last executing test programs: 3.275669676s ago: executing program 4 (id=2331): r0 = socket$netlink(0x10, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd0, &(0x7f0000000600), 0x4) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002003030"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) (rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r6, &(0x7f0000000900)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0x1e8, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[@dstopts={0x2f, 0x9, '\x00', [@padn, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0xa, [0x5, 0x0, 0xc5]}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @enc_lim={0x4, 0x1, 0x2}]}, @hopopts={0x3a, 0x0, '\x00', [@padn]}, @dstopts={0x2c, 0x12, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x5, [0x3]}}, @calipso={0x7, 0x58, {0x2, 0x14, 0x8, 0x1000, [0xd1b, 0x9, 0x6, 0xffffffffffffff50, 0x40, 0xf93, 0x100, 0x3, 0xf9fa, 0xa5]}}]}, @routing={0x84, 0x10, 0x0, 0x5, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xd1e2}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x9}]}, @dstopts={0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}]}}}}}}, 0x21e) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400a69d6072750000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"], 0x14}}, 0x8080) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) 3.059284437s ago: executing program 4 (id=2334): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x80111500, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2.771003719s ago: executing program 4 (id=2336): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0xffffffff, @loopback, 0xe}, 0x1c) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="a3d0", 0x2}], 0x1}, 0x8008880) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=']', 0x1}], 0x1}, 0x24084080) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1402450}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_I_TEI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x30000011}, 0x40000) 2.541907328s ago: executing program 0 (id=2338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x1b8, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x150, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72ab257d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7092af63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1021a297}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17ba99b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x758c8f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52325f29}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a4512b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b8f8351}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x190c97a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bd6fc1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc2f874d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8899be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x731e3d84}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e4853c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f2a9f04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a268223}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x162bdaaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31169421}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a41a808}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b0e144a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12c107f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46d1f184}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc92d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70d4649}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x168d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc57b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5764d5fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c19a779}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6017}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 2.359384177s ago: executing program 0 (id=2340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x800) 2.358115135s ago: executing program 3 (id=2341): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x700, 0x6534, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r5, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x200, 0x18}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7]}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x4}, 0x10, 0x1ec8, r4, 0x3, &(0x7f00000003c0)=[r6, r7, r9], &(0x7f0000000400)=[{0x4, 0x2, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x1}, {0x2, 0x3, 0x0, 0xb}], 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r1) 2.205186971s ago: executing program 0 (id=2343): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x1a, &(0x7f0000000480), 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001879b7e55ffe5c1bfc75000000000000001800000018000000030000d9010000000100001100"/51], 0x0, 0x33}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004440)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x30}}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="f4000600ffffffffffff0000080011800400050060961b92e5b2f7fdf92ed0ad0e188de7c31df6ac6f33c51e3b1562b9171955e6890116814859c2a203f33a0fd18662d7c1a0e7a07bb5a88e79c5f934458ac204a2f338ca7089224dd209c54ef730e3a49190f8e6f9cf689702323946510df658d6036d40d0ff3e"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$cgroup_pid(r5, &(0x7f0000000340), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f0000000040)=0x6, 0x4) sendmsg$NLBL_MGMT_C_PROTOCOLS(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000627bd7000fbdbdf250700000014000500fe8000000000000000000000000000aa"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, 0x6f92971662672db3}, &(0x7f00000004c0)=0x20) 1.989057098s ago: executing program 0 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000001c0)={0x1, 0x100ff7fffff, 0x5, 0x3, 0xeb, 0x4b}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}], 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)={0x2, 'ipvlan0\x00', {0x7}}) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r8, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000180)={r0}) 1.891726428s ago: executing program 2 (id=2347): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x10) 1.840534851s ago: executing program 4 (id=2349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x1, 0x4, 0x2e) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) 1.719297705s ago: executing program 2 (id=2350): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800010700000000000000000800000096b2ba891bd219155d6cc72f1e239ab1beede994748e84deee"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r1, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2}) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="8f1fcfa844460efc120180b25e1bef7fb24a0709910221ea2497d9547a4e0897a63337b38b8992c7f9985c296fe38c03a59c01fbe6aa60c7ff5872cedd0229dc598b3a0b4e9fb1", 0x47}], 0x1, &(0x7f0000000380)="a7d47f4feeb5933099772de7baded8469a1c3cbc5204a5cec4920550c69809c342c6e539c9a20248e13d05aafe1106ebacaca315", 0x34}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000002465f2126cf73a9734bef258a8580b41df6cc2f1b78b5ae454579e4a931480b30cc34fc192ff72ca4f08fbbf0d434f635d13d5ad458156cbd6b6bffd8be59e21881c06ded9cab8d58f561bac9753b54ea953c854aa26b4d5c5737e2686d9433cee0fe4dafb2e945eca037cfe77bf6ac1117aa24fa2c8599aab1c76f42a79e46f4e1b8c728b23929461337f7cb3149122cbb4e1efe12dfa03d8969ba33b47c257a0b903a19b2fe565d5527d6ffe336c57d2d46f5738012b5698f666d02bb435e427089d75b2b66573c66ec02abb8ebb031f7aa6f1d638c143cbb167c8449cddee1b"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000c00)={0x1020, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFQA_PAYLOAD={0x1004, 0xa, "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"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f2}]}, 0x1020}}, 0x44) openat$tun(0xffffff9c, &(0x7f00000001c0), 0xe000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 1.715803918s ago: executing program 1 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9], 0x3c}}, 0x0) 1.623532343s ago: executing program 2 (id=2352): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030400000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="00080004075005003c0012800b00010062726964676500002c00028005001909020000000c0023000f000000000000000c00220006000000000000000500240001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {0x0}], 0x2, 0x0, 0x0, 0x1f000801}, 0x0) 1.623014273s ago: executing program 4 (id=2353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c00028005000100000000000800073fffeb00001c000f800800014000000000b7fc0340000000000800024000000000"], 0x88}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r2, @ANYBLOB="000229bd7000fddbdf256500000008000300", @ANYBLOB="ca547146313930c58a21f9f1fec4e5be71582b939320255c11702a086e86c6739dcdbe7a42925168dd74c4c3821569c4db4faf59277c4f6fc362c993380ef4016382cc756d3d10a617bf714c5f79029a42c5cec43abdbef9eb778c5d9bf1572957d1e054e8013d54e3a640803ad3894435464b82fe9be39ef0f424d39590e5d3481b7723", @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292e154c7beef915d564c90c2004b0f25d41ecb7588de", 0x21) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES32=r3, @ANYBLOB="05005300010000000800050004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4004080) 1.443722751s ago: executing program 1 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x28, r3, 0x60b, 0x2000, 0x2, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.417477433s ago: executing program 1 (id=2355): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000006e93f263715efe109400"/37], 0x50) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.408957348s ago: executing program 3 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.223617913s ago: executing program 2 (id=2357): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001140)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x10, &(0x7f00000010c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x88}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x34}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0xc554}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x8, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x8, 0x34]}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x808000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x40}}, 0x20040810) 1.223111129s ago: executing program 3 (id=2358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x0, 0xdc4c, 0x1, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x15, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="40005200060010"], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x10, 0xfad31abf086d1404, 0x8, 0x9, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x67, 0x0, 0x79, 0x4, 0x0, @loopback, @private=0xa010102, {[@end, @lsrr={0x83, 0x7, 0xf0, [@broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000013c0)=@ethtool_link_settings={0x1, 0x9, 0x9, 0x5, 0x7, 0x1, 0x1, 0x4, 0x81, 0x0, [0x5, 0xc6e, 0x9, 0x0, 0xa, 0x4, 0xda, 0x5]}}) 1.201470312s ago: executing program 4 (id=2359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9ef8a5853494965a319b84698b1c86956aad22441a70d7c2e9822be939adf3539f652c9499473354839fdd570000000048674345696b59de96a71079daf14aaa1ce3634fcf648654d373c2b7eef8db5940d61a90e71d0ac63af7d243f634b568e284b1907d98db6b787e50fc", @ANYRES16=r1, @ANYBLOB="200025bd7000fcdbdf250f0000000800060000000080080005000c0000004400028006000f000b00000008000800020000000800030003000000080008007f00000005000d000100000008000600ffffffff060002004e2100000800030004000000240003800800030001000000060007004e2000000800030002000000050008000300000008000400500e00000800060002000000"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x88010) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r13, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="dd2cdeec", 0x4}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r13, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.020978238s ago: executing program 0 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000005340)=[{{&(0x7f00000004c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000000740)=""/158, 0x9e}, {&(0x7f00000005c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000800)=""/93, 0x5d}, {&(0x7f0000000880)=""/242, 0xf2}], 0x7, &(0x7f0000000a00)=""/162, 0xa2}, 0x7}, {{&(0x7f0000000ac0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000600)}, 0x5}, {{&(0x7f0000000e00)=@nfc, 0x80, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001140)=""/215, 0xd7}, {&(0x7f0000001240)=""/2, 0x2}, {0x0}, {&(0x7f0000001380)=""/138, 0x8a}, {&(0x7f0000002500)=""/212, 0xd4}], 0x6, &(0x7f00000026c0)=""/160, 0xa0}, 0x9}, {{&(0x7f0000001440)=@l2, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002780)=""/10, 0xa}, {&(0x7f00000027c0)=""/189, 0xbd}, {&(0x7f0000002880)=""/3, 0x3}, {&(0x7f00000028c0)=""/134, 0x86}, {&(0x7f0000002980)=""/50, 0x32}, {&(0x7f00000029c0)=""/205, 0xcd}], 0x6}, 0xfff}, {{&(0x7f0000002b40)=@in, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/127, 0x7f}, {&(0x7f0000003c40)=""/225, 0xe1}], 0x3}}], 0x5, 0x40010020, 0x0) 455.756532ms ago: executing program 1 (id=2361): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x20003f, 0x0, 0x3}, 0x10) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000003c0)={0x3, @bcast}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 384.713807ms ago: executing program 3 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) 366.480837ms ago: executing program 0 (id=2363): r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000980)=0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f00000009c0)='ns/time_for_children\x00') r3 = socket(0x23, 0x6, 0xeba2) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/107, 0x6b}], 0x3, &(0x7f0000000240)=""/152, 0x98}, 0x8}, {{&(0x7f0000000300)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/131, 0x83}], 0x6, &(0x7f00000007c0)=""/231, 0xe7}, 0x3}], 0x2, 0x400000c1, &(0x7f0000000940)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYRESOCT, @ANYRESHEX=r2, @ANYRES8=0x0, @ANYRES32=0x0], 0x30}, 0x44800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080002000101000006000100000000001800088014000780060005000000000008000500ffffffff0800048004000b80"], 0x44}}, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r2}}) 243.694002ms ago: executing program 2 (id=2364): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 242.948764ms ago: executing program 1 (id=2365): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1, 0x1}, 0x10}, {&(0x7f00000000c0)={0x10, 0x0, 0x1, 0x70bd25}, 0x10}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000000000c6000000ffff00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x560, 0x64, &(0x7f0000000200)=""/100, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xf93}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10, 0x0, r1}, 0x94) 208.422955ms ago: executing program 3 (id=2366): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r0, 0x48212b8952c3affd, 0x70bd24}, 0x14}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) 83.892152ms ago: executing program 1 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) 3.682083ms ago: executing program 2 (id=2368): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x48, r1, 0x615, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0xc040) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async, rerun: 32) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYBLOB="796fd666ff77924d2f88ab4361cba204030bfc0de6861e0d566ef19d87cc491992bdf4767ed3e79f23ffc000f455d912bf4f35f8abef77bc1da4a60bac6f34302516d5b2b47fcd7019b76c605e0318681d650eaa64a02cf5cd2a47b43ebe10ac2d091732a30306a806e6b1f985c6d746b84b5a4df1b135da741ef1d063a09357065eb7b0f944ef535282fe71f38032a91144068fc70e5a06aafbb8", @ANYRES64=r6, @ANYRES32=0x0, @ANYRES8=r6, @ANYBLOB="62712cb9990c9a0909d231cdc19816213a6918c5bbc0542fa314843fd44e3fbcfb67e03cc7b61acb68d738c70c8d643b5e4a143caccdba4520e63c8edeb3f9bc38f83eb0afb0490b9859698c5e0cc29c45a80a145a43163dda16dbc32dec846bea2f95ec6600b55efc9348559eb1e4a391d5c1f7a8092561caa63d8847454ec7e38d2823d174558ed12e955864f3e07787017707f0f437cee8582a0b5c1726523dc203d84a"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044884) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x401cc}, 0x40840) 0s ago: executing program 3 (id=2369): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000001) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x33}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x84, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x84}}, 0x4000051) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@cgroup=r4, r4, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r5) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x2a4, r10, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x60}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6970}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2a15947}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x58, 0x3, "b8ec523533da330200706c60c520145c625c0821e24b193ba8adcdf439520e612caa6c45656f8781ac4155e7182c519a042e8cddcd3533d148c3222ccf2e5fbcee8aa97be37f2aeb846d6f48f63965084394cd00"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc0ce}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "d3b5c2e537560960bdfd83a377cec7e944db92264d7fc8066e92d9da63"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbcce}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800600"], 0x24}, 0x1, 0x5502000000000000}, 0x0) kernel console output (not intermixed with test programs): e [ 98.230333][ T5846] veth1_macvtap: entered promiscuous mode [ 98.288440][ T5838] veth0_vlan: entered promiscuous mode [ 98.339315][ T5838] veth1_vlan: entered promiscuous mode [ 98.350164][ T5836] veth0_macvtap: entered promiscuous mode [ 98.366953][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.378908][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.394400][ T5852] veth0_macvtap: entered promiscuous mode [ 98.416723][ T5836] veth1_macvtap: entered promiscuous mode [ 98.466819][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.498210][ T5852] veth1_macvtap: entered promiscuous mode [ 98.538244][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.551536][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.567803][ T5956] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 98.580211][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.596273][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.605669][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.641557][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.670556][ T5838] veth0_macvtap: entered promiscuous mode [ 98.691523][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.701273][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.717679][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.736425][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.748828][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.790191][ T5838] veth1_macvtap: entered promiscuous mode [ 98.809354][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.894696][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 98.911565][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.925544][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.953745][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.961171][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.973262][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.985388][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.001237][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.090523][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.154014][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.164589][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.174695][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.184792][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.200982][ T5961] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7'. [ 99.217676][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.226834][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.250346][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.259122][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.271774][ T5158] Bluetooth: hci2: command tx timeout [ 99.343580][ T5158] Bluetooth: hci1: command tx timeout [ 99.422355][ T5158] Bluetooth: hci3: command tx timeout [ 99.425273][ T5843] Bluetooth: hci4: command tx timeout [ 99.502148][ T5843] Bluetooth: hci0: command tx timeout [ 99.525651][ T3484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.546913][ T3484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.616721][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.625586][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.730160][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.749072][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.834309][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.856555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.871373][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.957984][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.991474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.288224][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13'. [ 100.395721][ T5986] syz.4.13 uses obsolete (PF_INET,SOCK_PACKET) [ 100.620525][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 100.802657][ T6002] openvswitch: netlink: Missing key (keys=40, expected=80) [ 101.212595][ T6006] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 101.432848][ T6016] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 101.647616][ T6021] netlink: 188 bytes leftover after parsing attributes in process `syz.3.23'. [ 101.709238][ T6024] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 101.902695][ T6036] netlink: 64 bytes leftover after parsing attributes in process `syz.4.28'. [ 101.969374][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 102.183600][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 102.267945][ T6043] dummy0: entered promiscuous mode [ 102.289037][ T6043] batadv_slave_1: entered promiscuous mode [ 102.445862][ T6057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.500405][ T6058] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 102.797776][ T6066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.36'. [ 102.901074][ T6071] netlink: 300 bytes leftover after parsing attributes in process `syz.1.39'. [ 102.992073][ T6074] Bluetooth: MGMT ver 1.23 [ 103.008249][ T6076] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 103.181528][ T6081] dvmrp1: entered allmulticast mode [ 103.317820][ T6085] Zero length message leads to an empty skb [ 103.533160][ T6098] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 103.562445][ T6098] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 103.924273][ T6117] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 103.936607][ T6117] __nla_validate_parse: 2 callbacks suppressed [ 103.936631][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 104.087903][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 104.141412][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 104.252207][ T6121] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 104.342582][ T3484] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.358951][ T6134] trusted_key: syz.1.60 sent an empty control message without MSG_MORE. [ 104.391777][ T3484] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.422964][ T3484] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.479276][ T3484] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.573762][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 104.775433][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 104.922766][ T6161] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.67'. [ 104.939915][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 105.439056][ T6146] syz.2.63 (6146) used greatest stack depth: 20024 bytes left [ 106.517970][ T6196] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.561482][ T6196] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.875945][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 106.883800][ T6215] netlink: 'syz.1.83': attribute type 33 has an invalid length. [ 106.932655][ T6215] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 107.065007][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 107.118846][ T6229] netlink: 96 bytes leftover after parsing attributes in process `syz.3.87'. [ 107.253709][ T6234] veth0: entered promiscuous mode [ 108.042316][ T6265] team0: Device wireguard0 is of different type [ 108.095820][ T6273] sctp: failed to load transform for md5: -2 [ 108.348991][ T6287] warning: `syz.0.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.902796][ T6310] xt_limit: Overflow, try lower: 271964/0 [ 109.073851][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.082578][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.177301][ T6326] __nla_validate_parse: 3 callbacks suppressed [ 109.177331][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.111'. [ 109.393461][ T6305] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 109.604099][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.619907][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.649901][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.684727][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.699866][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.720924][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.784518][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.842916][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.859134][ T6348] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.119'. [ 109.979499][ T6360] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 110.017957][ T6360] nbd: couldn't find device at index 1048576 [ 110.436387][ T6377] netlink: 'syz.0.128': attribute type 16 has an invalid length. [ 110.476652][ T6377] netlink: 'syz.0.128': attribute type 17 has an invalid length. [ 110.648284][ T6377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.671534][ T6386] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 110.902626][ T6395] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 111.002081][ T6401] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 111.177359][ T6407] tipc: Started in network mode [ 111.195987][ T6407] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 111.218972][ T6407] tipc: Enabled bearer , priority 10 [ 111.264238][ C1] Illegal XDP return value 16128 on prog (id 30) dev bond0, expect packet loss! [ 111.715066][ T6427] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 111.763707][ T6426] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 111.794783][ T6426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 111.801558][ T6426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 111.865923][ T6439] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 112.086418][ T6451] netlink: 'syz.3.151': attribute type 8 has an invalid length. [ 112.264476][ T6460] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.332898][ T5926] tipc: Node number set to 10463914 [ 112.496414][ T6465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.642906][ T6465] macvlan3: entered allmulticast mode [ 112.667199][ T6465] bond1: (slave macvlan3): Opening slave failed [ 112.829425][ T6487] 8021q: VLANs not supported on ip6_vti0 [ 112.987154][ T6491] raw_sendmsg: syz.4.164 forgot to set AF_INET. Fix it! [ 113.517979][ T6527] veth1_to_bond: entered allmulticast mode [ 113.663699][ T6520] sctp: failed to load transform for md5: -2 [ 113.690609][ T6526] veth1_to_bond: left allmulticast mode [ 113.809139][ T6538] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 113.818498][ T6538] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 113.851284][ T6539] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 113.880319][ T6539] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 114.070156][ T6549] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 114.375939][ T6554] bond2 (unregistering): Released all slaves [ 114.570567][ T6573] team0: Device gtp0 is of different type [ 114.609476][ T6581] netlink: 'syz.1.188': attribute type 8 has an invalid length. [ 114.617680][ T6578] __nla_validate_parse: 36 callbacks suppressed [ 114.617702][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'. [ 114.646199][ T6569] tipc: Started in network mode [ 114.652746][ T6569] tipc: Node identity aa5e2d536033, cluster identity 4711 [ 114.660390][ T6569] tipc: Enabled bearer , priority 0 [ 114.674162][ T6572] syzkaller0: entered promiscuous mode [ 114.689964][ T6572] syzkaller0: entered allmulticast mode [ 114.809133][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 114.856503][ T6574] tipc: Resetting bearer [ 115.014469][ T6574] tipc: Disabling bearer [ 115.378568][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 115.437475][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 115.474528][ T6617] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 115.586508][ T6623] pimreg: entered allmulticast mode [ 115.629369][ T6623] dvmrp1: left allmulticast mode [ 115.648464][ T6623] pimreg: left allmulticast mode [ 115.964896][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 116.259610][ T6646] netlink: 'syz.0.206': attribute type 3 has an invalid length. [ 116.284906][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 116.317385][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 116.369446][ T6646] netlink: 'syz.0.206': attribute type 12 has an invalid length. [ 116.384831][ T6646] netlink: 'syz.0.206': attribute type 11 has an invalid length. [ 116.552901][ T6646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.674637][ T6663] netlink: 'syz.4.213': attribute type 12 has an invalid length. [ 117.081851][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 117.108766][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 117.137418][ T6679] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 117.158739][ T6679] netlink: 148 bytes leftover after parsing attributes in process `syz.3.218'. [ 117.232065][ T6679] netlink: 'syz.3.218': attribute type 33 has an invalid length. [ 117.646781][ T6706] tipc: Enabled bearer , priority 0 [ 117.701001][ T6710] syzkaller0: entered promiscuous mode [ 117.736436][ T6710] syzkaller0: entered allmulticast mode [ 117.837258][ T6702] tipc: Resetting bearer [ 117.923278][ T6702] tipc: Disabling bearer [ 118.319723][ T6740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.652428][ T6759] netlink: 'syz.1.239': attribute type 24 has an invalid length. [ 118.935273][ T6773] IPVS: length: 73 != 6168 [ 119.165366][ T6781] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 119.588863][ T6807] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 119.683363][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.716919][ T6807] bond0: (slave team0): Enslaving as an active interface with an up link [ 119.962000][ T6822] __nla_validate_parse: 5 callbacks suppressed [ 119.962023][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 120.095555][ T6829] Bluetooth: MGMT ver 1.23 [ 120.131264][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 120.420265][ T6835] geneve2: entered promiscuous mode [ 120.428876][ T6835] geneve2: entered allmulticast mode [ 120.440838][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 120.652603][ T44] hid-generic 0005:10CF:0004.0001: item fetching failed at offset 0/1 [ 120.662867][ T44] hid-generic 0005:10CF:0004.0001: probe with driver hid-generic failed with error -22 [ 120.916819][ T6875] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 121.029115][ T6875] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.150220][ T6886] hsr0: entered promiscuous mode [ 121.168179][ T6886] hsr0: entered allmulticast mode [ 121.182243][ T6886] hsr_slave_0: entered allmulticast mode [ 121.214444][ T6886] hsr_slave_1: entered allmulticast mode [ 121.324883][ T59] tipc: Subscription rejected, illegal request [ 121.380224][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 121.589889][ T6910] IPVS: length: 157 != 24 [ 121.642432][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 121.651496][ T6917] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 121.663590][ T6915] netlink: 51 bytes leftover after parsing attributes in process `syz.3.281'. [ 121.763857][ T6917] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 121.783574][ T6923] netlink: 108 bytes leftover after parsing attributes in process `syz.2.282'. [ 121.859460][ T6917] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 121.901660][ T6917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.280'. [ 121.923645][ T6933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.130838][ T6947] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 122.177873][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.288'. [ 122.517329][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 122.566395][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.603660][ T44] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.612272][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.784065][ T6013] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.828913][ T6987] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 123.494975][ T7029] netlink: 'syz.2.305': attribute type 2 has an invalid length. [ 123.582169][ T44] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.601927][ T7033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.336828][ T7065] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 124.397232][ T7071] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 124.692123][ T7081] tipc: Enabled bearer , priority 0 [ 124.743736][ T7081] tipc: Resetting bearer [ 124.787804][ T7079] tipc: Disabling bearer [ 124.837582][ T7091] lo: entered promiscuous mode [ 124.886331][ T7091] netlink: 'syz.2.325': attribute type 2 has an invalid length. [ 124.935105][ T7091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.063357][ T7108] __nla_validate_parse: 8 callbacks suppressed [ 125.063381][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 125.179301][ T7114] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 125.220441][ T7119] vcan0: entered allmulticast mode [ 125.222013][ T7114] netlink: 228 bytes leftover after parsing attributes in process `syz.4.329'. [ 125.802759][ T7152] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.914611][ T7152] delete_channel: no stack [ 126.034385][ T7167] veth1_to_bond: entered allmulticast mode [ 126.067756][ T7167] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 126.088970][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 126.128456][ T7167] bond0: (slave bond_slave_1): Releasing backup interface [ 126.199939][ T7167] veth1_to_bond (unregistering): left allmulticast mode [ 126.343642][ T7180] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 126.358541][ T7180] netlink: 228 bytes leftover after parsing attributes in process `syz.0.348'. [ 126.377177][ T7187] netlink: 'syz.1.351': attribute type 17 has an invalid length. [ 126.385384][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.399473][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 126.580660][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 126.813066][ T7208] netlink: 'syz.4.356': attribute type 12 has an invalid length. [ 126.821929][ T7208] netlink: 'syz.4.356': attribute type 29 has an invalid length. [ 126.846453][ T7208] netlink: 148 bytes leftover after parsing attributes in process `syz.4.356'. [ 126.975394][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.360'. [ 126.988189][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 127.135599][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 127.142348][ T7230] lo: left promiscuous mode [ 127.147452][ T7231] netlink: 'syz.4.362': attribute type 11 has an invalid length. [ 127.154526][ T7228] syz.1.364: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 127.175181][ T7228] CPU: 1 UID: 0 PID: 7228 Comm: syz.1.364 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 127.175219][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.175242][ T7228] Call Trace: [ 127.175251][ T7228] [ 127.175265][ T7228] dump_stack_lvl+0x189/0x250 [ 127.175308][ T7228] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 127.175343][ T7228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.175365][ T7228] ? __pfx__printk+0x10/0x10 [ 127.175394][ T7228] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 127.175418][ T7228] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 127.175450][ T7228] warn_alloc+0x214/0x310 [ 127.175472][ T7228] ? stack_depot_save_flags+0x429/0x900 [ 127.175496][ T7228] ? __pfx_warn_alloc+0x10/0x10 [ 127.175517][ T7228] ? kasan_save_track+0x4f/0x80 [ 127.175546][ T7228] ? xskq_create+0x56/0x170 [ 127.175573][ T7228] ? xsk_init_queue+0xb0/0x110 [ 127.175597][ T7228] ? xsk_setsockopt+0x4dc/0x8d0 [ 127.175631][ T7228] ? do_sock_setsockopt+0x17c/0x1b0 [ 127.175657][ T7228] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 127.175674][ T7228] ? do_syscall_64+0xfa/0x3b0 [ 127.175714][ T7228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.175744][ T7228] __vmalloc_node_range_noprof+0x125/0x12f0 [ 127.175799][ T7228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.175826][ T7228] ? __kasan_kmalloc+0x93/0xb0 [ 127.175863][ T7228] vmalloc_user_noprof+0xad/0xf0 [ 127.175886][ T7228] ? xskq_create+0xbf/0x170 [ 127.175915][ T7228] xskq_create+0xbf/0x170 [ 127.175947][ T7228] xsk_init_queue+0xb0/0x110 [ 127.175980][ T7228] xsk_setsockopt+0x4dc/0x8d0 [ 127.176010][ T7228] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.176039][ T7228] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.176070][ T7228] ? aa_sock_opt_perm+0x74/0x110 [ 127.176096][ T7228] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 127.176118][ T7228] ? __pfx_xsk_setsockopt+0x10/0x10 [ 127.176151][ T7228] do_sock_setsockopt+0x17c/0x1b0 [ 127.176181][ T7228] __x64_sys_setsockopt+0x13f/0x1b0 [ 127.176209][ T7228] do_syscall_64+0xfa/0x3b0 [ 127.176239][ T7228] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.176269][ T7228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.176291][ T7228] ? clear_bhb_loop+0x60/0xb0 [ 127.176317][ T7228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.176337][ T7228] RIP: 0033:0x7f1db6f8ebe9 [ 127.176365][ T7228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.176384][ T7228] RSP: 002b:00007f1db7d69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.176409][ T7228] RAX: ffffffffffffffda RBX: 00007f1db71b5fa0 RCX: 00007f1db6f8ebe9 [ 127.176425][ T7228] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 127.176437][ T7228] RBP: 00007f1db7011e19 R08: 0000000000000004 R09: 0000000000000000 [ 127.176449][ T7228] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.176461][ T7228] R13: 00007f1db71b6038 R14: 00007f1db71b5fa0 R15: 00007ffcb80af568 [ 127.176492][ T7228] [ 127.176685][ T7228] Mem-Info: [ 127.488236][ T7228] active_anon:3671 inactive_anon:0 isolated_anon:0 [ 127.488236][ T7228] active_file:1165 inactive_file:39838 isolated_file:0 [ 127.488236][ T7228] unevictable:768 dirty:40 writeback:0 [ 127.488236][ T7228] slab_reclaimable:10730 slab_unreclaimable:96286 [ 127.488236][ T7228] mapped:28773 shmem:1361 pagetables:914 [ 127.488236][ T7228] sec_pagetables:0 bounce:0 [ 127.488236][ T7228] kernel_misc_reclaimable:0 [ 127.488236][ T7228] free:1331853 free_pcp:14891 free_cma:0 [ 127.549047][ T7228] Node 0 active_anon:14684kB inactive_anon:0kB active_file:4660kB inactive_file:159152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115092kB dirty:156kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11692kB pagetables:3532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.632008][ T7228] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.676793][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.684774][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.709162][ T7228] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.743565][ T7228] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 127.750864][ T7228] Node 0 DMA32 free:1423048kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14640kB inactive_anon:0kB active_file:4660kB inactive_file:157316kB unevictable:1536kB writepending:156kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:35344kB local_pcp:18812kB free_cma:0kB [ 127.802722][ T7228] lowmem_reserve[]: 0 0 1 1 1 [ 127.807720][ T7228] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 127.841954][ T7228] lowmem_reserve[]: 0 0 0 0 0 [ 127.848663][ T7228] Node 1 Normal free:3894844kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24128kB local_pcp:13440kB free_cma:0kB [ 127.885014][ T7228] lowmem_reserve[]: 0 0 0 0 0 [ 127.890111][ T7228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.919527][ T7228] Node 0 DMA32: 792*4kB (UM) 561*8kB (UM) 205*16kB (UME) 370*32kB (UME) 72*64kB (UM) 33*128kB (UME) 11*256kB (UME) 6*512kB (M) 9*1024kB (M) 6*2048kB (UM) 333*4096kB (M) = 1422968kB [ 127.943619][ T7228] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 127.967522][ T7228] Node 1 Normal: 205*4kB (UM) 57*8kB (UME) 42*16kB (UME) 81*32kB (UME) 26*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894844kB [ 128.008029][ T7228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.018296][ T7228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.028095][ T7228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.029361][ T7230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.039127][ T7228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.057523][ T7228] 42361 total pagecache pages [ 128.062407][ T7228] 0 pages in swap cache [ 128.066772][ T7228] Free swap = 124996kB [ 128.071237][ T7228] Total swap = 124996kB [ 128.075596][ T7228] 2097051 pages RAM [ 128.081384][ T7228] 0 pages HighMem/MovableOnly [ 128.091826][ T7228] 424872 pages reserved [ 128.096154][ T7228] 0 pages cma reserved [ 128.106053][ T7230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.390015][ T7230] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 128.408727][ T7230] syz.2.363 (7230) used greatest stack depth: 19960 bytes left [ 128.430013][ T7241] bond0: entered promiscuous mode [ 128.458647][ T7241] bond_slave_0: entered promiscuous mode [ 128.467816][ T7241] bond_slave_1: entered promiscuous mode [ 128.477923][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.497301][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.514766][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.553833][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.682424][ T7267] netlink: 'syz.0.369': attribute type 39 has an invalid length. [ 128.688405][ T7271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.062613][ T7288] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 129.816973][ T7342] netlink: 'syz.2.395': attribute type 2 has an invalid length. [ 129.861680][ T7342] netlink: 'syz.2.395': attribute type 2 has an invalid length. [ 130.109750][ T7366] __nla_validate_parse: 7 callbacks suppressed [ 130.109777][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 130.152404][ T7369] vlan2: entered promiscuous mode [ 130.158700][ T7369] bridge0: entered promiscuous mode [ 130.164037][ T7370] netlink: 'syz.1.399': attribute type 10 has an invalid length. [ 130.175191][ T7370] syz_tun: entered promiscuous mode [ 130.211724][ T7370] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 131.129155][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 131.134420][ T7410] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 131.164368][ T7406] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 131.191379][ T7413] netlink: 192 bytes leftover after parsing attributes in process `syz.1.415'. [ 131.475379][ T7427] gretap0: entered promiscuous mode [ 131.491983][ T7427] vlan3: entered promiscuous mode [ 131.498116][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'. [ 131.546324][ T7434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.741468][ T7430] syzkaller0: entered promiscuous mode [ 131.750589][ T7430] syzkaller0: entered allmulticast mode [ 132.097903][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.431'. [ 133.241532][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.427'. [ 133.525963][ T7482] tipc: New replicast peer: 255.255.255.255 [ 133.537711][ T7482] tipc: Enabled bearer , priority 10 [ 133.620770][ T7481] syzkaller0: entered promiscuous mode [ 133.628806][ T7481] syzkaller0: entered allmulticast mode [ 133.661790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.374109][ T7506] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 134.393041][ T7506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.443'. [ 134.661811][ T7256] tipc: Node number set to 3396152659 [ 135.480811][ T7520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.446'. [ 135.501302][ T7519] netlink: 48 bytes leftover after parsing attributes in process `syz.2.450'. [ 135.530806][ T7522] syzkaller0: entered promiscuous mode [ 135.544827][ T7522] syzkaller0: entered allmulticast mode [ 135.587588][ T7525] geneve2: entered promiscuous mode [ 135.596968][ T7525] geneve2: entered allmulticast mode [ 135.621306][ T3484] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 135.654542][ T3484] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 135.687968][ T3484] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 135.757569][ T3484] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 135.769903][ T7532] netlink: 666 bytes leftover after parsing attributes in process `syz.1.452'. [ 135.783784][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 135.861489][ T7539] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 135.934348][ T7539] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 135.955965][ T7539] gretap1: entered promiscuous mode [ 135.967580][ T7539] gretap1: entered allmulticast mode [ 136.199711][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.458'. [ 136.434366][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 136.442067][ T7576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.466'. [ 136.453126][ T7575] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 136.471889][ T7578] netlink: 48 bytes leftover after parsing attributes in process `syz.2.467'. [ 136.631167][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 136.683068][ T7589] netlink: 128 bytes leftover after parsing attributes in process `syz.0.468'. [ 136.833586][ T7600] 8021q: VLANs not supported on ip6tnl0 [ 137.098109][ T5843] Bluetooth: hci4: link tx timeout [ 137.105599][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.349063][ T7634] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.899395][ T7672] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 137.952930][ T7674] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 137.968598][ T7674] netlink: 'syz.4.498': attribute type 3 has an invalid length. [ 137.982294][ T7681] syzkaller0: entered promiscuous mode [ 137.988139][ T7681] syzkaller0: entered allmulticast mode [ 138.029115][ T7676] netlink: 'syz.3.497': attribute type 10 has an invalid length. [ 138.040849][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.048455][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.067446][ T7676] bridge0: entered promiscuous mode [ 138.075871][ T7676] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 138.274401][ T7693] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.528778][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.778884][ T7725] netlink: 'syz.0.513': attribute type 17 has an invalid length. [ 138.796804][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.806489][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.873095][ T7727] team0: Device ip6gre1 is of different type [ 139.049656][ T7739] netlink: 'syz.0.516': attribute type 13 has an invalid length. [ 139.088165][ T7739] netlink: 'syz.0.516': attribute type 17 has an invalid length. [ 139.183966][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 139.340028][ T7739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.373307][ T7759] veth0: entered promiscuous mode [ 139.430030][ T7756] veth0 (unregistering): left promiscuous mode [ 139.696248][ T7773] syz.4.529 (7773) used greatest stack depth: 17864 bytes left [ 139.770600][ T7731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.482130][ T7794] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 140.516267][ T7794] __nla_validate_parse: 24 callbacks suppressed [ 140.516293][ T7794] netlink: 208 bytes leftover after parsing attributes in process `syz.1.534'. [ 140.571006][ T7794] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 140.600903][ T7794] netlink: 'syz.1.534': attribute type 2 has an invalid length. [ 140.666111][ T7805] netlink: 'syz.4.536': attribute type 12 has an invalid length. [ 140.679641][ T7805] netlink: 'syz.4.536': attribute type 29 has an invalid length. [ 140.690450][ T7805] netlink: 148 bytes leftover after parsing attributes in process `syz.4.536'. [ 140.707057][ T7805] netlink: 'syz.4.536': attribute type 2 has an invalid length. [ 140.718249][ T7805] netlink: 23 bytes leftover after parsing attributes in process `syz.4.536'. [ 140.902474][ T7817] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 141.006416][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 141.127957][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 141.137917][ T7830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 141.328346][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'. [ 141.597844][ T7854] netlink: 'syz.1.552': attribute type 11 has an invalid length. [ 141.610409][ T7854] netlink: 'syz.1.552': attribute type 11 has an invalid length. [ 141.628289][ T7854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.662075][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 141.693793][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.555'. [ 141.891166][ T7875] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 142.473955][ T7914] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20002 [ 142.803263][ T7933] netlink: 'syz.0.576': attribute type 4 has an invalid length. [ 142.905880][ T7933] netlink: 'syz.0.576': attribute type 4 has an invalid length. [ 143.013765][ T7942] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 144.093294][ T8004] syzkaller0: entered promiscuous mode [ 144.098998][ T8004] syzkaller0: entered allmulticast mode [ 144.107486][ T8012] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 144.128800][ T8012] syzkaller0: Linktype set failed because interface is up [ 144.439950][ T8037] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 146.084269][ T8049] __nla_validate_parse: 11 callbacks suppressed [ 146.084295][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 146.357772][ T6927] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 146.377423][ T8064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.578706][ T8081] netlink: 'syz.3.617': attribute type 11 has an invalid length. [ 146.602465][ T8081] netlink: 224 bytes leftover after parsing attributes in process `syz.3.617'. [ 147.195455][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 147.434539][ T8095] netlink: 260 bytes leftover after parsing attributes in process `syz.0.619'. [ 147.461064][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 147.492925][ T8143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 147.621872][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.636'. [ 147.647145][ T8148] netlink: 'syz.2.636': attribute type 7 has an invalid length. [ 147.662827][ T8148] netlink: 'syz.2.636': attribute type 8 has an invalid length. [ 147.687878][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 147.703756][ T8155] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 147.717382][ T8160] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 147.730443][ T8160] netlink: 'syz.3.640': attribute type 11 has an invalid length. [ 147.741103][ T8155] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 147.749869][ T8155] gretap2: entered promiscuous mode [ 147.755382][ T8155] gretap2: entered allmulticast mode [ 147.779098][ T8148] gretap0: entered promiscuous mode [ 147.787160][ T8160] netlink: 220 bytes leftover after parsing attributes in process `syz.3.640'. [ 147.798536][ T8148] batadv_slave_1: entered promiscuous mode [ 147.808646][ T8163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.838846][ T8148] batadv_slave_1: left promiscuous mode [ 147.857983][ T8148] gretap0: left promiscuous mode [ 148.090727][ T8179] veth0_vi2t_wifi: renamed from veth0_vlan (while UP) [ 148.092716][ T8177] netlink: 68 bytes leftover after parsing attributes in process `syz.2.644'. [ 148.209369][ T8183] block nbd0: Unsupported socket: shutdown callout must be supported. [ 148.284575][ T8189] netem: change failed [ 148.382287][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.558457][ T8203] netlink: 'syz.0.651': attribute type 28 has an invalid length. [ 148.567858][ T8203] netlink: 'syz.0.651': attribute type 3 has an invalid length. [ 149.131728][ T30] audit: type=1107 audit(1754631300.115:2): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='J.WÍ`uÒ¶µÓ™KÉo„ò¥82G ™YèMà8‚Â0?ËUŽžÍŸ™•±÷#–J"õ„Áus^ú.Ðã\̱ì­Nx‰ÅÂM§[þÿhxGŸÆ+²k' [ 149.565267][ T8257] netlink: 'syz.0.668': attribute type 12 has an invalid length. [ 149.920994][ T8275] netlink: 'syz.2.675': attribute type 39 has an invalid length. [ 149.924786][ T8274] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20000 [ 151.465397][ T8325] __nla_validate_parse: 6 callbacks suppressed [ 151.465422][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 151.513828][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.691'. [ 151.532587][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 151.546367][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 151.596413][ T8330] tipc: Started in network mode [ 151.605271][ T8330] tipc: Node identity ac14140f, cluster identity 4711 [ 151.615815][ T8330] tipc: New replicast peer: 255.255.255.255 [ 151.623082][ T8330] tipc: Enabled bearer , priority 10 [ 151.741665][ T8340] netlink: 'syz.1.697': attribute type 1 has an invalid length. [ 151.750057][ T8340] netlink: 136 bytes leftover after parsing attributes in process `syz.1.697'. [ 151.769058][ T8340] netlink: 'syz.1.697': attribute type 2 has an invalid length. [ 151.959307][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 152.125912][ T8361] netlink: 88 bytes leftover after parsing attributes in process `syz.2.701'. [ 152.254783][ T8368] openvswitch: netlink: Flow key attr not present in new flow. [ 152.694570][ T8392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 152.762137][ T7256] tipc: Node number set to 2886997007 [ 152.831536][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'. [ 153.135410][ T8411] bond0: entered promiscuous mode [ 153.140796][ T8411] bond_slave_0: entered promiscuous mode [ 153.153044][ T8411] bond_slave_1: entered promiscuous mode [ 153.159112][ T8411] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 153.411445][ T8433] netlink: 104 bytes leftover after parsing attributes in process `syz.1.727'. [ 153.467670][ T8429] syzkaller0: entered promiscuous mode [ 153.484845][ T8429] syzkaller0: entered allmulticast mode [ 155.370752][ T8440] team1: entered promiscuous mode [ 155.376340][ T8440] team1: entered allmulticast mode [ 155.830843][ T8480] Bluetooth: MGMT ver 1.23 [ 156.956158][ T8550] __nla_validate_parse: 10 callbacks suppressed [ 156.956183][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 156.987674][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 157.042280][ T8552] netlink: 124 bytes leftover after parsing attributes in process `syz.2.761'. [ 157.066203][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 157.291363][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'. [ 157.312615][ T8567] xfrm1: entered promiscuous mode [ 157.317733][ T8567] xfrm1: entered allmulticast mode [ 157.502224][ T8578] validate_nla: 2 callbacks suppressed [ 157.502247][ T8578] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 157.526271][ T8578] netlink: 204 bytes leftover after parsing attributes in process `syz.3.770'. [ 157.536969][ T8581] netlink: 104 bytes leftover after parsing attributes in process `syz.0.771'. [ 157.564141][ T8580] netlink: 'syz.2.772': attribute type 33 has an invalid length. [ 157.577434][ T8580] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.772'. [ 157.881922][ T8599] netlink: 'syz.0.778': attribute type 8 has an invalid length. [ 158.078921][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 158.214623][ T8618] netlink: 'syz.0.792': attribute type 9 has an invalid length. [ 158.281348][ T8618] netlink: 'syz.0.792': attribute type 9 has an invalid length. [ 158.337556][ T8625] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 158.347699][ T8625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.784'. [ 158.458941][ T8625] team0: Port device geneve0 added [ 158.810463][ T8657] team0: Device vti0 is of different type [ 159.139367][ T8675] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 159.180398][ T8674] gtp0: entered promiscuous mode [ 159.185738][ T8674] gtp0: entered allmulticast mode [ 159.719698][ T8694] bond2: entered promiscuous mode [ 159.758686][ T8694] bond2: entered allmulticast mode [ 159.776238][ T8694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.992946][ T8710] netlink: 'syz.4.809': attribute type 1 has an invalid length. [ 161.182527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.376681][ T8782] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 161.622329][ T8792] bond0: entered promiscuous mode [ 161.637053][ T8792] bond_slave_0: entered promiscuous mode [ 161.639934][ T8795] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 161.643398][ T8792] bond_slave_1: entered promiscuous mode [ 161.682849][ T8792] bond0: left promiscuous mode [ 161.699129][ T8792] bond_slave_0: left promiscuous mode [ 161.708274][ T8792] bond_slave_1: left promiscuous mode [ 162.133243][ T8813] __nla_validate_parse: 17 callbacks suppressed [ 162.133267][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 162.318684][ T8826] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 162.386178][ T8826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.528353][ T8831] bond3: (slave veth3): Enslaving as an active interface with a down link [ 162.553837][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.560189][ T8837] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 162.587855][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.623750][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 162.644464][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.677645][ T8832] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.743918][ T8832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.826992][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.854258][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.865524][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.905719][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.926261][ T8832] hsr0 speed is unknown, defaulting to 1000 [ 162.995636][ T8857] netlink: 104 bytes leftover after parsing attributes in process `syz.3.860'. [ 163.176409][ T8861] netlink: 'syz.2.862': attribute type 13 has an invalid length. [ 163.254732][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 163.274909][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 163.627850][ T8887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.868'. [ 163.860850][ T8898] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 163.981189][ T8908] syzkaller1: entered allmulticast mode [ 164.047958][ T8911] IPVS: set_ctl: invalid protocol: 1 172.30.1.4:20000 [ 164.110751][ T8913] netlink: 'syz.0.876': attribute type 9 has an invalid length. [ 164.137920][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 164.153740][ T8913] netlink: 'syz.0.876': attribute type 9 has an invalid length. [ 164.199116][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 164.570635][ T8941] netlink: 'syz.3.882': attribute type 4 has an invalid length. [ 164.593966][ T8941] netlink: 17 bytes leftover after parsing attributes in process `syz.3.882'. [ 164.664307][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 164.951209][ T8961] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 165.037378][ T8963] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 165.138500][ T8963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.140062][ T8975] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 165.230952][ T8973] bond4: (slave vlan2): making interface the new active one [ 165.272913][ T8973] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 165.493317][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.501777][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.903390][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 166.494782][ T9013] hsr_slave_1 (unregistering): left promiscuous mode [ 166.520420][ T9030] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 166.889812][ T9040] netlink: zone id is out of range [ 166.905633][ T9040] netlink: zone id is out of range [ 166.910841][ T9040] netlink: zone id is out of range [ 166.937688][ T9040] netlink: zone id is out of range [ 166.981696][ T9040] netlink: zone id is out of range [ 166.997398][ T9040] netlink: zone id is out of range [ 166.997433][ T9051] syzkaller1: entered promiscuous mode [ 167.021794][ T9040] netlink: zone id is out of range [ 167.032573][ T9040] netlink: zone id is out of range [ 167.051812][ T9040] netlink: zone id is out of range [ 167.071727][ T9040] netlink: zone id is out of range [ 167.072638][ T9051] syzkaller1: entered allmulticast mode [ 167.396982][ T9076] __nla_validate_parse: 11 callbacks suppressed [ 167.397006][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 167.781377][ T9094] netlink: 152 bytes leftover after parsing attributes in process `syz.1.925'. [ 167.913026][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 168.119815][ T9112] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.928'. [ 168.122397][ T9113] netlink: 52 bytes leftover after parsing attributes in process `syz.1.930'. [ 168.276434][ T9117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.932'. [ 168.581394][ T9134] netlink: 68 bytes leftover after parsing attributes in process `syz.0.937'. [ 168.925471][ T9153] nftables ruleset with unbound set [ 168.937884][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 168.979797][ T9158] netlink: 'syz.4.944': attribute type 24 has an invalid length. [ 169.210700][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 169.323913][ T9172] : entered promiscuous mode [ 169.389502][ T9179] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 169.442107][ T9179] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 169.509813][ T9184] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 169.656843][ T9190] netlink: 'syz.4.955': attribute type 11 has an invalid length. [ 169.688489][ T9190] netlink: 224 bytes leftover after parsing attributes in process `syz.4.955'. [ 169.727811][ T9184] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 169.744816][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 169.768703][ T9185] netlink: 'syz.4.955': attribute type 21 has an invalid length. [ 169.895726][ T9199] veth1: entered promiscuous mode [ 169.905096][ T9199] bond3: (slave veth1): Enslaving as a backup interface with a down link [ 170.217749][ T9218] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 170.618064][ T7257] IPVS: starting estimator thread 0... [ 170.741970][ T9247] IPVS: using max 27 ests per chain, 64800 per kthread [ 170.828126][ T9254] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 171.016187][ T9261] syz_tun: left promiscuous mode [ 171.157518][ T9275] netlink: 'syz.0.982': attribute type 24 has an invalid length. [ 171.369575][ T9283] netlink: 'syz.4.986': attribute type 4 has an invalid length. [ 171.384609][ T9283] : renamed from bond0 (while UP) [ 172.293179][ T9343] netlink: 'syz.2.1000': attribute type 11 has an invalid length. [ 172.402156][ T9345] netlink: 'syz.1.999': attribute type 10 has an invalid length. [ 172.410913][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.418840][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.446910][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.454384][ T9345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.462188][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.469615][ T9345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.496077][ T9352] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 172.522510][ T9345] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.646938][ T9352] __nla_validate_parse: 37 callbacks suppressed [ 172.646965][ T9352] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1002'. [ 172.716209][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 172.850613][ T9374] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1007'. [ 172.909156][ T9374] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 173.010580][ T9378] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 173.230302][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 173.304756][ T9397] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1014'. [ 173.446709][ T9400] syzkaller0: entered promiscuous mode [ 173.452574][ T9400] syzkaller0: entered allmulticast mode [ 173.683061][ T9416] bridge0: port 3(batadv1) entered blocking state [ 173.689936][ T9416] bridge0: port 3(batadv1) entered disabled state [ 173.715499][ T9419] netlink: 'syz.1.1020': attribute type 6 has an invalid length. [ 173.724126][ T9416] batadv1: entered allmulticast mode [ 173.764199][ T9416] batadv1: entered promiscuous mode [ 173.904497][ T9425] netlink: 'syz.0.1021': attribute type 29 has an invalid length. [ 174.059913][ T9436] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1026'. [ 174.101760][ T9436] net_ratelimit: 399 callbacks suppressed [ 174.101780][ T9436] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 174.166623][ T7008] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 174.176458][ T7008] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 174.268407][ T9451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1031'. [ 174.394702][ T9461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1031'. [ 174.555671][ T9466] netlink: 'syz.0.1036': attribute type 21 has an invalid length. [ 174.581299][ T9466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1036'. [ 174.801469][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 174.859916][ T9479] netlink: 'syz.4.1043': attribute type 10 has an invalid length. [ 174.916723][ T9479] : (slave geneve1): Enslaving as an active interface with an up link [ 174.962354][ T9483] sctp: [Deprecated]: syz.3.1044 (pid 9483) Use of int in maxseg socket option. [ 174.962354][ T9483] Use struct sctp_assoc_value instead [ 174.992227][ T9490] netem: change failed [ 175.045669][ T9483] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 175.920428][ T9548] netlink: 'syz.0.1067': attribute type 11 has an invalid length. [ 175.939349][ T9548] netlink: 'syz.0.1067': attribute type 11 has an invalid length. [ 176.321185][ T9569] openvswitch: netlink: Unknown nsh attribute 0 [ 176.328241][ T9569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.542179][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.283851][ T9631] vxcan1: tx address claim with dest, not broadcast [ 177.797225][ T9654] __nla_validate_parse: 9 callbacks suppressed [ 177.797250][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1088'. [ 177.963482][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1091'. [ 177.993635][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 178.095806][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 178.115676][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 178.185787][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 178.299074][ T9678] tipc: Enabled bearer , priority 0 [ 178.368690][ T9678] syzkaller0: entered promiscuous mode [ 178.377502][ T9678] syzkaller0: entered allmulticast mode [ 178.410451][ T9678] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.481077][ T9678] tipc: Resetting bearer [ 178.507471][ T9677] tipc: Resetting bearer [ 178.513059][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1102'. [ 178.587541][ T9677] tipc: Disabling bearer [ 178.719650][ T9700] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 178.967189][ T9712] delete_channel: no stack [ 179.227969][ T9730] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1113'. [ 179.266776][ T9730] netlink: zone id is out of range [ 179.291726][ T9730] netlink: zone id is out of range [ 179.317546][ T9730] netlink: zone id is out of range [ 179.346602][ T9730] netlink: zone id is out of range [ 179.409409][ T9730] netlink: zone id is out of range [ 179.463684][ T9730] netlink: get zone limit has 8 unknown bytes [ 179.783063][ T9755] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 179.799688][ T9755] team0: Device macvtap1 is already an upper device of the team interface [ 179.866964][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 179.877555][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 180.002251][ T9766] syzkaller1: entered promiscuous mode [ 180.008084][ T9766] syzkaller1: entered allmulticast mode [ 180.074661][ T9766] syzkaller0: entered promiscuous mode [ 180.090144][ T9766] syzkaller0: entered allmulticast mode [ 215.582013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.677273][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 217.677870][ T5158] Bluetooth: hci1: command 0x0406 tx timeout [ 217.684452][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 230.945767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.061891][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.358969][ T9807] __nla_validate_parse: 4 callbacks suppressed [ 236.358992][ T9807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1134'. [ 236.480290][ T9813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.514823][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 236.678054][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 236.719687][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'. [ 236.763816][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1143'. [ 237.202202][ T9848] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 237.289224][ T9858] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1151'. [ 237.326128][ T9858] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1151'. [ 237.376504][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 237.393737][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 237.421267][ T9858] geneve2: entered promiscuous mode [ 237.427946][ T9858] geneve2: entered allmulticast mode [ 237.438240][ T9866] netlink: 'syz.3.1152': attribute type 10 has an invalid length. [ 237.455434][ T9866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.464362][ T9866] batadv0: entered promiscuous mode [ 237.471153][ T9866] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 237.684746][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 237.882512][ T9887] tipc: Enabled bearer , priority 0 [ 237.898143][ T9887] syzkaller0: entered promiscuous mode [ 237.909254][ T9887] syzkaller0: entered allmulticast mode [ 237.964607][ T9887] tipc: Resetting bearer [ 237.986414][ T9885] tipc: Resetting bearer [ 238.064119][ T9885] tipc: Disabling bearer [ 238.394833][ T9911] netlink: 'syz.2.1165': attribute type 83 has an invalid length. [ 238.569111][ T9886] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 239.774176][ T9974] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 239.783903][ T9974] veth0_vlan: entered allmulticast mode [ 239.790265][ T9974] veth0_vlan: left promiscuous mode [ 239.797898][ T9974] veth0_vlan: entered promiscuous mode [ 239.818052][ T9974] team0: Device veth0_vlan failed to register rx_handler [ 239.902955][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 240.201214][ T9995] sctp: [Deprecated]: syz.0.1193 (pid 9995) Use of int in max_burst socket option deprecated. [ 240.201214][ T9995] Use struct sctp_assoc_value instead [ 241.252175][T10064] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 241.278988][T10056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.322603][T10068] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 241.380834][T10068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.192028][T10122] __nla_validate_parse: 23 callbacks suppressed [ 242.192058][T10122] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.1225'. [ 242.455833][T10138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1228'. [ 242.478116][T10140] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 242.909459][T10140] vlan4: entered allmulticast mode [ 242.915401][T10140] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 243.113343][T10159] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1234'. [ 243.155869][T10156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1233'. [ 243.225445][T10164] erspan0: entered promiscuous mode [ 243.385988][T10174] netlink: 'syz.4.1241': attribute type 11 has an invalid length. [ 243.396364][T10174] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1241'. [ 243.431122][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 243.434046][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 243.463532][T10170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1238'. [ 243.471930][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 243.497894][T10174] netlink: 'syz.4.1241': attribute type 12 has an invalid length. [ 243.518707][T10174] netlink: 'syz.4.1241': attribute type 11 has an invalid length. [ 244.578500][T10197] v: renamed from dummy0 (while UP) [ 244.935403][T10208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1251'. [ 244.958469][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.947087][T10245] netlink: 'syz.4.1261': attribute type 33 has an invalid length. [ 246.130937][T10254] syzkaller1: entered promiscuous mode [ 246.164550][T10254] syzkaller1: entered allmulticast mode [ 246.451404][T10262] vlan0: entered promiscuous mode [ 246.466987][T10262] bridge0: entered promiscuous mode [ 247.498560][T10307] __nla_validate_parse: 7 callbacks suppressed [ 247.498589][T10307] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1280'. [ 247.533061][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 247.549574][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1280'. [ 247.575157][T10312] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1284'. [ 247.647498][T10317] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 248.109356][T10344] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 248.135981][T10342] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 248.172303][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1291'. [ 248.196296][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1291'. [ 248.235533][T10344] bridge0: port 3(v) entered blocking state [ 248.273791][T10344] bridge0: port 3(v) entered disabled state [ 248.292323][T10344] v: entered allmulticast mode [ 248.304197][T10344] v: left allmulticast mode [ 248.319787][T10344] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 248.382425][T10342] bridge0: port 3(v) entered blocking state [ 248.388552][T10342] bridge0: port 3(v) entered disabled state [ 248.486399][T10342] v: entered allmulticast mode [ 248.520410][T10342] v: left allmulticast mode [ 248.553921][T10342] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 248.574960][T10354] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 248.583608][T10354] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 248.594342][T10354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1293'. [ 248.793640][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1298'. [ 248.797925][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 249.112863][T10382] bond0: (slave syz_tun): Releasing backup interface [ 249.125129][ T7258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.197063][T10382] bond0: (slave bridge0): Releasing backup interface [ 249.202829][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 249.217809][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.225402][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.260834][T10382] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 249.329092][T10393] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 249.372567][T10393] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 249.800016][T10406] can: request_module (can-proto-0) failed. [ 249.822098][ T7257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.846076][T10418] netlink: 'syz.1.1316': attribute type 23 has an invalid length. [ 250.092448][T10432] netlink: zone id is out of range [ 251.093580][T10485] openvswitch: netlink: IPv4 tun info is not correct [ 251.120611][T10485] veth0: entered promiscuous mode [ 251.127707][T10483] veth0: left promiscuous mode [ 251.175696][T10490] bridge0: port 3(veth0_to_bridge) entered blocking state [ 251.183837][T10490] bridge0: port 3(veth0_to_bridge) entered disabled state [ 251.195855][T10490] veth0_to_bridge: entered allmulticast mode [ 251.204569][T10490] veth0_to_bridge: entered promiscuous mode [ 251.235463][ T7258] IPVS: starting estimator thread 0... [ 251.342675][T10495] IPVS: using max 25 ests per chain, 60000 per kthread [ 251.526531][T10509] sctp: [Deprecated]: syz.2.1343 (pid 10509) Use of int in max_burst socket option. [ 251.526531][T10509] Use struct sctp_assoc_value instead [ 252.130411][T10518] batadv1: left allmulticast mode [ 252.139311][T10518] batadv1: left promiscuous mode [ 252.150148][T10518] bridge0: port 3(batadv1) entered disabled state [ 252.170912][T10518] bridge_slave_1: left allmulticast mode [ 252.180590][T10518] bridge_slave_1: left promiscuous mode [ 252.195404][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.225724][T10518] bridge_slave_0: left allmulticast mode [ 252.233347][T10518] bridge_slave_0: left promiscuous mode [ 252.239949][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.327241][T10523] bridge: RTM_NEWNEIGH with invalid ether address [ 253.331925][T10568] sctp: [Deprecated]: syz.4.1356 (pid 10568) Use of int in max_burst socket option. [ 253.331925][T10568] Use struct sctp_assoc_value instead [ 253.765064][T10589] __nla_validate_parse: 12 callbacks suppressed [ 253.765091][T10589] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1360'. [ 253.832146][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 253.935714][T10599] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1362'. [ 254.071875][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 254.331270][T10615] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1365'. [ 254.704703][T10631] vxcan1: tx address claim with dest, not broadcast [ 254.783370][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1371'. [ 254.819099][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1371'. [ 255.344647][T10657] netem: change failed [ 255.376021][T10657] netem: change failed [ 255.476817][T10664] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 255.531706][T10664] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1382'. [ 255.607875][T10673] netlink: 'syz.4.1384': attribute type 21 has an invalid length. [ 255.681952][T10673] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1384'. [ 255.832287][T10683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 255.884086][T10683] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.904119][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 255.923605][T10683] gretap2: entered promiscuous mode [ 255.929109][T10683] gretap2: entered allmulticast mode [ 255.979777][T10687] vlan0: entered allmulticast mode [ 256.001867][T10687] veth1_macvtap: entered allmulticast mode [ 256.226869][T10697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.426818][T10704] lo speed is unknown, defaulting to 1000 [ 256.455435][T10704] lo speed is unknown, defaulting to 1000 [ 256.503317][T10704] lo speed is unknown, defaulting to 1000 [ 256.596722][T10712] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 257.106075][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.113512][T10707] bridge0: port 2(bridge_slave_1) entered listening state [ 257.172572][T10707] bond0: left promiscuous mode [ 257.185362][T10704] infiniband syz0: set active [ 257.191284][T10707] bond_slave_0: left promiscuous mode [ 257.199046][T10704] infiniband syz0: added lo [ 257.206498][T10704] syz0: rxe_create_cq: returned err = -12 [ 257.212919][T10704] infiniband syz0: Couldn't create ib_mad CQ [ 257.219194][T10704] infiniband syz0: Couldn't open port 1 [ 257.234509][T10707] bond_slave_1: left promiscuous mode [ 257.240197][T10707] bridge0: left promiscuous mode [ 257.260427][T10707] batadv0: left promiscuous mode [ 257.268769][T10704] RDS/IB: syz0: added [ 257.276401][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.284849][T10704] smc: adding ib device syz0 with port count 1 [ 257.295367][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.305736][T10704] smc: ib device syz0 port 1 has pnetid [ 257.342439][T10707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.584244][ T6013] lo speed is unknown, defaulting to 1000 [ 257.609862][ T6013] syz0: Port: 1 Link ACTIVE [ 257.620302][ T7246] lo speed is unknown, defaulting to 1000 [ 257.643585][T10704] lo speed is unknown, defaulting to 1000 [ 257.819034][T10729] tipc: Started in network mode [ 257.848155][T10729] tipc: Node identity 860d6e97bdd9, cluster identity 4711 [ 257.876072][T10729] tipc: Enabled bearer , priority 0 [ 257.963653][T10729] tipc: Resetting bearer [ 258.034207][T10726] tipc: Disabling bearer [ 258.451177][T10704] lo speed is unknown, defaulting to 1000 [ 258.505320][ T7246] IPVS: starting estimator thread 0... [ 258.613169][T10756] IPVS: using max 27 ests per chain, 64800 per kthread [ 259.042805][T10768] __nla_validate_parse: 2 callbacks suppressed [ 259.042828][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 259.182634][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 259.339456][T10704] lo speed is unknown, defaulting to 1000 [ 260.054067][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 260.063826][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 260.103853][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 260.132572][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 260.141984][T10788] tipc: Enabled bearer , priority 0 [ 260.149101][ T7016] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.160510][ T7016] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.177903][T10704] lo speed is unknown, defaulting to 1000 [ 260.212472][ T7016] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.221282][ T7016] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.293371][T10788] tipc: Disabling bearer [ 260.837876][T10704] lo speed is unknown, defaulting to 1000 [ 260.887833][T10804] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1417'. [ 260.943767][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1419'. [ 260.974378][T10808] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1419'. [ 261.115949][T10811] netlink: 'syz.4.1420': attribute type 11 has an invalid length. [ 261.131395][T10811] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1420'. [ 261.172176][T10812] netlink: 'syz.4.1420': attribute type 11 has an invalid length. [ 261.180074][T10812] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1420'. [ 261.263184][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.270540][ C1] bridge0: topology change detected, propagating [ 261.452118][T10822] wg1: entered promiscuous mode [ 261.471991][T10822] wg1: entered allmulticast mode [ 261.632458][T10830] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20005 [ 261.891049][T10835] gretap1: entered promiscuous mode [ 263.189305][T10893] bond0: entered allmulticast mode [ 263.212801][T10893] bond_slave_0: entered allmulticast mode [ 263.218626][T10893] bond_slave_1: entered allmulticast mode [ 263.245024][T10893] bridge0: entered allmulticast mode [ 263.250411][T10893] batadv0: entered allmulticast mode [ 263.763494][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.793843][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.829942][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.978814][T10924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.987403][ T3484] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.464030][T10938] team0 (unregistering): Port device team_slave_0 removed [ 264.477793][T10938] team0 (unregistering): Port device team_slave_1 removed [ 264.701114][T10955] __nla_validate_parse: 5 callbacks suppressed [ 264.701142][T10955] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1465'. [ 265.133696][T10977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.182887][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1471'. [ 265.211271][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1468'. [ 265.403334][T10987] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 265.482504][T10993] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 265.515378][T10993] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1475'. [ 265.761483][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.965199][T11017] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 266.572918][T11042] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1487'. [ 266.966344][T11058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.027789][T11063] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1494'. [ 267.078185][T11063] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1494'. [ 267.112332][T11063] netlink: 'syz.0.1494': attribute type 5 has an invalid length. [ 267.132454][T11063] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1494'. [ 267.401361][T11072] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1499'. [ 267.569859][ T7257] IPVS: starting estimator thread 0... [ 267.578213][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 267.682380][T11083] IPVS: using max 28 ests per chain, 67200 per kthread [ 267.882022][T11088] can: request_module (can-proto-0) failed. [ 267.980973][T11091] can: request_module (can-proto-0) failed. [ 269.002001][T11139] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 269.027139][T11138] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 269.080206][T11138] team0: Device macvtap1 is already an upper device of the team interface [ 269.445963][T11159] tipc: Invalid UDP bearer configuration [ 269.446034][T11159] tipc: Enabling of bearer rejected, failed to enable media [ 269.724648][T11176] __nla_validate_parse: 6 callbacks suppressed [ 269.724676][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 269.766561][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 270.085102][T11192] netlink: 'syz.4.1536': attribute type 10 has an invalid length. [ 270.097745][T11192] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 270.112572][T11192] wlan1: mtu less than device minimum [ 270.125012][T11192] : (slave wlan1): Error -22 calling dev_set_mtu [ 270.642978][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 270.675178][T11210] veth0_to_bridge: left allmulticast mode [ 270.680998][T11210] veth0_to_bridge: left promiscuous mode [ 270.713800][T11210] bridge0: port 3(veth0_to_bridge) entered disabled state [ 270.762646][T11210] bridge_slave_1: left allmulticast mode [ 270.782267][T11210] bridge_slave_1: left promiscuous mode [ 270.791794][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.833862][T11210] bridge_slave_0: left allmulticast mode [ 270.840046][T11210] bridge_slave_0: left promiscuous mode [ 270.847695][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.323832][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 272.088815][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 272.093883][T11258] syzkaller0: entered promiscuous mode [ 272.123635][T11258] syzkaller0: entered allmulticast mode [ 272.139957][ T12] syzkaller0: tun_net_xmit 48 [ 272.251862][T11264] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 272.258144][T11264] syzkaller0: Linktype set failed because interface is up [ 273.083847][T11290] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1565'. [ 273.104819][T11290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1565'. [ 273.982470][T11301] netlink: 'syz.2.1567': attribute type 10 has an invalid length. [ 275.301216][T11280] tipc: Enabled bearer , priority 0 [ 275.335593][T11298] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 275.352841][T11301] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 275.472302][T11281] tipc: Disabling bearer [ 276.013713][T11346] tipc: Trying to set illegal importance in message [ 276.075813][T11358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1582'. [ 276.366218][T11374] netlink: 'syz.1.1587': attribute type 1 has an invalid length. [ 276.374691][T11374] netlink: 784 bytes leftover after parsing attributes in process `syz.1.1587'. [ 276.702078][T11389] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 276.754689][T11389] team0: Device ipvlan1 failed to register rx_handler [ 277.003356][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1595'. [ 277.136857][T11414] netlink: 'syz.2.1599': attribute type 11 has an invalid length. [ 277.249006][T11419] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1600'. [ 277.522782][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 277.997218][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 278.027399][T11457] tipc: Enabled bearer , priority 0 [ 278.073874][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 278.091008][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 278.127648][T11457] syzkaller0: entered promiscuous mode [ 278.133993][T11457] syzkaller0: entered allmulticast mode [ 278.263791][T11464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.276903][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 278.433183][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 278.838629][T11456] tipc: Resetting bearer [ 278.964715][T11456] tipc: Disabling bearer [ 279.269885][T11523] netlink: 'syz.3.1626': attribute type 9 has an invalid length. [ 279.389072][T11527] sctp: [Deprecated]: syz.1.1629 (pid 11527) Use of int in maxseg socket option. [ 279.389072][T11527] Use struct sctp_assoc_value instead [ 279.889042][T11552] tipc: Started in network mode [ 279.894510][T11552] tipc: Node identity ac1414aa, cluster identity 4711 [ 279.901381][T11552] tipc: Enabling of bearer rejected, failed to enable media [ 279.959050][T11558] nbd: must specify an index to disconnect [ 280.066293][T11564] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 280.296977][T11568] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 280.402130][T11568] netlink: 'syz.4.1642': attribute type 2 has an invalid length. [ 280.409957][T11568] netlink: 'syz.4.1642': attribute type 8 has an invalid length. [ 280.459170][T11564] veth9: entered promiscuous mode [ 280.530314][T11564] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 280.543366][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 280.629607][T11577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.641216][ T37] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.794770][ T3484] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.795311][T11599] nbd: must specify an index to disconnect [ 280.919664][T11608] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 281.290733][T11632] netlink: 'syz.0.1664': attribute type 11 has an invalid length. [ 281.320943][T11632] __nla_validate_parse: 9 callbacks suppressed [ 281.320971][T11632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1664'. [ 281.358629][T11632] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 281.369842][T11632] netlink: 'syz.0.1664': attribute type 3 has an invalid length. [ 281.378747][T11632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1664'. [ 281.430011][T11632] NCSI netlink: No device for ifindex 0 [ 282.410657][T11658] netlink: 'syz.2.1669': attribute type 2 has an invalid length. [ 282.422156][T11658] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1669'. [ 282.432486][T11670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.589973][T11678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 282.717454][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 283.279876][T11706] openvswitch: netlink: IP tunnel dst address not specified [ 283.441182][T11717] netlink: 'syz.3.1688': attribute type 3 has an invalid length. [ 283.450933][T11717] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 283.471891][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 283.540951][T11724] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1689'. [ 283.570501][T11717] hsr0 speed is unknown, defaulting to 1000 [ 283.598507][T11717] lo speed is unknown, defaulting to 1000 [ 284.297022][T11755] openvswitch: netlink: Message has -1 unknown bytes. [ 285.174479][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 285.594461][T11808] hsr0 speed is unknown, defaulting to 1000 [ 285.604279][T11808] lo speed is unknown, defaulting to 1000 [ 286.084523][T11824] hsr0 speed is unknown, defaulting to 1000 [ 286.160790][T11824] lo speed is unknown, defaulting to 1000 [ 286.801580][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554ad800: rx timeout, send abort [ 286.837769][T11842] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 286.960950][T11843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 287.028367][T11845] openvswitch: netlink: IPv6 tunnel dst address is zero [ 287.283703][T11847] syzkaller0: entered promiscuous mode [ 287.289356][T11847] syzkaller0: entered allmulticast mode [ 287.297358][T11843] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 287.308360][T11843] syzkaller0: Linktype set failed because interface is up [ 287.311875][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554ad800: abort rx timeout. Force session deactivation [ 289.767027][T11868] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 289.872236][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 289.934683][T11865] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 290.805643][T11913] validate_nla: 2 callbacks suppressed [ 290.805670][T11913] netlink: 'syz.1.1748': attribute type 11 has an invalid length. [ 290.887888][T11915] tc_dump_action: action bad kind [ 290.937729][T11918] tc_dump_action: action bad kind [ 290.960347][T11921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.960708][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 291.107731][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 291.233454][T11931] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 291.291747][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 291.295449][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 291.612123][T11947] netlink: 'syz.3.1757': attribute type 4 has an invalid length. [ 291.640204][ T7246] lo speed is unknown, defaulting to 1000 [ 291.650037][ T7246] syz0: Port: 1 Link DOWN [ 291.662522][T11947] netlink: 'syz.3.1757': attribute type 4 has an invalid length. [ 291.676075][ T6013] lo speed is unknown, defaulting to 1000 [ 291.682679][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 291.711841][T11951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1759'. [ 291.733025][ T6013] lo speed is unknown, defaulting to 1000 [ 291.738850][ T6013] syz0: Port: 1 Link ACTIVE [ 291.746345][T11955] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 291.763904][ T7248] lo speed is unknown, defaulting to 1000 [ 291.943769][T11951] macvlan5: entered promiscuous mode [ 291.950082][T11951] macvlan5: entered allmulticast mode [ 291.964288][T11951] bond3: entered promiscuous mode [ 291.970855][T11951] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 291.986978][T11951] bond3: left promiscuous mode [ 292.048372][T11966] vlan2: entered promiscuous mode [ 292.071387][T11966] gretap0: entered promiscuous mode [ 292.348203][T11982] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 292.367717][T11982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1767'. [ 292.370404][T11986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1769'. [ 292.380306][T11982] nbd: couldn't find device at index 1048576 [ 292.623739][T12001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1771'. [ 292.635477][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 292.646924][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1770'. [ 292.673989][T12004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1774'. [ 292.690701][T12004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1774'. [ 292.828358][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1776'. [ 293.207534][T12026] macsec2: entered allmulticast mode [ 293.309529][T12029] dvmrp1: entered allmulticast mode [ 293.500499][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1787'. [ 293.571120][T12044] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1789'. [ 294.036935][T12061] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 294.055348][T12062] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 294.803355][T12102] nbd: must specify an index to disconnect [ 295.201897][T12126] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 295.272299][ T7256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.345532][T12131] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 295.546258][T12148] sctp: [Deprecated]: syz.3.1812 (pid 12148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.546258][T12148] Use struct sctp_sack_info instead [ 295.586560][T12150] openvswitch: netlink: Flow key attr not present in new flow. [ 295.708846][T12161] nbd: must specify an index to disconnect [ 296.061896][ T7258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.641096][T12207] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 296.686989][T12206] bridge0: port 3(batadv1) entered blocking state [ 296.688389][T12211] netlink: 'syz.1.1823': attribute type 6 has an invalid length. [ 296.694149][T12206] bridge0: port 3(batadv1) entered disabled state [ 296.694395][T12206] batadv1: entered allmulticast mode [ 296.819807][T12206] batadv1: entered promiscuous mode [ 296.841190][T12225] sctp: [Deprecated]: syz.4.1827 (pid 12225) Use of int in maxseg socket option. [ 296.841190][T12225] Use struct sctp_assoc_value instead [ 296.890423][T12223] netlink: zone id is out of range [ 296.921829][T12223] netlink: zone id is out of range [ 296.927160][T12223] netlink: get zone limit has 8 unknown bytes [ 296.968815][T12230] nbd: must specify an index to disconnect [ 297.208692][ T3484] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 297.218692][ T3484] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 297.505875][T12260] __nla_validate_parse: 10 callbacks suppressed [ 297.505900][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'. [ 297.579359][T12267] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1838'. [ 297.689800][T12276] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 297.727550][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 297.853959][T12285] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 297.896246][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1842'. [ 297.934539][T12288] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 298.175653][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 298.463472][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 298.588790][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 298.961296][T12338] netlink: 'syz.2.1861': attribute type 10 has an invalid length. [ 298.969435][T12338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1861'. [ 299.004092][T12340] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1860'. [ 299.017460][T12338] team0: Port device geneve0 added [ 299.061857][ T3484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.070922][ T752] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.087510][T12338] tipc: Enabling not permitted [ 299.112447][T12338] tipc: Enabling of bearer rejected, failed to enable media [ 299.146059][ T752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.313747][T12353] tipc: New replicast peer: 255.255.255.255 [ 299.350964][T12353] tipc: Enabled bearer , priority 10 [ 299.496966][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 299.539069][ T37] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 300.279940][T12385] netlink: 'syz.0.1874': attribute type 23 has an invalid length. [ 300.578626][T12409] sctp: [Deprecated]: syz.4.1881 (pid 12409) Use of int in maxseg socket option. [ 300.578626][T12409] Use struct sctp_assoc_value instead [ 300.621386][T12412] bridge_slave_0: left allmulticast mode [ 300.640361][T12412] bridge_slave_0: left promiscuous mode [ 300.656312][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.686076][T12412] bridge_slave_1: left allmulticast mode [ 300.711160][T12412] bridge_slave_1: left promiscuous mode [ 300.730045][T12417] netlink: 'syz.0.1884': attribute type 11 has an invalid length. [ 300.734781][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.802386][T12412] bond0: (slave bond_slave_0): Releasing backup interface [ 300.855813][T12412] bond0: (slave bond_slave_1): Releasing backup interface [ 300.895946][T12412] team0: Port device team_slave_0 removed [ 300.921977][T12412] team0: Port device team_slave_1 removed [ 300.929356][T12412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.937999][T12412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.949916][T12412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.959653][T12412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.986078][T12412] batadv1: left allmulticast mode [ 300.991274][T12412] batadv1: left promiscuous mode [ 301.004806][T12412] bridge0: port 3(batadv1) entered disabled state [ 301.048783][T12415] pim6reg: entered allmulticast mode [ 301.624378][T12444] netlink: 'syz.1.1892': attribute type 11 has an invalid length. [ 301.987368][T12465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.608786][T12501] netlink: 'syz.0.1908': attribute type 6 has an invalid length. [ 303.640699][T12524] netlink: 'syz.0.1916': attribute type 4 has an invalid length. [ 303.735707][T12526] team0: Device gtp1 is of different type [ 303.829754][T12538] IPv6: sit2: Disabled Multicast RS [ 303.839810][T12538] sit2: entered allmulticast mode [ 303.929862][T12541] __nla_validate_parse: 69 callbacks suppressed [ 303.929891][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1921'. [ 304.102048][T12548] tipc: Enabled bearer , priority 0 [ 304.223587][T12548] syzkaller0: entered promiscuous mode [ 304.229287][T12548] syzkaller0: entered allmulticast mode [ 304.236857][T12548] tipc: Resetting bearer [ 304.271349][T12547] tipc: Resetting bearer [ 304.408286][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'. [ 305.112079][ T6013] tipc: Node number set to 1003777687 [ 306.682239][T12547] tipc: Disabling bearer [ 306.896097][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 306.920802][T12591] nbd: socks must be embedded in a SOCK_ITEM attr [ 306.943293][T12596] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 306.960407][T12591] netlink: 'syz.0.1935': attribute type 142 has an invalid length. [ 306.979499][T12591] tipc: Enabled bearer , priority 0 [ 306.999921][T12591] syzkaller0: entered promiscuous mode [ 307.019733][T12591] syzkaller0: entered allmulticast mode [ 307.040799][T12591] tipc: Resetting bearer [ 307.056544][T12590] tipc: Resetting bearer [ 307.093920][T12590] tipc: Disabling bearer [ 307.241209][T12611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 307.265640][T12611] netlink: 'syz.2.1942': attribute type 10 has an invalid length. [ 307.278400][T12611] bridge_slave_1: entered promiscuous mode [ 307.285574][T12611] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 307.359921][T12615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1942'. [ 308.044466][T12614] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1943'. [ 308.243782][T12637] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 308.289474][T12637] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1949'. [ 308.547013][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 308.578568][T12659] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1955'. [ 308.590330][T12660] macvtap1: entered promiscuous mode [ 308.596874][T12660] vlan0: entered promiscuous mode [ 308.603235][T12660] macvtap1: entered allmulticast mode [ 308.608826][T12660] vlan0: entered allmulticast mode [ 308.614478][T12660] veth0_vi2t_wifi: entered allmulticast mode [ 308.950641][T12668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1962'. [ 308.986364][T12672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1958'. [ 309.042593][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 309.340747][T12692] tipc: Enabling of bearer rejected, failed to enable media [ 309.360911][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 309.373384][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 309.401981][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 309.461125][T12690] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 309.479147][T12690] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1967'. [ 309.517017][T12698] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1969'. [ 309.693619][T12700] ipvlan0: entered promiscuous mode [ 309.717502][T12700] bridge0: port 3(ipvlan0) entered blocking state [ 309.737345][T12700] bridge0: port 3(ipvlan0) entered disabled state [ 309.772502][T12700] ipvlan0: entered allmulticast mode [ 309.777903][T12700] bridge0: entered allmulticast mode [ 309.827606][T12700] ipvlan0: left allmulticast mode [ 309.837049][T12700] bridge0: left allmulticast mode [ 309.910138][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 310.048998][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1979'. [ 310.591084][T12743] netem: change failed [ 310.670832][T12744] net_ratelimit: 2 callbacks suppressed [ 310.670856][T12744] syzkaller0: mtu less than device minimum [ 310.701452][T12744] netlink: 'syz.2.1985': attribute type 11 has an invalid length. [ 311.053802][T12762] netlink: 'syz.2.1991': attribute type 3 has an invalid length. [ 311.183312][T12773] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 311.244705][T12774] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 311.267011][T12776] netlink: 'syz.2.1991': attribute type 13 has an invalid length. [ 311.279400][T12769] bond0: entered promiscuous mode [ 311.291917][T12769] bond_slave_0: entered promiscuous mode [ 311.298261][T12769] bond_slave_1: entered promiscuous mode [ 311.309643][T12769] team0: entered promiscuous mode [ 311.316679][T12775] Bluetooth: MGMT ver 1.23 [ 311.317935][T12769] team_slave_0: entered promiscuous mode [ 311.332552][T12769] team_slave_1: entered promiscuous mode [ 311.517860][T12776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.533777][T12776] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.550022][T12776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.068779][T12804] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 312.198558][T12817] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 312.232308][T12817] netlink: 'syz.3.2009': attribute type 2 has an invalid length. [ 312.847782][T12848] delete_channel: no stack [ 313.068790][T12855] tipc: Enabled bearer , priority 0 [ 313.084041][T12855] syzkaller0: entered promiscuous mode [ 313.089780][T12855] syzkaller0: entered allmulticast mode [ 313.138381][T12855] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 313.214877][T12863] netlink: 'syz.1.2024': attribute type 4 has an invalid length. [ 313.224225][T12866] netlink: 'syz.4.2025': attribute type 29 has an invalid length. [ 313.267645][T12855] tipc: Resetting bearer [ 313.293192][T12871] validate_nla: 1 callbacks suppressed [ 313.293217][T12871] netlink: 'syz.4.2025': attribute type 29 has an invalid length. [ 313.932218][T12851] tipc: Resetting bearer [ 314.092050][ T7256] tipc: Node number set to 2886997162 [ 314.163500][T12851] tipc: Disabling bearer [ 314.415236][T12898] __nla_validate_parse: 14 callbacks suppressed [ 314.415260][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 314.567316][T12900] tipc: Enabled bearer , priority 0 [ 314.579945][T12900] syzkaller0: entered promiscuous mode [ 314.586002][T12900] syzkaller0: entered allmulticast mode [ 314.706100][T12899] tipc: Resetting bearer [ 314.808926][T12899] tipc: Disabling bearer [ 314.962291][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 314.983411][T12917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.013688][T12918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.128482][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 315.172001][T12929] netlink: 'syz.3.2043': attribute type 1 has an invalid length. [ 315.183392][T12929] netlink: 'syz.3.2043': attribute type 1 has an invalid length. [ 315.220452][T12928] netlink: 'syz.4.2044': attribute type 7 has an invalid length. [ 315.231594][T12928] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2044'. [ 315.259655][T12932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.369008][T12937] tipc: Enabled bearer , priority 0 [ 315.411918][T12937] syzkaller0: entered promiscuous mode [ 315.501363][T12937] syzkaller0: entered allmulticast mode [ 315.522717][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 315.614965][T12937] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 315.690410][T12948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2048'. [ 315.774765][T12933] tipc: Resetting bearer [ 315.814178][T12933] tipc: Disabling bearer [ 316.630507][T12976] syzkaller0: entered promiscuous mode [ 316.636636][T12976] syzkaller0: entered allmulticast mode [ 317.568878][T12997] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 319.244053][T12997] bridge_slave_1: left allmulticast mode [ 319.249893][T12997] bridge_slave_1: left promiscuous mode [ 319.285060][T12997] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.344153][T12997] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 319.354687][T12998] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2065'. [ 319.431170][T13006] netlink: 'syz.0.2068': attribute type 4 has an invalid length. [ 319.657082][T13020] netlink: 'syz.4.2070': attribute type 10 has an invalid length. [ 319.673766][T13026] netlink: 808 bytes leftover after parsing attributes in process `syz.3.2073'. [ 319.694868][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2072'. [ 319.748310][T13020] veth0_macvtap: left promiscuous mode [ 319.800120][T13034] batadv_slave_1: entered promiscuous mode [ 319.880853][T13041] bond0: (slave rose0): Error: Device can not be enslaved while up [ 320.065147][T13049] netlink: 'syz.4.2078': attribute type 3 has an invalid length. [ 320.111779][T13021] batadv_slave_1: left promiscuous mode [ 320.451087][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 320.614822][T13070] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 320.671972][T13070] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 320.815884][T13091] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 320.858963][T13091] netlink: 'syz.1.2092': attribute type 2 has an invalid length. [ 320.910614][T13095] tipc: Enabled bearer , priority 12 [ 321.088809][T13110] netlink: 'syz.0.2096': attribute type 33 has an invalid length. [ 321.113528][T13110] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2096'. [ 321.174971][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2096'. [ 321.625672][T13128] netlink: 'syz.2.2102': attribute type 29 has an invalid length. [ 321.634650][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 322.493097][T13151] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2107'. [ 322.529744][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2107'. [ 322.582629][T13156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2107'. [ 322.713438][T13161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2110'. [ 322.827055][T13168] chnl_net:caif_netlink_parms(): no params data found [ 323.157672][T13172] syzkaller0: entered promiscuous mode [ 323.163850][T13172] syzkaller0: entered allmulticast mode [ 323.340131][T13190] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 323.356129][T13190] netlink: 'syz.0.2120': attribute type 64 has an invalid length. [ 325.598614][T13199] sctp: [Deprecated]: syz.1.2123 (pid 13199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.598614][T13199] Use struct sctp_sack_info instead [ 325.794260][T13217] __nla_validate_parse: 7 callbacks suppressed [ 325.794288][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 326.721015][T13271] netlink: 'syz.4.2138': attribute type 11 has an invalid length. [ 326.782586][T13271] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2138'. [ 326.852399][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2141'. [ 327.008942][T13289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2143'. [ 327.138573][T13289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2143'. [ 327.330324][T13304] validate_nla: 1 callbacks suppressed [ 327.330347][T13304] netlink: 'syz.1.2148': attribute type 13 has an invalid length. [ 327.364497][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 327.381990][T13301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2147'. [ 327.392407][T13304] lo: entered promiscuous mode [ 327.408711][T13304] lo: entered allmulticast mode [ 327.460977][T13304] tunl0: entered promiscuous mode [ 327.471905][T13304] tunl0: entered allmulticast mode [ 327.495583][T13304] gre0: entered promiscuous mode [ 327.500755][T13304] gre0: entered allmulticast mode [ 327.547476][T13304] gretap0: entered promiscuous mode [ 327.568340][T13304] gretap0: entered allmulticast mode [ 327.589480][T13304] erspan0: entered promiscuous mode [ 327.620511][T13304] erspan0: entered allmulticast mode [ 327.660368][T13304] ip_vti0: entered promiscuous mode [ 327.711322][T13304] ip_vti0: entered allmulticast mode [ 327.725868][T13304] ip6_vti0: entered promiscuous mode [ 327.732270][T13304] ip6_vti0: entered allmulticast mode [ 327.744998][T13304] sit0: entered promiscuous mode [ 327.750152][T13304] sit0: entered allmulticast mode [ 327.774643][T13304] ip6tnl0: entered promiscuous mode [ 327.780333][T13304] ip6tnl0: entered allmulticast mode [ 327.793084][T13304] ip6gre0: entered promiscuous mode [ 327.799144][T13304] ip6gre0: entered allmulticast mode [ 327.810431][T13304] ip6gretap0: entered promiscuous mode [ 327.817222][T13304] ip6gretap0: entered allmulticast mode [ 327.827664][T13304] ip6gretap0: refused to change device tx_queue_len [ 327.835281][T13304] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 328.154406][T13335] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2157'. [ 328.172952][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 328.505153][T13355] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2161'. [ 328.654969][T13361] openvswitch: netlink: IPv4 tunnel dst address is zero [ 328.884169][T13373] geneve2: entered promiscuous mode [ 328.892266][T13373] geneve2: entered allmulticast mode [ 328.921164][ T37] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.942578][ T37] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.980533][ T37] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 329.173536][T13389] netlink: 'syz.4.2176': attribute type 15 has an invalid length. [ 329.275474][T13392] netlink: 'syz.0.2173': attribute type 10 has an invalid length. [ 329.409935][T13392] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.694054][T13405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.361202][T13434] netlink: 'syz.1.2187': attribute type 14 has an invalid length. [ 330.734224][T13455] hsr0: entered allmulticast mode [ 330.753634][T13455] hsr_slave_0: entered allmulticast mode [ 330.768182][T13455] hsr_slave_1: entered allmulticast mode [ 330.814823][T13442] hsr0 speed is unknown, defaulting to 1000 [ 330.909833][T13455] __nla_validate_parse: 3 callbacks suppressed [ 330.909860][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 330.943525][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 330.994692][T13442] lo speed is unknown, defaulting to 1000 [ 331.359718][T13459] "syz.0.2192" (13459) uses obsolete ecb(arc4) skcipher [ 331.659579][T13481] tipc: Enabled bearer , priority 0 [ 331.669971][T13487] syzkaller0: entered promiscuous mode [ 331.711728][T13487] syzkaller0: entered allmulticast mode [ 331.758674][T13481] tipc: Resetting bearer [ 331.798318][T13479] tipc: Resetting bearer [ 331.860807][T13479] tipc: Disabling bearer [ 332.172594][T13507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2204'. [ 333.353917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.780718][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 333.850775][T13562] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 334.236862][T13590] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 334.260175][T13590] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 334.338637][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 334.358768][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 334.676867][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 334.736815][T13610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.774604][T13611] vlan3: entered allmulticast mode [ 334.785976][T13611] bond4: entered allmulticast mode [ 335.050574][T13625] netlink: 'syz.4.2241': attribute type 13 has an invalid length. [ 335.082289][T13625] lo: entered promiscuous mode [ 335.087562][T13625] lo: entered allmulticast mode [ 335.157678][T13625] tunl0: entered promiscuous mode [ 335.168718][T13625] tunl0: entered allmulticast mode [ 335.194459][T13625] gre0: entered promiscuous mode [ 335.201408][T13625] gre0: entered allmulticast mode [ 335.257514][T13625] gretap0: entered allmulticast mode [ 335.268382][T13625] gretap0: refused to change device tx_queue_len [ 335.301665][T13625] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 335.416898][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 335.442705][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 335.769193][T13653] tunl0: entered promiscuous mode [ 335.788745][T13653] netlink: 'syz.3.2252': attribute type 3 has an invalid length. [ 335.805640][T13653] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2252'. [ 336.088224][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'. [ 336.114264][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'. [ 336.200759][T13677] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2262'. [ 336.242772][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 336.263162][T13677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2262'. [ 336.342883][T13683] netlink: 'syz.3.2263': attribute type 4 has an invalid length. [ 336.368921][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 336.436931][T13688] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 336.866647][T13711] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 336.886872][T13711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2274'. [ 336.906153][T13711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2274'. [ 336.965758][T13711] gretap1: entered promiscuous mode [ 336.971415][T13711] gretap1: entered allmulticast mode [ 336.996841][T13714] syzkaller1: entered promiscuous mode [ 337.013173][T13714] syzkaller1: entered allmulticast mode [ 337.075966][T13719] netlink: 'syz.3.2277': attribute type 1 has an invalid length. [ 337.120783][T13719] netlink: 'syz.3.2277': attribute type 2 has an invalid length. [ 337.348129][T13730] netlink: 'syz.3.2281': attribute type 1 has an invalid length. [ 337.372191][T13730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.403442][T13730] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 337.429003][T13732] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 337.450990][T13730] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2281'. [ 337.475211][T13735] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 337.494646][T13744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.291184][T13791] syzkaller1: entered promiscuous mode [ 338.298936][T13791] syzkaller1: entered allmulticast mode [ 338.300840][T13794] openvswitch: netlink: IP tunnel TTL not specified. [ 338.957208][T13814] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 339.024751][T13814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2304'. [ 339.268576][T13833] validate_nla: 3 callbacks suppressed [ 339.268614][T13833] netlink: 'syz.3.2308': attribute type 2 has an invalid length. [ 339.322894][T13832] dvmrp1: left allmulticast mode [ 339.660268][T13839] syzkaller0: entered promiscuous mode [ 339.678869][T13839] syzkaller0: entered allmulticast mode [ 339.703510][T13846] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 339.709644][T13846] syzkaller0: Linktype set failed because interface is up [ 339.727464][T13853] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 339.786370][T12173] syzkaller0: tun_net_xmit 48 [ 343.179628][T13898] __nla_validate_parse: 4 callbacks suppressed [ 343.179656][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2325'. [ 343.468712][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 343.478937][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 343.490312][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 343.512517][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 343.537896][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 343.567619][T13925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 343.579247][T13928] netlink: zone id is out of range [ 343.610076][T13928] netlink: del zone limit has 4 unknown bytes [ 343.618410][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2334'. [ 343.636685][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2334'. [ 343.669642][T13932] bridge0: port 2(vlan3) entered blocking state [ 343.681124][T13932] bridge0: port 2(vlan3) entered disabled state [ 343.698595][T13932] vlan3: entered allmulticast mode [ 343.708265][T13932] bridge0: entered allmulticast mode [ 343.763001][T13932] vlan3: left allmulticast mode [ 343.768903][T13932] bridge0: left allmulticast mode [ 344.158855][T13944] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 344.300025][T13951] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 344.400703][T13956] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 344.419644][T13959] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 344.431725][T13959] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2342'. [ 344.543325][T13966] netlink: 'syz.0.2343': attribute type 9 has an invalid length. [ 344.575246][T13951] veth5: entered promiscuous mode [ 344.591288][T13951] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 344.608633][T13966] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.620156][T13970] netem: unknown loss type 0 [ 344.636108][T13970] netem: change failed [ 344.645745][T13969] netem: unknown loss type 0 [ 344.655010][T13969] netem: change failed [ 344.975062][T13985] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 345.099128][T13988] veth7: entered promiscuous mode [ 345.111193][T13988] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 345.123285][T13990] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 345.137427][T13995] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 345.223615][T13260] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.259159][T13260] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.298536][T13260] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.325380][T14002] netlink: 'syz.1.2355': attribute type 16 has an invalid length. [ 345.347263][T14004] netlink: 'syz.3.2356': attribute type 8 has an invalid length. [ 345.370076][T14002] netlink: 'syz.1.2355': attribute type 17 has an invalid length. [ 345.584701][T14002] lo: left promiscuous mode [ 345.599565][T14002] lo: left allmulticast mode [ 345.613712][T14002] tunl0: left promiscuous mode [ 345.618909][T14002] tunl0: left allmulticast mode [ 345.646215][T14002] gre0: left promiscuous mode [ 345.651120][T14002] gre0: left allmulticast mode [ 345.707700][T14002] gretap0: left promiscuous mode [ 345.713446][T14002] gretap0: left allmulticast mode [ 345.724777][T14002] erspan0: left promiscuous mode [ 345.730073][T14002] erspan0: left allmulticast mode [ 345.739884][T14002] ip_vti0: left promiscuous mode [ 345.747203][T14002] ip_vti0: left allmulticast mode [ 345.761856][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.774899][T14002] ip6_vti0: left promiscuous mode [ 345.780141][T14002] ip6_vti0: left allmulticast mode [ 345.790269][T14002] sit0: left promiscuous mode [ 345.795731][T14002] sit0: left allmulticast mode [ 345.936002][T14002] ip6tnl0: left promiscuous mode [ 345.957775][T14002] ip6tnl0: left allmulticast mode [ 345.987845][T14002] ip6gre0: left promiscuous mode [ 346.005746][T14002] ip6gre0: left allmulticast mode [ 346.018694][T14002] ip6gretap0: left promiscuous mode [ 346.025341][T14002] ip6gretap0: left allmulticast mode [ 346.038721][T14002] bond0: left promiscuous mode [ 346.045462][T14002] bond_slave_0: left promiscuous mode [ 346.051303][T14002] bond_slave_1: left promiscuous mode [ 346.058192][T14002] team0: left promiscuous mode [ 346.064046][T14002] team_slave_0: left promiscuous mode [ 346.070020][T14002] team_slave_1: left promiscuous mode [ 346.077623][T14002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.097629][T14002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.185874][T14018] tipc: Enabled bearer , priority 0 [ 346.206728][T14021] syzkaller0: entered promiscuous mode [ 346.213748][T14021] syzkaller0: entered allmulticast mode [ 346.294204][T13239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.367851][T14031] tipc: Resetting bearer [ 346.449502][T14031] tipc: Disabling bearer [ 346.490500][T14047] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 346.499148][T14044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.542048][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.858440][T14064] ================================================================== [ 346.866617][T14064] BUG: KASAN: slab-use-after-free in rose_send_frame+0x131/0x220 [ 346.874590][T14064] Write of size 8 at addr ffff88802bac3818 by task syz.2.2368/14064 [ 346.882987][T14064] [ 346.885398][T14064] CPU: 0 UID: 0 PID: 14064 Comm: syz.2.2368 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 346.885454][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.885479][T14064] Call Trace: [ 346.885506][T14064] [ 346.885517][T14064] dump_stack_lvl+0x189/0x250 [ 346.885544][T14064] ? rcu_is_watching+0x15/0xb0 [ 346.885574][T14064] ? __kasan_check_byte+0x12/0x40 [ 346.885604][T14064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.885626][T14064] ? rcu_is_watching+0x15/0xb0 [ 346.885662][T14064] ? lock_release+0x4b/0x3e0 [ 346.885690][T14064] ? __virt_addr_valid+0x1c8/0x5c0 [ 346.885738][T14064] ? __virt_addr_valid+0x4a5/0x5c0 [ 346.885759][T14064] print_report+0xca/0x240 [ 346.885785][T14064] ? rose_send_frame+0x131/0x220 [ 346.885803][T14064] kasan_report+0x118/0x150 [ 346.885832][T14064] ? rose_send_frame+0x131/0x220 [ 346.885854][T14064] rose_send_frame+0x131/0x220 [ 346.885874][T14064] rose_transmit_link+0x471/0x740 [ 346.885897][T14064] rose_write_internal+0x11dc/0x1ac0 [ 346.885921][T14064] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.885953][T14064] ? __pfx_rose_write_internal+0x10/0x10 [ 346.885976][T14064] ? rose_route_free_lci+0x140/0x170 [ 346.885999][T14064] ? rose_connect+0x822/0x10a0 [ 346.886032][T14064] rose_connect+0x8ee/0x10a0 [ 346.886062][T14064] ? __pfx_current_check_access_socket+0x10/0x10 [ 346.886093][T14064] ? aa_sk_perm+0x81e/0x950 [ 346.886117][T14064] ? __pfx_rose_connect+0x10/0x10 [ 346.886147][T14064] ? aa_af_perm+0x220/0x2b0 [ 346.886167][T14064] ? tomoyo_socket_connect_permission+0x164/0x290 [ 346.886203][T14064] ? bpf_lsm_socket_connect+0x9/0x20 [ 346.886230][T14064] __sys_connect+0x313/0x440 [ 346.886264][T14064] ? __pfx___sys_connect+0x10/0x10 [ 346.886302][T14064] ? rcu_is_watching+0x15/0xb0 [ 346.886337][T14064] __x64_sys_connect+0x7a/0x90 [ 346.886367][T14064] do_syscall_64+0xfa/0x3b0 [ 346.886397][T14064] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.886426][T14064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.886447][T14064] ? clear_bhb_loop+0x60/0xb0 [ 346.886470][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.886489][T14064] RIP: 0033:0x7fea2f38ebe9 [ 346.886508][T14064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.886527][T14064] RSP: 002b:00007fea3018f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 346.886553][T14064] RAX: ffffffffffffffda RBX: 00007fea2f5b6180 RCX: 00007fea2f38ebe9 [ 346.886568][T14064] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000005b [ 346.886581][T14064] RBP: 00007fea2f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.886594][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.886607][T14064] R13: 00007fea2f5b6218 R14: 00007fea2f5b6180 R15: 00007ffecfa07848 [ 346.886632][T14064] [ 346.886641][T14064] [ 347.172729][T14064] Allocated by task 10159: [ 347.177374][T14064] kasan_save_track+0x3e/0x80 [ 347.182096][T14064] __kasan_kmalloc+0x93/0xb0 [ 347.186826][T14064] __kmalloc_cache_noprof+0x230/0x3d0 [ 347.192337][T14064] rose_add_node+0x23a/0xde0 [ 347.197129][T14064] rose_rt_ioctl+0xa48/0xfb0 [ 347.201751][T14064] rose_ioctl+0x3ce/0x8b0 [ 347.206148][T14064] sock_do_ioctl+0xd9/0x300 [ 347.210793][T14064] sock_ioctl+0x576/0x790 [ 347.215141][T14064] __se_sys_ioctl+0xf9/0x170 [ 347.219833][T14064] do_syscall_64+0xfa/0x3b0 [ 347.224391][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.230565][T14064] [ 347.232915][T14064] Freed by task 14057: [ 347.237012][T14064] kasan_save_track+0x3e/0x80 [ 347.241727][T14064] kasan_save_free_info+0x46/0x50 [ 347.246876][T14064] __kasan_slab_free+0x62/0x70 [ 347.251844][T14064] kfree+0x18e/0x440 [ 347.255756][T14064] rose_rt_device_down+0x473/0x4c0 [ 347.260887][T14064] rose_device_event+0x603/0x6a0 [ 347.266094][T14064] notifier_call_chain+0x1b3/0x3e0 [ 347.271427][T14064] __dev_notify_flags+0x18d/0x2e0 [ 347.276478][T14064] netif_change_flags+0xe8/0x1a0 [ 347.281515][T14064] dev_change_flags+0x130/0x260 [ 347.286654][T14064] dev_ioctl+0x7b4/0x1150 [ 347.291002][T14064] sock_do_ioctl+0x22c/0x300 [ 347.295695][T14064] sock_ioctl+0x576/0x790 [ 347.300132][T14064] __se_sys_ioctl+0xf9/0x170 [ 347.305101][T14064] do_syscall_64+0xfa/0x3b0 [ 347.309755][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.315839][T14064] [ 347.318409][T14064] The buggy address belongs to the object at ffff88802bac3800 [ 347.318409][T14064] which belongs to the cache kmalloc-512 of size 512 [ 347.332576][T14064] The buggy address is located 24 bytes inside of [ 347.332576][T14064] freed 512-byte region [ffff88802bac3800, ffff88802bac3a00) [ 347.346536][T14064] [ 347.349092][T14064] The buggy address belongs to the physical page: [ 347.355647][T14064] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bac0 [ 347.364621][T14064] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 347.373395][T14064] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 347.381520][T14064] page_type: f5(slab) [ 347.385519][T14064] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 347.395166][T14064] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 347.403795][T14064] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 347.412962][T14064] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 347.422107][T14064] head: 00fff00000000002 ffffea0000aeb001 00000000ffffffff 00000000ffffffff [ 347.430806][T14064] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 347.439747][T14064] page dumped because: kasan: bad access detected [ 347.446185][T14064] page_owner tracks the page as allocated [ 347.452090][T14064] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevadm), ts 38939278172, free_ts 38828955415 [ 347.473702][T14064] post_alloc_hook+0x240/0x2a0 [ 347.478516][T14064] get_page_from_freelist+0x21e4/0x22c0 [ 347.484323][T14064] __alloc_frozen_pages_noprof+0x181/0x370 [ 347.490456][T14064] alloc_pages_mpol+0x232/0x4a0 [ 347.495358][T14064] allocate_slab+0x8a/0x3b0 [ 347.499921][T14064] ___slab_alloc+0xbfc/0x1480 [ 347.504879][T14064] __kmalloc_cache_noprof+0x296/0x3d0 [ 347.510313][T14064] kernfs_fop_open+0x397/0xca0 [ 347.515186][T14064] do_dentry_open+0xdf3/0x1970 [ 347.520050][T14064] vfs_open+0x3b/0x340 [ 347.524137][T14064] path_openat+0x2ee5/0x3830 [ 347.528775][T14064] do_filp_open+0x1fa/0x410 [ 347.533384][T14064] do_sys_openat2+0x121/0x1c0 [ 347.538075][T14064] __x64_sys_openat+0x138/0x170 [ 347.542954][T14064] do_syscall_64+0xfa/0x3b0 [ 347.547767][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.553765][T14064] page last free pid 5209 tgid 5209 stack trace: [ 347.560123][T14064] __free_frozen_pages+0xc71/0xe70 [ 347.565271][T14064] __put_partials+0x161/0x1c0 [ 347.570002][T14064] put_cpu_partial+0x17c/0x250 [ 347.574780][T14064] __slab_free+0x2f7/0x400 [ 347.579212][T14064] qlist_free_all+0x97/0x140 [ 347.583820][T14064] kasan_quarantine_reduce+0x148/0x160 [ 347.589292][T14064] __kasan_slab_alloc+0x22/0x80 [ 347.594158][T14064] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 347.599996][T14064] __d_alloc+0x36/0x7a0 [ 347.604168][T14064] d_alloc_parallel+0xe5/0x15e0 [ 347.609136][T14064] path_openat+0xa3b/0x3830 [ 347.613757][T14064] do_filp_open+0x1fa/0x410 [ 347.618307][T14064] do_sys_openat2+0x121/0x1c0 [ 347.623015][T14064] __x64_sys_openat+0x138/0x170 [ 347.627995][T14064] do_syscall_64+0xfa/0x3b0 [ 347.632606][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.638511][T14064] [ 347.640838][T14064] Memory state around the buggy address: [ 347.646583][T14064] ffff88802bac3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 347.654752][T14064] ffff88802bac3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 347.663026][T14064] >ffff88802bac3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 347.671465][T14064] ^ [ 347.676434][T14064] ffff88802bac3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 347.684532][T14064] ffff88802bac3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 347.693149][T14064] ================================================================== [ 347.726574][T14064] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 347.734037][T14064] CPU: 0 UID: 0 PID: 14064 Comm: syz.2.2368 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 347.745977][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.756076][T14064] Call Trace: [ 347.759591][T14064] [ 347.762652][T14064] dump_stack_lvl+0x99/0x250 [ 347.767293][T14064] ? __asan_memcpy+0x40/0x70 [ 347.772084][T14064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.777432][T14064] ? __pfx__printk+0x10/0x10 [ 347.782070][T14064] panic+0x2db/0x790 [ 347.786119][T14064] ? __pfx_panic+0x10/0x10 [ 347.790603][T14064] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 347.796577][T14064] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.803111][T14064] ? print_memory_metadata+0x314/0x400 [ 347.808626][T14064] ? rose_send_frame+0x131/0x220 [ 347.813671][T14064] check_panic_on_warn+0x89/0xb0 [ 347.818636][T14064] ? rose_send_frame+0x131/0x220 [ 347.823710][T14064] end_report+0x78/0x160 [ 347.828064][T14064] kasan_report+0x129/0x150 [ 347.832721][T14064] ? rose_send_frame+0x131/0x220 [ 347.837799][T14064] rose_send_frame+0x131/0x220 [ 347.843031][T14064] rose_transmit_link+0x471/0x740 [ 347.848237][T14064] rose_write_internal+0x11dc/0x1ac0 [ 347.853573][T14064] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.858815][T14064] ? __pfx_rose_write_internal+0x10/0x10 [ 347.864724][T14064] ? rose_route_free_lci+0x140/0x170 [ 347.870219][T14064] ? rose_connect+0x822/0x10a0 [ 347.875060][T14064] rose_connect+0x8ee/0x10a0 [ 347.879794][T14064] ? __pfx_current_check_access_socket+0x10/0x10 [ 347.886358][T14064] ? aa_sk_perm+0x81e/0x950 [ 347.891065][T14064] ? __pfx_rose_connect+0x10/0x10 [ 347.896115][T14064] ? aa_af_perm+0x220/0x2b0 [ 347.900658][T14064] ? tomoyo_socket_connect_permission+0x164/0x290 [ 347.907213][T14064] ? bpf_lsm_socket_connect+0x9/0x20 [ 347.912521][T14064] __sys_connect+0x313/0x440 [ 347.917203][T14064] ? __pfx___sys_connect+0x10/0x10 [ 347.922464][T14064] ? rcu_is_watching+0x15/0xb0 [ 347.927281][T14064] __x64_sys_connect+0x7a/0x90 [ 347.932080][T14064] do_syscall_64+0xfa/0x3b0 [ 347.936636][T14064] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.941880][T14064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.948081][T14064] ? clear_bhb_loop+0x60/0xb0 [ 347.952958][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.958888][T14064] RIP: 0033:0x7fea2f38ebe9 [ 347.963348][T14064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.982983][T14064] RSP: 002b:00007fea3018f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 347.991445][T14064] RAX: ffffffffffffffda RBX: 00007fea2f5b6180 RCX: 00007fea2f38ebe9 [ 347.999442][T14064] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000005b [ 348.007620][T14064] RBP: 00007fea2f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 348.015724][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.023710][T14064] R13: 00007fea2f5b6218 R14: 00007fea2f5b6180 R15: 00007ffecfa07848 [ 348.031805][T14064] [ 348.035203][T14064] Kernel Offset: disabled [ 348.039556][T14064] Rebooting in 86400 seconds..