403'. [ 303.956866][T14436] tipc: Enabled bearer , priority 10 [ 304.663527][T14482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'. [ 304.842500][T14484] netlink: 'syz.1.2421': attribute type 4 has an invalid length. [ 304.909320][T14498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.935908][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 305.212734][T14521] openvswitch: netlink: IPv4 tun info is not correct [ 305.241407][T14521] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 305.260063][T14521] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2433'. [ 305.560114][T14539] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 305.594702][T14544] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.605545][T14544] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.617533][T14546] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2441'. [ 305.688775][T14544] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.703528][T14544] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.758105][T14554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2442'. [ 305.788620][T14560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.825808][T14557] veth11: entered allmulticast mode [ 305.857558][T14544] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.869115][T14544] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.977436][T14544] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.000725][T14544] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.097840][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 306.111864][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 306.230220][T14573] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 306.472587][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 306.490043][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 306.592749][ T1107] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.625801][ T1107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.657153][ T1339] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.675336][ T1339] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.725197][ T1343] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.747191][ T1343] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.814274][ T1343] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.858513][ T1343] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.880713][T14660] syzkaller0: entered promiscuous mode [ 307.894005][T14660] syzkaller0: entered allmulticast mode [ 309.805938][T14693] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 309.963605][T14705] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.974032][T14705] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.060159][T14707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 310.142005][T14705] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.157703][T14705] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.184529][T14710] netlink: 'syz.3.2485': attribute type 1 has an invalid length. [ 310.235808][T14705] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.246116][T14705] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.340371][T14710] veth13: entered promiscuous mode [ 310.377743][T14705] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.389028][T14705] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.507393][T14721] __nla_validate_parse: 3 callbacks suppressed [ 310.507414][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 310.527928][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'. [ 310.537381][T14721] netlink: 'syz.0.2491': attribute type 14 has an invalid length. [ 310.553437][T14721] netlink: 'syz.0.2491': attribute type 13 has an invalid length. [ 310.578767][T14726] gre4: entered promiscuous mode [ 310.586049][T14726] gre4: entered allmulticast mode [ 310.718139][T14732] netlink: 'syz.2.2494': attribute type 11 has an invalid length. [ 310.936592][T14744] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2498'. [ 311.035328][ T1343] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.049457][ T1343] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.059753][T14747] netlink: 'syz.0.2499': attribute type 10 has an invalid length. [ 311.108895][ T1107] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.134479][ T1107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.150333][T14747] team0: Device hsr_slave_0 failed to register rx_handler [ 311.242181][ T1107] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.250433][ T1107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.282045][ T1107] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.295373][ T1107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.322663][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2506'. [ 311.513359][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 311.552100][T14774] netlink: 'syz.0.2510': attribute type 33 has an invalid length. [ 311.565514][T14774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2510'. [ 311.888753][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 311.901568][T14787] veth0_macvtap: left promiscuous mode [ 312.246863][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2520'. [ 312.417228][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2526'. [ 312.437695][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2525'. [ 313.241914][T14874] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 313.418672][T14881] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 313.893839][T14892] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.910623][T14892] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 313.920592][T14892] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 313.932093][T14892] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 314.027061][T14892] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.038693][T14892] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 314.050072][T14892] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 314.062773][T14892] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 314.085086][T14893] netlink: 'syz.4.2543': attribute type 10 has an invalid length. [ 317.267190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.649455][T14873] Set syz1 is full, maxelem 65536 reached [ 317.716898][T14892] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.727315][T14892] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 317.739387][T14892] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.751906][T14892] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.792878][T14893] team0: Port device hsr_slave_0 added [ 317.837410][T14892] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.861371][T14892] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 317.881010][T14892] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 317.902050][T14892] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 318.066983][ T1164] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.091322][ T1164] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 318.112307][ T1164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 318.120641][ T1164] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.149466][ T1339] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.161430][ T1339] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 318.178585][ T1339] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 318.190971][ T1339] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.243387][ T1164] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.254302][ T1164] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 318.291389][ T1164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 318.300858][ T1164] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.313164][ T1164] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.323558][ T1164] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 318.334607][ T1164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 318.344903][ T1164] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.539615][T14931] __nla_validate_parse: 2 callbacks suppressed [ 318.539639][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 318.842381][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 318.967660][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 319.048924][T14952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2563'. [ 319.068487][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2566'. [ 319.077560][T14957] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2566'. [ 319.091660][T14957] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2566'. [ 319.100188][T14959] openvswitch: netlink: Actions may not be safe on all matching packets [ 319.239450][T14964] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 319.306686][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2568'. [ 319.385050][T14964] 8021q: adding VLAN 0 to HW filter on device bond16 [ 319.620228][T14982] netlink: 'syz.4.2572': attribute type 30 has an invalid length. [ 319.644885][T14982] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 319.655149][T14982] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 319.790698][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'. [ 319.901639][T14997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2575'. [ 320.606254][T15036] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 320.618175][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.634405][T15032] ªªªªªª: renamed from vlan0 (while UP) [ 320.714407][T15046] netlink: 'syz.1.2592': attribute type 27 has an invalid length. [ 320.731265][T15046] netlink: 'syz.1.2592': attribute type 4 has an invalid length. [ 320.837238][T15051] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.847483][T15051] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 320.863338][T15051] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 320.869716][T15045] nbd: must specify an index to disconnect [ 320.875773][T15051] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.959755][T15051] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.991334][T15051] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 321.046986][T15051] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 321.075421][T15051] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.190883][T15051] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.202394][T15051] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 321.215240][T15051] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 321.225709][T15051] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.286440][T15051] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.299521][T15051] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 321.328613][T15051] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 321.340009][T15051] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.475213][T15088] xt_HMARK: proto mask must be zero with L3 mode [ 321.757194][T15106] netlink: 'syz.1.2609': attribute type 11 has an invalid length. [ 321.929839][T15112] ip6erspan0: entered promiscuous mode [ 321.947542][T15112] ip6erspan0: entered allmulticast mode [ 321.968368][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.983884][ T12] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 321.992339][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 322.000799][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.070127][ T1339] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.098926][ T1339] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 322.115687][ T1339] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 322.129945][ T1339] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.281743][ T1339] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.290972][T15135] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 322.298945][ T1339] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 322.310312][ T1339] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 322.319945][ T1339] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.490640][T15135] bond13: entered promiscuous mode [ 322.519529][T15135] 8021q: adding VLAN 0 to HW filter on device bond13 [ 322.530720][ T1339] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.547294][ T1339] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 322.569802][T15150] netlink: 'syz.1.2618': attribute type 1 has an invalid length. [ 322.590708][T15150] netlink: 'syz.1.2618': attribute type 1 has an invalid length. [ 322.602909][ T1339] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 322.614378][ T1339] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 322.639628][T15146] pim6reg: entered allmulticast mode [ 322.646887][T15154] pim6reg: left allmulticast mode [ 322.881848][T15166] syzkaller0: entered allmulticast mode [ 322.890821][T15165] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 322.909096][T15165] CPU: 0 UID: 0 PID: 15165 Comm: syz.4.2622 Not tainted syzkaller #0 PREEMPT(full) [ 322.909126][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.909138][T15165] Call Trace: [ 322.909146][T15165] [ 322.909155][T15165] dump_stack_lvl+0x189/0x250 [ 322.909189][T15165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.909219][T15165] ? __pfx__printk+0x10/0x10 [ 322.909254][T15165] ? kernfs_path_from_node+0x2f/0x290 [ 322.909275][T15165] ? kernfs_path_from_node+0x250/0x290 [ 322.909294][T15165] ? kernfs_path_from_node+0x2f/0x290 [ 322.909321][T15165] sysfs_warn_dup+0x8e/0xa0 [ 322.909352][T15165] sysfs_do_create_link_sd+0xc0/0x110 [ 322.909378][T15165] device_add_class_symlinks+0x1cf/0x240 [ 322.909407][T15165] device_add+0x475/0xb50 [ 322.909437][T15165] wiphy_register+0x1ba6/0x28d0 [ 322.909481][T15165] ? __pfx_wiphy_register+0x10/0x10 [ 322.909502][T15165] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 322.909538][T15165] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 322.909570][T15165] ieee80211_register_hw+0x3484/0x4100 [ 322.909615][T15165] ? ieee80211_register_hw+0x14c1/0x4100 [ 322.909653][T15165] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 322.909685][T15165] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 322.909725][T15165] ? __hrtimer_setup+0x187/0x210 [ 322.909743][T15165] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 322.909768][T15165] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 322.909837][T15165] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 322.909863][T15165] ? trace_kmalloc+0x1f/0xd0 [ 322.909885][T15165] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 322.909911][T15165] ? kstrndup+0xbf/0x160 [ 322.909945][T15165] hwsim_new_radio_nl+0xea4/0x1b10 [ 322.909977][T15165] ? __pfx___nla_validate_parse+0x10/0x10 [ 322.910018][T15165] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 322.910064][T15165] ? __nla_parse+0x40/0x60 [ 322.910090][T15165] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 322.910130][T15165] genl_family_rcv_msg_doit+0x215/0x300 [ 322.910165][T15165] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 322.910210][T15165] ? bpf_lsm_capable+0x9/0x20 [ 322.910234][T15165] ? security_capable+0x7e/0x2e0 [ 322.910273][T15165] genl_rcv_msg+0x60e/0x790 [ 322.910308][T15165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.910345][T15165] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 322.910391][T15165] netlink_rcv_skb+0x205/0x470 [ 322.910409][T15165] ? __lock_acquire+0xab9/0xd20 [ 322.910438][T15165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.910466][T15165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.910512][T15165] ? down_read+0x1ad/0x2e0 [ 322.910539][T15165] genl_rcv+0x28/0x40 [ 322.910561][T15165] netlink_unicast+0x82f/0x9e0 [ 322.910601][T15165] ? __pfx_netlink_unicast+0x10/0x10 [ 322.910630][T15165] ? netlink_sendmsg+0x642/0xb30 [ 322.910647][T15165] ? skb_put+0x11b/0x210 [ 322.910674][T15165] netlink_sendmsg+0x805/0xb30 [ 322.910707][T15165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.910733][T15165] ? aa_sock_msg_perm+0xf1/0x1d0 [ 322.910755][T15165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.910775][T15165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.910798][T15165] __sock_sendmsg+0x219/0x270 [ 322.910832][T15165] ____sys_sendmsg+0x505/0x830 [ 322.910864][T15165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.910900][T15165] ? import_iovec+0x74/0xa0 [ 322.910929][T15165] ___sys_sendmsg+0x21f/0x2a0 [ 322.910956][T15165] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.911030][T15165] ? __fget_files+0x2a/0x420 [ 322.911047][T15165] ? __fget_files+0x3a0/0x420 [ 322.911077][T15165] __x64_sys_sendmsg+0x19b/0x260 [ 322.911104][T15165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.911139][T15165] ? rcu_is_watching+0x15/0xb0 [ 322.911166][T15165] ? do_syscall_64+0xbe/0x3b0 [ 322.911193][T15165] do_syscall_64+0xfa/0x3b0 [ 322.911211][T15165] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.911230][T15165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.911249][T15165] ? clear_bhb_loop+0x60/0xb0 [ 322.911275][T15165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.911292][T15165] RIP: 0033:0x7f0efb58eec9 [ 322.911311][T15165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.911326][T15165] RSP: 002b:00007f0efc377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.911358][T15165] RAX: ffffffffffffffda RBX: 00007f0efb7e5fa0 RCX: 00007f0efb58eec9 [ 322.911372][T15165] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 322.911385][T15165] RBP: 00007f0efb611f91 R08: 0000000000000000 R09: 0000000000000000 [ 322.911396][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.911407][T15165] R13: 00007f0efb7e6038 R14: 00007f0efb7e5fa0 R15: 00007ffc8227ce98 [ 322.911444][T15165] [ 322.912245][T15171] netlink: 'syz.1.2624': attribute type 10 has an invalid length. [ 323.403798][T15172] pim6reg1: entered promiscuous mode [ 323.409367][T15172] pim6reg1: entered allmulticast mode [ 323.494683][T15171] team0: Port device geneve0 added [ 323.849902][T15203] bond0: (slave bridge0): Releasing backup interface [ 323.870192][T15203] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 323.900383][T15203] bond0: (slave team0): Releasing backup interface [ 323.944885][T15203] team0: Port device dummy0 removed [ 323.958468][T15203] bond0: (slave bridge_slave_1): Releasing backup interface [ 323.963261][T15208] __nla_validate_parse: 11 callbacks suppressed [ 323.963279][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2635'. [ 323.987748][T15203] bond6: (slave veth0_to_bond): Releasing active interface [ 323.999447][T15203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.018058][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 324.039808][T15211] netlink: 'syz.4.2634': attribute type 1 has an invalid length. [ 324.104010][T15212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2635'. [ 324.134124][T15209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2635'. [ 324.201033][T15211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2634'. [ 324.215752][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 324.301776][T15228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2638'. [ 324.851898][T15262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2648'. [ 325.729333][T15292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2657'. [ 325.870982][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.883586][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.892978][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.902421][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.910276][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.089153][T15300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.707453][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2666'. [ 326.721090][T15326] netlink: 'syz.1.2666': attribute type 7 has an invalid length. [ 326.729403][T15326] netlink: 'syz.1.2666': attribute type 8 has an invalid length. [ 326.974680][T15295] chnl_net:caif_netlink_parms(): no params data found [ 327.472359][T15295] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.480061][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.495689][T15295] bridge_slave_0: entered allmulticast mode [ 327.510699][T15295] bridge_slave_0: entered promiscuous mode [ 327.530206][T15348] syzkaller1: entered promiscuous mode [ 327.593565][T15348] syzkaller1: entered allmulticast mode [ 327.667990][T15295] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.683197][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.721488][T15295] bridge_slave_1: entered allmulticast mode [ 327.729193][T15295] bridge_slave_1: entered promiscuous mode [ 327.989101][ T5872] Bluetooth: hci5: command tx timeout [ 328.078189][T15295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.099803][T15295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.166883][T15295] team0: Port device team_slave_0 added [ 328.179252][T15295] team0: Port device team_slave_1 added [ 328.267913][T15392] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 328.280916][T15392] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 328.369327][T15295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.382986][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.411307][T15295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.432159][T15295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.439237][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.476302][T15295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.639922][T15295] hsr_slave_0: entered promiscuous mode [ 328.649554][T15295] hsr_slave_1: entered promiscuous mode [ 328.669293][T15295] debugfs: 'hsr0' already exists in 'hsr' [ 328.684045][T15295] Cannot create hsr debugfs directory [ 329.077328][T15430] __nla_validate_parse: 3 callbacks suppressed [ 329.077348][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 329.369929][T15295] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.406352][T15295] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 3615 - 0 [ 329.418247][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 329.449458][T15295] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.645051][T15456] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 329.678065][T15295] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.697270][T15295] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 3615 - 0 [ 329.723892][T15295] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.858432][T15295] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.899884][T15295] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 3615 - 0 [ 329.932122][T15295] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.977412][T15479] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2698'. [ 330.003791][T15295] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.025442][T15295] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 3615 - 0 [ 330.040628][T15295] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.067514][ T5872] Bluetooth: hci5: command tx timeout [ 330.657723][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 330.670173][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'. [ 330.691668][T15517] netlink: 'syz.1.2708': attribute type 20 has an invalid length. [ 330.710263][T15295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.722733][T15519] netlink: 'syz.4.2707': attribute type 10 has an invalid length. [ 330.730732][T15519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2707'. [ 330.753545][T15295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.772328][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 330.782963][T15519] dummy0: entered promiscuous mode [ 330.783632][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2708'. [ 330.800071][T15517] netlink: 'syz.1.2708': attribute type 20 has an invalid length. [ 330.809644][T15519] bridge0: port 1(dummy0) entered blocking state [ 330.817130][T15519] bridge0: port 1(dummy0) entered disabled state [ 330.829452][T15519] dummy0: entered allmulticast mode [ 330.836992][T15519] bridge0: port 1(dummy0) entered blocking state [ 330.843532][T15519] bridge0: port 1(dummy0) entered forwarding state [ 330.854450][T15295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.865549][T15295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.956262][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2712'. [ 330.961942][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 331.184460][T15295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.235075][T15295] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.255081][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.262373][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.323366][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.330574][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.995598][T15587] netlink: 'syz.2.2722': attribute type 1 has an invalid length. [ 332.085594][T15295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.146610][ T5872] Bluetooth: hci5: command tx timeout [ 332.204844][T15295] veth0_vlan: entered promiscuous mode [ 332.241058][T15295] veth1_vlan: entered promiscuous mode [ 332.318866][T15295] veth0_macvtap: entered promiscuous mode [ 332.332215][T15295] veth1_macvtap: entered promiscuous mode [ 332.377475][T15295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.410658][T15295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.448943][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.468785][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.496448][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.507322][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.644863][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.665887][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.979382][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.003349][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.232761][T15625] netlink: 'syz.1.2733': attribute type 10 has an invalid length. [ 334.200089][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.214751][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.223887][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.231349][ T5882] Bluetooth: hci5: command tx timeout [ 334.238221][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.256317][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.398003][T15716] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 335.465154][T15716] __nla_validate_parse: 19 callbacks suppressed [ 335.465176][T15716] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2760'. [ 335.517100][T15716] veth11: entered promiscuous mode [ 335.528863][T15716] bond14: (slave veth11): Enslaving as a backup interface with a down link [ 335.709803][T15728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2764'. [ 335.869914][T15659] chnl_net:caif_netlink_parms(): no params data found [ 336.301410][ T5872] Bluetooth: hci3: command tx timeout [ 336.350827][T15659] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.358439][T15659] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.365983][T15659] bridge_slave_0: entered allmulticast mode [ 336.374794][T15659] bridge_slave_0: entered promiscuous mode [ 336.407440][T15659] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.414954][T15659] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.422322][T15659] bridge_slave_1: entered allmulticast mode [ 336.430557][T15659] bridge_slave_1: entered promiscuous mode [ 336.515596][T15659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.529335][T15659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.647446][T15659] team0: Port device team_slave_0 added [ 336.673007][T15659] team0: Port device team_slave_1 added [ 336.797736][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'. [ 336.838714][T15659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.860271][T15659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.916267][T15659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.929663][T15659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.936778][T15659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.019491][T15659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.035965][T15783] veth0: entered promiscuous mode [ 337.055151][T15783] netlink: 'syz.3.2778': attribute type 10 has an invalid length. [ 337.096243][T15783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.116608][T15783] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 337.148962][T15790] netlink: 'syz.2.2782': attribute type 1 has an invalid length. [ 337.244174][T15790] 8021q: adding VLAN 0 to HW filter on device bond17 [ 337.253848][T15792] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 337.265759][T15792] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 337.268224][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2782'. [ 337.278421][T15778] veth0: left promiscuous mode [ 337.308739][T15659] hsr_slave_0: entered promiscuous mode [ 337.315731][T15659] hsr_slave_1: entered promiscuous mode [ 337.322892][T15659] debugfs: 'hsr0' already exists in 'hsr' [ 337.328655][T15659] Cannot create hsr debugfs directory [ 337.929507][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2793'. [ 337.945883][T15659] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.957113][T15659] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.013297][T15829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2795'. [ 338.048408][T15659] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.061761][T15659] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.119524][T15834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2797'. [ 338.202533][T15659] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.227262][T15659] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.290089][T15659] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.300159][T15659] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.381992][ T5872] Bluetooth: hci3: command tx timeout [ 338.666028][T15861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2801'. [ 338.670536][T15659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.699814][T15659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.748215][T15659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.782099][T15863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.798697][T15659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.885152][T15865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2807'. [ 338.915257][T15869] netlink: 'syz.0.2808': attribute type 1 has an invalid length. [ 338.929780][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 339.177161][T15659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.243325][T15659] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.278875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.286130][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.310374][T15889] IPVS: fo: FWM 3 0x00000003 - no destination available [ 339.399091][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.406379][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.455080][T15894] pim6reg: entered allmulticast mode [ 339.477505][T15892] tun0: tun_chr_ioctl cmd 1074025675 [ 339.483456][T15892] tun0: persist disabled [ 339.759131][T15904] nbd: must specify at least one socket [ 339.777726][T15906] netlink: 'syz.0.2820': attribute type 14 has an invalid length. [ 339.823058][T15909] netlink: 'syz.0.2820': attribute type 14 has an invalid length. [ 340.102497][T15920] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 340.178231][T15659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.279632][T15932] netlink: 'syz.2.2828': attribute type 1 has an invalid length. [ 340.345792][T15659] veth0_vlan: entered promiscuous mode [ 340.352376][T15926] netlink: 'syz.4.2817': attribute type 39 has an invalid length. [ 340.381044][T15659] veth1_vlan: entered promiscuous mode [ 340.475004][ T5872] Bluetooth: hci3: command tx timeout [ 340.558316][T15947] pim6reg1: entered promiscuous mode [ 340.564559][T15947] pim6reg1: entered allmulticast mode [ 340.624963][T15659] veth0_macvtap: entered promiscuous mode [ 340.639036][T15659] veth1_macvtap: entered promiscuous mode [ 340.695954][T15659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.749361][T15659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.771371][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.789390][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.810078][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.851956][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.029239][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.054958][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.161037][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.181265][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.310781][T15994] __nla_validate_parse: 15 callbacks suppressed [ 342.310802][T15994] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2845'. [ 342.558056][ T5872] Bluetooth: hci3: command tx timeout [ 343.065241][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.077287][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.089706][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.100768][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.128807][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.426304][T16010] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2849'. [ 343.609785][T16019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2851'. [ 343.674013][T16021] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2852'. [ 343.836322][T16030] netlink: 'syz.1.2855': attribute type 11 has an invalid length. [ 343.844493][T16030] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2855'. [ 343.966087][T16035] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 343.966749][T16033] 8021q: VLANs not supported on ip_vti0 [ 343.980120][T16035] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2857'. [ 344.000573][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2857'. [ 344.124583][T16033] syzkaller0: entered promiscuous mode [ 344.130303][T16033] syzkaller0: entered allmulticast mode [ 344.142299][T16041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2857'. [ 345.068661][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2862'. [ 345.097120][T16072] bridge_slave_1: left allmulticast mode [ 345.127341][T16072] bridge_slave_1: left promiscuous mode [ 345.137753][T16072] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.179943][T16072] bridge_slave_0: left allmulticast mode [ 345.186831][T16072] bridge_slave_0: left promiscuous mode [ 345.192096][ T5872] Bluetooth: hci4: command tx timeout [ 345.193117][T16072] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.483411][T16083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.539703][T16086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2865'. [ 345.562521][T16004] chnl_net:caif_netlink_parms(): no params data found [ 345.816302][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.826317][T16004] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.833993][T16004] bridge_slave_0: entered allmulticast mode [ 345.842827][T16004] bridge_slave_0: entered promiscuous mode [ 345.863763][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.874191][T16004] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.881679][T16004] bridge_slave_1: entered allmulticast mode [ 345.898284][T16004] bridge_slave_1: entered promiscuous mode [ 346.156249][T16004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.170589][T16004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.237247][T16004] team0: Port device team_slave_0 added [ 346.250547][T16004] team0: Port device team_slave_1 added [ 346.352314][T16004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.360061][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.387859][T16004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.408535][T16004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.420478][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.449089][T16004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.642974][T16004] hsr_slave_0: entered promiscuous mode [ 346.688514][T16004] hsr_slave_1: entered promiscuous mode [ 346.712597][T16004] debugfs: 'hsr0' already exists in 'hsr' [ 346.718381][T16004] Cannot create hsr debugfs directory [ 347.264079][ T5872] Bluetooth: hci4: command tx timeout [ 347.313016][T16143] xt_l2tp: unknown flags: 10 [ 347.511043][T16148] netlink: 'syz.1.2882': attribute type 12 has an invalid length. [ 347.831497][ T1343] bridge_slave_1: left allmulticast mode [ 347.846126][ T1343] bridge_slave_1: left promiscuous mode [ 347.870164][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.918854][ T1343] bridge_slave_0: left allmulticast mode [ 347.933970][ T1343] bridge_slave_0: left promiscuous mode [ 347.949690][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.149044][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.163443][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.179179][ T1343] bond0 (unregistering): Released all slaves [ 348.320117][T15793] ------------[ cut here ]------------ [ 348.326180][T15793] refcount_t: underflow; use-after-free. [ 348.332063][T15793] WARNING: CPU: 0 PID: 15793 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 348.341554][T15793] Modules linked in: [ 348.345669][T15793] CPU: 0 UID: 0 PID: 15793 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 348.355225][T15793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.365669][T15793] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 348.371849][T15793] Code: 40 ba e2 8b e8 c7 c9 ba fc 90 0f 0b 90 90 eb d7 e8 eb 2c f7 fc c6 05 63 17 c5 0a 01 90 48 c7 c7 a0 ba e2 8b e8 a7 c9 ba fc 90 <0f> 0b 90 90 eb b7 e8 cb 2c f7 fc c6 05 40 17 c5 0a 01 90 48 c7 c7 [ 348.391902][T15793] RSP: 0018:ffffc9001c01f700 EFLAGS: 00010246 [ 348.397964][T15793] RAX: 180ffb05423f1000 RBX: 0000000000000003 RCX: ffff888079a68000 [ 348.406411][T15793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 348.414465][T15793] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 348.422855][T15793] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 348.430844][T15793] R13: ffff88806add9c60 R14: ffff88806add9c78 R15: ffffffff86008fa0 [ 348.438832][T15793] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 348.447771][T15793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.454380][T15793] CR2: 00007ffc30df0e80 CR3: 000000006b1b8000 CR4: 00000000003526f0 [ 348.462367][T15793] Call Trace: [ 348.465640][T15793] [ 348.468581][T15793] klist_dec_and_del+0x3c7/0x3d0 [ 348.473724][T15793] ? __pfx_klist_children_put+0x10/0x10 [ 348.479718][T15793] klist_del+0xa6/0x110 [ 348.484195][T15793] device_del+0x280/0x8e0 [ 348.488537][T15793] ? _raw_spin_unlock_irq+0x2e/0x50 [ 348.493744][T15793] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 348.499815][T15793] ? __pfx_device_del+0x10/0x10 [ 348.504682][T15793] ? netdev_unregister_kobject+0x344/0x450 [ 348.510486][T15793] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 348.516924][T15793] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 348.523765][T15793] ? rtnl_net_dev_lock+0x257/0x2f0 [ 348.528877][T15793] unregister_netdevice_queue+0x33c/0x380 [ 348.534614][T15793] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 348.540849][T15793] ? rtnl_net_dev_lock+0x36/0x2f0 [ 348.545878][T15793] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 348.550982][T15793] unregister_netdev+0x1f/0x60 [ 348.555885][T15793] bnep_session+0x294d/0x2b40 [ 348.560660][T15793] ? rcu_is_watching+0x15/0xb0 [ 348.565457][T15793] ? trace_sched_exit_tp+0x36/0x110 [ 348.570663][T15793] ? __lock_acquire+0xab9/0xd20 [ 348.575677][T15793] ? __pfx_bnep_session+0x10/0x10 [ 348.580704][T15793] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 348.587020][T15793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.593651][T15793] ? __pfx_woken_wake_function+0x10/0x10 [ 348.599282][T15793] ? __kthread_parkme+0x7b/0x200 [ 348.604230][T15793] ? __kthread_parkme+0x1a1/0x200 [ 348.609251][T15793] kthread+0x70e/0x8a0 [ 348.613328][T15793] ? __pfx_bnep_session+0x10/0x10 [ 348.618376][T15793] ? __pfx_kthread+0x10/0x10 [ 348.623161][T15793] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.628364][T15793] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.633587][T15793] ? __pfx_kthread+0x10/0x10 [ 348.638169][T15793] ret_from_fork+0x439/0x7d0 [ 348.642776][T15793] ? __pfx_ret_from_fork+0x10/0x10 [ 348.647897][T15793] ? __switch_to_asm+0x39/0x70 [ 348.652727][T15793] ? __switch_to_asm+0x33/0x70 [ 348.657492][T15793] ? __pfx_kthread+0x10/0x10 [ 348.662108][T15793] ret_from_fork_asm+0x1a/0x30 [ 348.666880][T15793] [ 348.669892][T15793] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 348.677169][T15793] CPU: 0 UID: 0 PID: 15793 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 348.686698][T15793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.696739][T15793] Call Trace: [ 348.700010][T15793] [ 348.702932][T15793] dump_stack_lvl+0x99/0x250 [ 348.707530][T15793] ? __asan_memcpy+0x40/0x70 [ 348.712110][T15793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.717298][T15793] ? __pfx__printk+0x10/0x10 [ 348.721892][T15793] vpanic+0x281/0x750 [ 348.725867][T15793] ? __pfx__printk+0x10/0x10 [ 348.730459][T15793] ? __pfx_vpanic+0x10/0x10 [ 348.734953][T15793] ? is_bpf_text_address+0x26/0x2b0 [ 348.740155][T15793] panic+0xb9/0xc0 [ 348.743870][T15793] ? __pfx_panic+0x10/0x10 [ 348.748302][T15793] __warn+0x31b/0x4b0 [ 348.752274][T15793] ? refcount_warn_saturate+0x11a/0x1d0 [ 348.757817][T15793] ? refcount_warn_saturate+0x11a/0x1d0 [ 348.763353][T15793] report_bug+0x2be/0x4f0 [ 348.767696][T15793] ? refcount_warn_saturate+0x11a/0x1d0 [ 348.773231][T15793] ? refcount_warn_saturate+0x11a/0x1d0 [ 348.778768][T15793] ? refcount_warn_saturate+0x11c/0x1d0 [ 348.784307][T15793] handle_bug+0x84/0x160 [ 348.788560][T15793] exc_invalid_op+0x1a/0x50 [ 348.793055][T15793] asm_exc_invalid_op+0x1a/0x20 [ 348.797899][T15793] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 348.804049][T15793] Code: 40 ba e2 8b e8 c7 c9 ba fc 90 0f 0b 90 90 eb d7 e8 eb 2c f7 fc c6 05 63 17 c5 0a 01 90 48 c7 c7 a0 ba e2 8b e8 a7 c9 ba fc 90 <0f> 0b 90 90 eb b7 e8 cb 2c f7 fc c6 05 40 17 c5 0a 01 90 48 c7 c7 [ 348.823663][T15793] RSP: 0018:ffffc9001c01f700 EFLAGS: 00010246 [ 348.829735][T15793] RAX: 180ffb05423f1000 RBX: 0000000000000003 RCX: ffff888079a68000 [ 348.837698][T15793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 348.845658][T15793] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 348.853631][T15793] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 348.861609][T15793] R13: ffff88806add9c60 R14: ffff88806add9c78 R15: ffffffff86008fa0 [ 348.869570][T15793] ? __pfx_klist_children_put+0x10/0x10 [ 348.875120][T15793] klist_dec_and_del+0x3c7/0x3d0 [ 348.880077][T15793] ? __pfx_klist_children_put+0x10/0x10 [ 348.885632][T15793] klist_del+0xa6/0x110 [ 348.889779][T15793] device_del+0x280/0x8e0 [ 348.894121][T15793] ? _raw_spin_unlock_irq+0x2e/0x50 [ 348.899319][T15793] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 348.905388][T15793] ? __pfx_device_del+0x10/0x10 [ 348.910227][T15793] ? netdev_unregister_kobject+0x344/0x450 [ 348.916026][T15793] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 348.922448][T15793] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 348.929207][T15793] ? rtnl_net_dev_lock+0x257/0x2f0 [ 348.934315][T15793] unregister_netdevice_queue+0x33c/0x380 [ 348.940032][T15793] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 348.946271][T15793] ? rtnl_net_dev_lock+0x36/0x2f0 [ 348.951298][T15793] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 348.956399][T15793] unregister_netdev+0x1f/0x60 [ 348.961154][T15793] bnep_session+0x294d/0x2b40 [ 348.965822][T15793] ? rcu_is_watching+0x15/0xb0 [ 348.970576][T15793] ? trace_sched_exit_tp+0x36/0x110 [ 348.975771][T15793] ? __lock_acquire+0xab9/0xd20 [ 348.981253][T15793] ? __pfx_bnep_session+0x10/0x10 [ 348.986281][T15793] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 348.992161][T15793] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.998484][T15793] ? __pfx_woken_wake_function+0x10/0x10 [ 349.004108][T15793] ? __kthread_parkme+0x7b/0x200 [ 349.009052][T15793] ? __kthread_parkme+0x1a1/0x200 [ 349.014085][T15793] kthread+0x70e/0x8a0 [ 349.018148][T15793] ? __pfx_bnep_session+0x10/0x10 [ 349.023162][T15793] ? __pfx_kthread+0x10/0x10 [ 349.027746][T15793] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.032928][T15793] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.038111][T15793] ? __pfx_kthread+0x10/0x10 [ 349.042690][T15793] ret_from_fork+0x439/0x7d0 [ 349.047268][T15793] ? __pfx_ret_from_fork+0x10/0x10 [ 349.052370][T15793] ? __switch_to_asm+0x39/0x70 [ 349.057136][T15793] ? __switch_to_asm+0x33/0x70 [ 349.061892][T15793] ? __pfx_kthread+0x10/0x10 [ 349.066490][T15793] ret_from_fork_asm+0x1a/0x30 [ 349.071272][T15793] [ 350.219998][T15793] Shutting down cpus with NMI [ 350.224875][T15793] Kernel Offset: disabled [ 350.229198][T15793] Rebooting in 86400 seconds..