last executing test programs: 3.344243723s ago: executing program 2 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x300, 0x0, 0x0, 0x810}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000080)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008}, 0x40040c0) 3.321846105s ago: executing program 3 (id=2461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0x3) 3.095324667s ago: executing program 2 (id=2465): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 2.911369131s ago: executing program 2 (id=2466): socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 2.626304992s ago: executing program 0 (id=2469): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040040}], 0x1, 0x20000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c8b", 0xc6}, {&(0x7f00000022c0)="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", 0xef1}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) recvmmsg(r6, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) 2.483203041s ago: executing program 2 (id=2471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000600000000000000000000000611008000000000095000000000000004ad37f01852a63dfa4655919a25493a531dc4e8e0000010000000000f59a9748abba51ddadfbb5440262c79358566f7002c92b311a191140ddd457b66c356f1a1111f571da7d8027ef71788679cca044c7171f1b5e3176dfb35278292de191fd53f3a5b5bead1cd336e07859c6f2af328332f4e1dba84bffde38a6554c3c7f22edc7fe7cdb6b2d003f7e203a45d4536bf03e186b0769a1fced781467f6bb604b4aca361dd3ca2ec0787136fbb6188fb530db6615d2fc930106a291094d5d471a0b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, 0x0, 0x562e351245413955, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r5, r6, 0x4, r3}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8, 0x20, 0x2, 0x7, {{0x8, 0x4, 0x3, 0x4, 0x20, 0x68, 0x0, 0xff, 0x2f, 0x0, @broadcast, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @generic={0x86, 0x6, "417955ff"}, @noop]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x50010, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00'}) (async) r12 = getuid() ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000300)={0x1, 0x18, [0x1, 0x7f, 0x3, 0xe7b], &(0x7f0000000100)=[0x0, 0x0, 0x0]}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@private=0xa010100, @in=@rand_addr=0x64010101, 0x4e22, 0x1000, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x2e, r7, r12}, {0x0, 0x1, 0x5, 0x2, 0xffffffff, 0x4a59, 0x10, 0xfffffffffffffffa}, {0x0, 0x1, 0xb, 0x7}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d3, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3505, 0x4, 0x0, 0x4, 0x1000, 0x6, 0x40}}, 0xe8) 2.424845429s ago: executing program 4 (id=2472): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'}) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) poll(&(0x7f0000000c80)=[{r4, 0x8284}], 0x1, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000583a00fe800000000000000000000000000000fe8000000000000000000000000000aa04009078000000006031c90900002b0000000400000000000000000000000000fc0100000000000000000000000000016c04040000000000fe880000ecb81a2da9b15973ee7bbfeabe2e7e00000000000000e300000001fe"], 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newnexthop={0x18, 0x68, 0x901}, 0xc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newnexthop={0x18, 0x68, 0x901}, 0xc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0) 2.39227571s ago: executing program 0 (id=2473): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) 2.243338327s ago: executing program 3 (id=2474): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB="04002abd70002cf523dd9de3f2fc1666d5476bf9c5c8225839eec67361a0441e4c7f829c4b465d43d4640871a59df9e949ca546642829d0fd5f76353dc4e2dc50f76861b8020c6154a5cf2d838a5b9d5e7919a515e1e8463e9ed79511d48d138"], 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000800000000000000700a000000db39d42afcda1a3a2c4802957d23788d91f7f300834594a238a721639a1ad991905a08bb72f881bdc7b6b2dabc518ac72c77587278593ada64c06eddb0490c000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x8080) 2.053944093s ago: executing program 0 (id=2475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvfrom$inet(r6, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000100)=0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, r4, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x20}}, 0x44000) 1.876129386s ago: executing program 4 (id=2476): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000a000000000000000000786000000a000000080008007401ea79ab8042468caf080d6e19788ae91611b28774", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) 1.779258475s ago: executing program 1 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x6, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r1 = socket(0xf, 0x1, 0x7) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@delsa={0x170, 0x11, 0x400, 0x70bd28, 0x25dfdbfc, {@in=@broadcast, 0x4d3, 0xa, 0x33}, [@algo_auth_trunc={0x142, 0x14, {{'xcbc-aes-ce\x00'}, 0x7b0, 0x40, "c073240d5da0d49ece65b29977fe6e1b077ad7853129149241b238ccb487fd23627cd064006bfa7c5a3ac47fbc07a59e671c9edef1a57b271180766154b550768802cf9a7451c553b58d2036d552b9df208e0583a77e6eb66c7f1a2472b21c6900abf609a61fd9d0fa21b14af11192e5191c44dc56739e97552657bfbe3a5539f2eb32eac546834d54622669b481166e4a41cd5749621211d447a5d2f4702537cd5d2c60d76f26c202f87bba4b29041f4cdfb995c28d52d9d501dbd81852d2c3a92b9ba1873d1f5ceb08106576b774c416ebf1928a512b2eb9952da32b7492f4edd05a19316962dd1f0f5e5e47211113b361aa62fe62"}}, @iptfs_dont_frag={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) 1.68233885s ago: executing program 2 (id=2478): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, 0x0) sendmsg$xdp(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="17cec3c0c6da3472ee5701271a750313bc66", 0x12}, {&(0x7f0000000400)}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfec105979634133028c690ca6368a7a1d", 0x71}, {&(0x7f0000000640)="84d50eb96e38467581376e10020db379ed7a834da9bf5f3615070d36db14877ba4fb6dbcf86a1a75148df208479b12db9a6fd2091bd72a902f", 0x39}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_delrule={0x30, 0x21, 0x200, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0x10, 0x5, 0x2, 0x0, 0x0, 0x2, 0xc}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (async) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, 0x0) (async) sendmsg$xdp(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, 0x3, 0x0, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="17cec3c0c6da3472ee5701271a750313bc66", 0x12}, {&(0x7f0000000400)}, {&(0x7f0000000500)="7feeaf8962c97d03ea75fb0a510f948732040dc6dfa2da59ddaeff71994277b5f872e5256c4c8b49139c7af210c5db83f52d8b36c49bb41f60c82dd4dc78ae1248c4e51ca69f323061817445ddc5baa4c0139f4cdbb56eb616dad8057d46dab4f29a8465dbb66ae5d011e910ea25dbfafeca0e2f8dade2b85aff3f95f2113d5615a7cfdfd194adbe42047d58027091caffc0598471127aea0ff78f6afdc38f0627a732b7a376174c3cdf32f6575d16b261", 0xb1}, {&(0x7f00000005c0)="6e6013b5c108f9d3bc22c987ee038edfd7edb6316ab6d69b7b5f11f4fbfae50540a024c3e1c3c174f8d0a1dc531a5069f069a0cd35948f55ebb300d2d68a3d9524c914fcc594a6c3b35a2d3f5a92f288f372b851898ee103e3e6aee1e593ea9dbfec105979634133028c690ca6368a7a1d", 0x71}, {&(0x7f0000000640)="84d50eb96e38467581376e10020db379ed7a834da9bf5f3615070d36db14877ba4fb6dbcf86a1a75148df208479b12db9a6fd2091bd72a902f", 0x39}], 0x6, 0x0, 0x0, 0x200008c0}, 0x24004000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_delrule={0x30, 0x21, 0x200, 0x70bd28, 0x25dfdbff, {0x2, 0x80, 0x10, 0x5, 0x2, 0x0, 0x0, 0x2, 0xc}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) (async) 1.567521564s ago: executing program 4 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x38, 0x41, 0x20, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x342}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x5, 0x1c, 0x0, 0x1, [@generic='l']}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) socket(0x10, 0x803, 0x0) 1.415276155s ago: executing program 1 (id=2480): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) epoll_create1(0xcd52dcdb6de9c7d3) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) 1.412691919s ago: executing program 3 (id=2481): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000000000000000023"], 0x24}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x811) 1.357471093s ago: executing program 4 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r1, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.242952496s ago: executing program 4 (id=2483): clock_gettime(0x0, &(0x7f0000000040)) ppoll(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.063898719s ago: executing program 1 (id=2484): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x420000, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, r3, 0x12504000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) 926.290101ms ago: executing program 3 (id=2485): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 913.374981ms ago: executing program 0 (id=2486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x20) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x400, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) 618.978313ms ago: executing program 0 (id=2487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40080c4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f00000001c0)={r4}) (async) r5 = accept4$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x438, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, &(0x7f0000000280), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xff, 0xffffff00], 'veth1_macvtap\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x8, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x69, 0xffff}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xff, 0x0, 0xffffffff], 'veth1_vlan\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x4, 0x42}, 0x0, 0x208, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x3, 0x7], 0x7, 0x5, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote, @remote, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, @remote], 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xe, 0x9, 0x8, '\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000780)={0x9, 0x7, 0x9, 0x2, 0x7, 0x80, 0x1, 0x0, 0x0, 0x1, 0xd, 0x3, 0x8}, 0xe) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000095}, 0x44) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa0, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x875369f823669786}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x880}, 0x40000) (async) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000b80)) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r8) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r10, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x408d5}, 0x408c0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\xf7$(!\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10004801) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r11, 0x0, 0x22, &(0x7f0000001080), &(0x7f00000010c0)=0x4) getsockopt$inet_mtu(r11, 0x0, 0xa, &(0x7f0000001100), &(0x7f0000001140)=0x4) (async) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000011c0), r9) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x64, r12, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8045}, 0x4004000) 618.255074ms ago: executing program 1 (id=2488): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0xea}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 504.322654ms ago: executing program 3 (id=2489): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0xc0) 367.944913ms ago: executing program 1 (id=2490): syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00042f00fc00000000000000000000000080000000d42a0000000000010000883e000c90780100"/66], 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3, "15b572d434a7024c"}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r4, 0x1}, 0x20) close(r3) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002802000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000380)) (async) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000380)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fcd8df2507000000050005007f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4020051}, 0x800) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='\x00', 0x800, &(0x7f0000000100)={@align=0x15af, {0x2d9, 0x7, 0x3, 0x3}}, 0xfff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='\x00', 0x800, &(0x7f0000000100)={@align=0x15af, {0x2d9, 0x7, 0x3, 0x3}}, 0xfff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}) 231.127979ms ago: executing program 0 (id=2491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80803, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x38, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0xffff, 0x1]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3af0b7e0b719351f0482b452605c029b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f392850a10abb44d7c8ea94d42c2fc56"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c085996b92114f9525fecf9af9d8567"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "42bb2bb8ca0d71b99f2e851b5ab37df5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b4a004d0f0b759602d192b8a175e614d"}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0xe}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 208.439602ms ago: executing program 4 (id=2492): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB="04002abd70002cf523dd9de3f2fc1666d5476bf9c5c8225839eec67361a0441e4c7f829c4b465d43d4640871a59df9e949ca546642829d0fd5f76353dc4e2dc50f76861b8020c6154a5cf2d838a5b9d5e7919a515e1e8463e9ed79511d48d138"], 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x4040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000800000000000000700a000000db39d42afcda1a3a2c4802957d23788d91f7f300834594a238a721639a1ad991905a08bb72f881bdc7b6b2dabc518ac72c77587278593ada64c06eddb0490c000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x8080) 121.969797ms ago: executing program 1 (id=2493): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6a}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x3d}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7f}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xd}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12c}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 63.686952ms ago: executing program 2 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r6}}}]}}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000000)={'veth1_to_hsr\x00', @ifru_mtu=0x7}}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 0s ago: executing program 3 (id=2495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ffff0000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000100)="4322750400f4ffffff003c000000", 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x89e0, &(0x7f00000000c0)='lapb0') (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): v0: Interface activated: batadv_slave_0 [ 87.276561][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.295324][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.345170][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.383635][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.488086][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.498775][ T3275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.511677][ T3275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.712737][ T3308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.728896][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.737742][ T5623] Bluetooth: hci0: command tx timeout [ 87.741661][ T3308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.743154][ T5616] Bluetooth: hci1: command tx timeout [ 87.767240][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.786831][ T3252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.804888][ T5623] Bluetooth: hci3: command tx timeout [ 87.805115][ T5621] Bluetooth: hci4: command tx timeout [ 87.812795][ T5616] Bluetooth: hci2: command tx timeout [ 87.906415][ T3275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.915552][ T3275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.927028][ T3349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.941580][ T3349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.965928][ T3252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.052360][ T3308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.078579][ T3308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.084942][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.115411][ T5839] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 88.166402][ T5839] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 88.226906][ T3275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.257356][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.280186][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.291624][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.302600][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.317727][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.328246][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.407102][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.443439][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.497519][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.524476][ T5846] netlink: 'syz.1.16': attribute type 11 has an invalid length. [ 88.608851][ T5852] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17'. [ 88.883505][ T5857] trusted_key: syz.4.5 sent an empty control message without MSG_MORE. [ 88.970119][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 89.118625][ T5880] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 89.134101][ T5872] netlink: 193 bytes leftover after parsing attributes in process `syz.3.19'. [ 89.147122][ T5878] syzkaller0: entered promiscuous mode [ 89.152840][ T5878] syzkaller0: entered allmulticast mode [ 91.900087][ T5865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.913426][ T146] nci: nci_rf_intf_activated_ntf_packet: error when signaling tm activation [ 92.085429][ T5896] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 92.090758][ T5901] netlink: 'syz.2.27': attribute type 11 has an invalid length. [ 92.198349][ T5901] team0: Port device syz_tun added [ 92.233375][ T5904] netlink: 96 bytes leftover after parsing attributes in process `syz.0.29'. [ 92.249955][ T5907] sctp: [Deprecated]: syz.3.31 (pid 5907) Use of int in max_burst socket option. [ 92.249955][ T5907] Use struct sctp_assoc_value instead [ 92.284382][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 92.371671][ T5916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.439524][ T5783] IPVS: starting estimator thread 0... [ 92.448686][ T5921] Bluetooth: MGMT ver 1.23 [ 92.458844][ T5917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.481155][ T5920] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.533108][ T5922] xt_ipcomp: unknown flags 1D [ 92.556711][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 92.574811][ T5923] IPVS: using max 39 ests per chain, 93600 per kthread [ 92.587780][ T5922] netlink: 48 bytes leftover after parsing attributes in process `syz.3.34'. [ 92.780744][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 92.891096][ T5948] veth1_to_bond: entered allmulticast mode [ 92.905761][ T5949] veth1_to_bond: entered promiscuous mode [ 92.934142][ T5947] veth1_to_bond: left promiscuous mode [ 92.941159][ T5947] veth1_to_bond: left allmulticast mode [ 93.410935][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.48'. [ 93.419114][ T5956] Zero length message leads to an empty skb [ 93.439417][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.48'. [ 93.560377][ T5966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.49'. [ 94.050784][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 94.060377][ T5998] tc action pedit 'at' offset 5 out of bounds [ 94.070936][ T5998] tunl0: entered promiscuous mode [ 94.080752][ T5998] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 94.090731][ T5998] netlink: 9 bytes leftover after parsing attributes in process `syz.1.57'. [ 94.158008][ T6006] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 94.436311][ T6023] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 94.568492][ T6030] vlan2: entered promiscuous mode [ 94.573756][ T6030] hsr0: entered promiscuous mode [ 94.579496][ T6030] vlan2: entered allmulticast mode [ 94.590680][ T6030] hsr0: entered allmulticast mode [ 94.602320][ T6030] hsr_slave_0: entered allmulticast mode [ 94.625307][ T6030] hsr_slave_1: entered allmulticast mode [ 94.843107][ T6043] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.922266][ T6046] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 94.952821][ T6046] netlink: 'syz.2.71': attribute type 2 has an invalid length. [ 95.615919][ T6088] openvswitch: netlink: Multiple metadata blocks provided [ 95.979734][ T6112] netlink: 'syz.3.92': attribute type 15 has an invalid length. [ 96.085547][ T3252] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.170168][ T6120] tipc: Failed to remove unknown binding: 66,1,1/0:156009491/156009493 [ 96.182781][ T3308] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.209663][ T6120] tipc: Failed to remove unknown binding: 66,1,1/0:156009491/156009493 [ 96.219381][ T3308] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.238545][ T3308] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 96.568579][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.676667][ T6146] hsr_slave_1 (unregistering): left promiscuous mode [ 97.167049][ T6175] h: entered promiscuous mode [ 97.337824][ T6189] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 97.605362][ T6200] __nla_validate_parse: 8 callbacks suppressed [ 97.609038][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.116'. [ 97.652833][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 98.088087][ T6233] netlink: 'syz.0.128': attribute type 2 has an invalid length. [ 98.097156][ T6233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'. [ 98.166549][ T6199] syz.4.117 (6199) used greatest stack depth: 18504 bytes left [ 98.202857][ T6203] syz.4.117 (6203) used greatest stack depth: 18280 bytes left [ 98.232960][ T6233] : entered promiscuous mode [ 98.583907][ T6259] macvtap1: entered promiscuous mode [ 98.617119][ T6259] macvtap1: entered allmulticast mode [ 98.628207][ T6259] veth1_vlan: entered allmulticast mode [ 98.845027][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 98.854512][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 98.873779][ T6283] netlink: 14 bytes leftover after parsing attributes in process `syz.0.141'. [ 98.873914][ T6271] netlink: 9 bytes leftover after parsing attributes in process `syz.3.137'. [ 98.915208][ T6282] netlink: 'syz.4.139': attribute type 30 has an invalid length. [ 98.962112][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'. [ 98.984994][ T6271] gretap0: entered promiscuous mode [ 99.024459][ T6292] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 99.124990][ T6282] bond1: option arp_missed_max: invalid value (0) [ 99.182285][ T6282] bond1: option arp_missed_max: allowed values 1 - 255 [ 99.207656][ T6282] bond1 (unregistering): Released all slaves [ 99.376401][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 99.422755][ T6311] sock: sock_set_timeout: `syz.2.149' (pid 6311) tries to set negative timeout [ 99.618986][ T6315] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 99.652400][ T6329] netlink: 'syz.3.146': attribute type 21 has an invalid length. [ 99.843401][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.155'. [ 99.910391][ T6341] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 100.058947][ T6346] smc: net device lo applied user defined pnetid SYZ0 [ 100.086226][ T6346] smc: smcd device lo applied user defined pnetid SYZ0 [ 100.108235][ T6347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.130407][ T6346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.312937][ T6366] veth0_to_bridge: entered promiscuous mode [ 100.328940][ T6365] veth0_to_bridge: left promiscuous mode [ 100.366695][ T6363] netlink: 'syz.1.160': attribute type 9 has an invalid length. [ 100.769278][ T6399] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 100.817570][ T6399] team0: Device veth0_macvtap failed to register rx_handler [ 100.930995][ T6407] IPv6: NLM_F_REPLACE set, but no existing node found! [ 101.306365][ T6413] netlink: 'syz.1.174': attribute type 3 has an invalid length. [ 101.333777][ T6413] netlink: 'syz.1.174': attribute type 3 has an invalid length. [ 101.540665][ T6430] Bluetooth: ISO socket layer initialized [ 101.829852][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.070933][ T6455] netlink: 'syz.2.189': attribute type 15 has an invalid length. [ 103.009700][ T6519] __nla_validate_parse: 10 callbacks suppressed [ 103.009715][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 103.048662][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 103.062309][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 103.106702][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 103.586946][ T6539] syzkaller0: entered promiscuous mode [ 103.595631][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 103.610895][ T6539] syzkaller0: entered allmulticast mode [ 103.935522][ T6559] netlink: 52 bytes leftover after parsing attributes in process `syz.2.221'. [ 104.212613][ T6569] netlink: 'syz.4.225': attribute type 25 has an invalid length. [ 104.269411][ T6571] netlink: 348 bytes leftover after parsing attributes in process `syz.3.226'. [ 105.062278][ T6569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.438302][ T6628] netlink: 96 bytes leftover after parsing attributes in process `syz.1.234'. [ 105.517895][ T6628] 8021q: VLANs not supported on gre0 [ 105.538934][ T6631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.235'. [ 105.766673][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 106.045717][ T6652] netlink: 'syz.4.244': attribute type 64 has an invalid length. [ 106.134672][ T6654] unsupported nlmsg_type 40 [ 106.678812][ T6674] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 108.185913][ T6739] netlink: 'syz.3.270': attribute type 64 has an invalid length. [ 108.221852][ T6743] __nla_validate_parse: 9 callbacks suppressed [ 108.221868][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 108.251150][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 108.366857][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 108.464578][ T6756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.274'. [ 108.514950][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 108.822128][ T6766] netlink: 100 bytes leftover after parsing attributes in process `syz.3.277'. [ 108.873479][ T6766] syzkaller1: entered promiscuous mode [ 108.880506][ T6766] syzkaller1: entered allmulticast mode [ 109.072783][ T6773] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 109.293540][ T6773] bond1: entered promiscuous mode [ 109.311859][ T6789] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.320690][ T6773] bond1: entered allmulticast mode [ 109.330951][ T6773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.352201][ T6782] erspan1: entered allmulticast mode [ 109.368719][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 109.651950][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 109.686463][ T6799] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 110.000448][ T6799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.046815][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.055068][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.063019][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.070995][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.078938][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.086942][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.094906][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.102853][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.110847][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.118883][ T6811] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 110.280481][ T6826] netlink: 576 bytes leftover after parsing attributes in process `syz.3.288'. [ 111.027850][ T6852] tipc: Started in network mode [ 111.063908][ T6852] tipc: Node identity 1a6c45db4bc1, cluster identity 4711 [ 111.102863][ T6852] tipc: Enabled bearer , priority 10 [ 111.146799][ T6851] tipc: Resetting bearer [ 111.172528][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 111.304700][ T6851] tipc: Disabling bearer [ 112.182200][ T6896] netlink: 'syz.4.307': attribute type 5 has an invalid length. [ 113.254455][ C0] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 113.512915][ T6945] __nla_validate_parse: 2 callbacks suppressed [ 113.512933][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 113.583710][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.321'. [ 113.739980][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 114.050003][ T6957] netlink: 288 bytes leftover after parsing attributes in process `syz.3.323'. [ 114.550785][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.334'. [ 114.790169][ T6982] team0: Device gtp0 is of different type [ 114.816380][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 114.829862][ T7003] netlink: 'syz.3.337': attribute type 83 has an invalid length. [ 114.994268][ T7005] xt_hashlimit: size too large, truncated to 1048576 [ 115.054934][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.338'. [ 115.857691][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 115.901756][ T7044] netlink: 'syz.4.345': attribute type 10 has an invalid length. [ 115.921068][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.346'. [ 115.935901][ T7044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.345'. [ 116.059319][ T7044] geneve2: entered promiscuous mode [ 116.075155][ T7044] geneve2: entered allmulticast mode [ 116.843976][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d08800: rx timeout, send abort [ 117.345353][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d08c00: rx timeout, send abort [ 117.353736][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d08800: abort rx timeout. Force session deactivation [ 117.853684][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d08c00: abort rx timeout. Force session deactivation [ 118.953142][ T7136] block nbd0: Unsupported socket: should be TCP or UNIX. [ 118.957239][ T7149] __nla_validate_parse: 5 callbacks suppressed [ 118.957256][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 119.008321][ T7139] bond2: (slave vlan2): making interface the new active one [ 119.032001][ T7151] netlink: 9 bytes leftover after parsing attributes in process `syz.1.378'. [ 119.046519][ T7139] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 119.065622][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.375'. [ 119.116039][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802616c000: rx timeout, send abort [ 119.301223][ T7151] 0·: renamed from hsr0 (while UP) [ 119.320204][ T7151] 0·: entered allmulticast mode [ 119.330513][ T7151] hsr_slave_0: entered allmulticast mode [ 119.338995][ T7151] hsr_slave_1: entered allmulticast mode [ 119.346859][ T7151] net_ratelimit: 46 callbacks suppressed [ 119.346875][ T7151] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 120.444505][ T7206] geneve2: entered promiscuous mode [ 120.618022][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 44982 - 0 [ 120.671904][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 44982 - 0 [ 120.730523][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 44982 - 0 [ 120.807287][ T7220] netlink: 104 bytes leftover after parsing attributes in process `syz.2.390'. [ 120.859271][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 120.877510][ T7222] netlink: 76 bytes leftover after parsing attributes in process `syz.1.391'. [ 120.900877][ T7224] netlink: 56 bytes leftover after parsing attributes in process `syz.3.393'. [ 120.926865][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 44982 - 0 [ 120.961575][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 121.033629][ T7224] tipc: Enabled bearer , priority 10 [ 121.175445][ T7233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 121.179416][ T7234] openvswitch: netlink: IPv6 tunnel dst address is zero [ 121.237234][ T7238] netlink: 'syz.0.398': attribute type 9 has an invalid length. [ 121.278690][ T7238] netlink: 'syz.0.398': attribute type 4 has an invalid length. [ 121.657506][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 121.798653][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.877817][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.159102][ T5347] tipc: Node number set to 1370310107 [ 122.903822][ T7297] tipc: Started in network mode [ 122.925711][ T7297] tipc: Node identity 8, cluster identity 4711 [ 122.948055][ T7297] tipc: Node number set to 8 [ 132.846116][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854327][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.286269][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297444][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.276639][ T7372] __nla_validate_parse: 5 callbacks suppressed [ 196.276656][ T7372] netlink: 1 bytes leftover after parsing attributes in process `syz.3.429'. [ 196.682889][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 196.994078][ T7401] Bluetooth: MGMT ver 1.23 [ 197.055631][ T7401] Bluetooth: hci0: unsupported parameter 5135 [ 197.084248][ T7401] Bluetooth: hci0: unsupported parameter 8192 [ 197.113800][ T7401] Bluetooth: hci0: unsupported parameter 5135 [ 197.134231][ T7401] Bluetooth: hci0: unsupported parameter 8192 [ 197.598560][ T7431] netlink: 'syz.0.441': attribute type 3 has an invalid length. [ 197.830214][ T7437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.445'. [ 198.453434][ T7460] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 198.492968][ T7460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.516153][ T7460] bond1: (slave geneve2): making interface the new active one [ 198.526338][ T7460] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 198.947111][ T7471] syzkaller0: entered promiscuous mode [ 198.953446][ T7471] syzkaller0: entered allmulticast mode [ 199.075731][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.452'. [ 200.864518][ T7443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.114024][ T7478] netlink: 88 bytes leftover after parsing attributes in process `syz.3.457'. [ 201.134781][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.457'. [ 201.159273][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.457'. [ 201.221671][ T7484] syzkaller1: entered promiscuous mode [ 201.265938][ T7484] syzkaller1: entered allmulticast mode [ 201.522905][ T7499] tipc: New replicast peer: 255.255.255.255 [ 201.560411][ T7499] tipc: Enabled bearer , priority 10 [ 201.966637][ T7522] xt_hashlimit: size too large, truncated to 1048576 [ 202.516876][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.469'. [ 202.596647][ T7532] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 202.962767][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 203.078742][ T7561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.288271][ T7564] pim6reg: entered allmulticast mode [ 203.340040][ T7572] lo: entered promiscuous mode [ 203.359700][ T7572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.800680][ T7584] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 203.871880][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.032286][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 204.110427][ T7590] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 204.492796][ T7616] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 204.790136][ T7616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.864287][ T7622] netlink: 'syz.1.491': attribute type 20 has an invalid length. [ 204.890030][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 204.913351][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 204.969578][ T7625] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 205.023606][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 205.061936][ T7625] bond2 (unregistering): Released all slaves [ 205.236663][ T7622] netlink: 'syz.1.491': attribute type 20 has an invalid length. [ 205.277553][ T155] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.288785][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 205.314332][ T155] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.353058][ T155] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.409034][ T155] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.779926][ T7667] unsupported nla_type 65059 [ 205.800822][ T7666] gtp0: entered promiscuous mode [ 205.842328][ T7666] gtp0: entered allmulticast mode [ 205.854678][ T7673] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 205.976599][ T7677] netlink: 212 bytes leftover after parsing attributes in process `syz.4.505'. [ 206.530220][ T7695] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 206.552960][ T7698] sctp: [Deprecated]: syz.2.512 (pid 7698) Use of int in max_burst socket option. [ 206.552960][ T7698] Use struct sctp_assoc_value instead [ 206.578917][ T7695] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 206.613318][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 206.613462][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 206.619569][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 206.625830][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 206.631674][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 206.729098][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 207.029960][ T7698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.199835][ T7718] team0: Device gtp0 is of different type [ 207.297553][ T7713] netlink: 72 bytes leftover after parsing attributes in process `syz.2.512'. [ 207.633117][ T7736] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:21 [ 207.813662][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 207.845821][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 207.871883][ T7745] IPv6: sit1: Disabled Multicast RS [ 207.947957][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 207.957769][ T7755] netlink: 'syz.2.529': attribute type 2 has an invalid length. [ 208.223001][ T7763] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 208.404243][ T7767] netlink: Failed to add helper -22 [ 208.416881][ T7767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.443138][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.533'. [ 208.452627][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.532'. [ 208.487211][ T7763] bridge1: entered promiscuous mode [ 208.545872][ T7763] bond2: (slave bridge1): making interface the new active one [ 208.557536][ T7763] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 208.723390][ T7793] x_tables: duplicate underflow at hook 1 [ 209.220759][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.540'. [ 209.239932][ T7801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.540'. [ 209.430428][ T7805] Illegal XDP return value 4294967274 on prog (id 122) dev N/A, expect packet loss! [ 211.249020][ T7781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.280434][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 211.569230][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 211.634148][ T7812] netlink: 'syz.4.545': attribute type 11 has an invalid length. [ 211.636734][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 211.680375][ T7812] netlink: 'syz.4.545': attribute type 3 has an invalid length. [ 211.870397][ T7830] netlink: 'syz.1.551': attribute type 2 has an invalid length. [ 212.025210][ T7832] ip6tnl2: entered allmulticast mode [ 212.259437][ T7843] bridge1: entered promiscuous mode [ 212.283626][ T7843] bridge1: entered allmulticast mode [ 212.933930][ T7873] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 213.006685][ T7842] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.507660][ T7891] __nla_validate_parse: 5 callbacks suppressed [ 213.507677][ T7891] netlink: 44 bytes leftover after parsing attributes in process `syz.4.569'. [ 213.773979][ T7906] netlink: 140 bytes leftover after parsing attributes in process `syz.1.574'. [ 214.111000][ T7917] netlink: 'syz.1.579': attribute type 21 has an invalid length. [ 214.157640][ T7917] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.208253][ T7917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.215572][ T7917] IPv6: NLM_F_CREATE should be set when creating new route [ 214.223141][ T7917] IPv6: NLM_F_CREATE should be set when creating new route [ 214.230523][ T7917] IPv6: NLM_F_CREATE should be set when creating new route [ 214.351603][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 214.572903][ T7944] sctp: [Deprecated]: syz.3.587 (pid 7944) Use of int in max_burst socket option deprecated. [ 214.572903][ T7944] Use struct sctp_assoc_value instead [ 214.829321][ T7952] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 214.895970][ T7954] syzkaller0: entered promiscuous mode [ 214.910291][ T7954] syzkaller0: entered allmulticast mode [ 214.939497][ T7957] netlink: 60 bytes leftover after parsing attributes in process `syz.3.591'. [ 214.981132][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.589'. [ 215.057774][ T7957] netlink: 180 bytes leftover after parsing attributes in process `syz.3.591'. [ 215.143632][ T7974] netlink: 96 bytes leftover after parsing attributes in process `syz.0.594'. [ 215.340327][ T7978] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 215.388858][ T7974] vlan4: entered allmulticast mode [ 215.416810][ T7974] gretap0: entered allmulticast mode [ 215.646596][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 215.692953][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.601'. [ 215.903337][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 216.355387][ T8031] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 216.411912][ T8031] NCSI netlink: No device for ifindex 0 [ 216.448205][ T8028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.602104][ T8034] macvlan0: entered promiscuous mode [ 216.632387][ T8034] macvlan0: entered allmulticast mode [ 216.680009][ T8034] bond4: entered promiscuous mode [ 216.726296][ T8034] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 216.782247][ T8034] bond4: left promiscuous mode [ 217.099481][ T8056] netlink: 'syz.0.617': attribute type 7 has an invalid length. [ 217.249932][ T8063] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.323666][ T8063] macsec1: entered promiscuous mode [ 217.560955][ T8078] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 217.632022][ T8078] bond5 (unregistering): Released all slaves [ 217.740079][ T8077] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 217.752139][ T8077] bond5 (unregistering): Released all slaves [ 217.988943][ T8092] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 218.044454][ T8092] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 218.710300][ T8130] Cannot find add_set index 65532 as target [ 218.771314][ T8129] __nla_validate_parse: 11 callbacks suppressed [ 218.771331][ T8129] netlink: 84 bytes leftover after parsing attributes in process `syz.4.638'. [ 219.063578][ T8142] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 219.122983][ T8142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.252562][ T8146] netlink: 168 bytes leftover after parsing attributes in process `syz.2.644'. [ 219.318696][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.645'. [ 219.689724][ T8167] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 219.798556][ T8173] xt_ecn: cannot match TCP bits for non-tcp packets [ 220.144490][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 220.172174][ T8180] bridge: RTM_NEWNEIGH with invalid ether address [ 220.324003][ T8189] netlink: 68 bytes leftover after parsing attributes in process `syz.3.657'. [ 220.374563][ T8190] netlink: 68 bytes leftover after parsing attributes in process `syz.3.657'. [ 220.608664][ T8208] netlink: 348 bytes leftover after parsing attributes in process `syz.2.662'. [ 220.637321][ T8210] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 220.779361][ T8214] netlink: 44 bytes leftover after parsing attributes in process `syz.4.664'. [ 221.005721][ T8223] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 221.035562][ T8223] netlink: 228 bytes leftover after parsing attributes in process `syz.2.666'. [ 221.393888][ T8237] syzkaller0: entered promiscuous mode [ 221.401104][ T8237] syzkaller0: entered allmulticast mode [ 221.898678][ T8225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.263064][ T8278] netlink: 580 bytes leftover after parsing attributes in process `syz.3.680'. [ 222.498769][ T8281] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 223.108800][ T8318] openvswitch: netlink: IPv4 tunnel dst address is zero [ 223.174454][ T8318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.313071][ T8362] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 224.935283][ T8381] __nla_validate_parse: 3 callbacks suppressed [ 224.935299][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 225.063040][ T8381] netlink: 'syz.0.710': attribute type 2 has an invalid length. [ 225.078734][ T8387] Bluetooth: hci0: unsupported parameter 5134 [ 225.099238][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 225.133486][ T8387] Bluetooth: hci0: unsupported parameter 5134 [ 225.163498][ T8389] netlink: 44 bytes leftover after parsing attributes in process `syz.4.712'. [ 225.168015][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 225.194789][ T8387] Bluetooth: hci0: unsupported parameter 8192 [ 225.257394][ T8396] netlink: 27 bytes leftover after parsing attributes in process `syz.2.714'. [ 225.283201][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 225.324659][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 225.513785][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 225.567475][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 225.613752][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 225.672416][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 226.020635][ T8428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.520092][ T8480] sctp: [Deprecated]: syz.2.732 (pid 8480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.520092][ T8480] Use struct sctp_sack_info instead [ 228.702383][ T8413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.718586][ T8440] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 228.734671][ T8440] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 229.328329][ T8508] netlink: 'syz.1.738': attribute type 9 has an invalid length. [ 230.135476][ T8538] __nla_validate_parse: 2 callbacks suppressed [ 230.135493][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 230.188784][ T8538] openvswitch: netlink: Duplicate key (type 0). [ 230.226358][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 230.276504][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 230.396373][ T8550] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 230.475418][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 230.631980][ T8556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.658574][ T8550] bond2: entered promiscuous mode [ 230.674278][ T8550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.768933][ T8561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.463193][ T8524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.720926][ T8577] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 232.754666][ T8577] netlink: 152 bytes leftover after parsing attributes in process `syz.1.760'. [ 232.798565][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 232.939837][ T8577] .`: renamed from bond0 (while UP) [ 233.607863][ T8615] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 233.766530][ T8625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.774'. [ 233.990775][ T8626] ip6gre1: entered promiscuous mode [ 234.018613][ T8630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.774'. [ 234.646828][ T8648] syzkaller0: entered promiscuous mode [ 234.652889][ T8648] syzkaller0: entered allmulticast mode [ 234.889587][ T8672] xt_hashlimit: size too large, truncated to 1048576 [ 235.173086][ T8685] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.787'. [ 235.193764][ T8655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.582912][ T8705] syzkaller1: entered promiscuous mode [ 237.596711][ T8705] syzkaller1: entered allmulticast mode [ 237.838554][ T8718] openvswitch: netlink: Message has 8 unknown bytes. [ 238.046115][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 238.174167][ T8736] netlink: 256 bytes leftover after parsing attributes in process `syz.3.797'. [ 238.661920][ T8753] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 238.724867][ T8753] netlink: 232 bytes leftover after parsing attributes in process `syz.1.803'. [ 238.754751][ T8753] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 239.073931][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 239.616471][ T8801] x_tables: unsorted underflow at hook 2 [ 239.960231][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 240.030359][ T8816] netlink: 'syz.3.820': attribute type 2 has an invalid length. [ 240.087701][ T8816] netlink: 'syz.3.820': attribute type 8 has an invalid length. [ 240.127512][ T8816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.820'. [ 242.770975][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.152001][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 243.768675][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 244.213468][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 244.395504][ T8922] vlan2: entered allmulticast mode [ 244.430091][ T8922] bridge3: entered allmulticast mode [ 244.446856][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 244.452438][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 244.464936][ T8925] netlink: 'syz.4.843': attribute type 8 has an invalid length. [ 244.542681][ T8916] bridge3: port 1(erspan0) entered blocking state [ 244.559576][ T8916] bridge3: port 1(erspan0) entered disabled state [ 244.580358][ T8916] erspan0: entered allmulticast mode [ 244.589324][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.848'. [ 244.604442][ T8916] erspan0: entered promiscuous mode [ 244.627399][ T8916] bridge3: port 1(erspan0) entered blocking state [ 244.634045][ T8916] bridge3: port 1(erspan0) entered forwarding state [ 245.164128][ T8968] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 245.219125][ T8968] netlink: 224 bytes leftover after parsing attributes in process `syz.0.856'. [ 245.271690][ T8963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.839777][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.969132][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.062000][ T8999] vxcan0: tx address claim with different name [ 246.084892][ T8999] x_tables: duplicate entry at hook 4 [ 246.324979][ T9006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'. [ 246.373203][ T9006] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 246.408727][ T9006] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 246.575265][ T9016] netlink: 52 bytes leftover after parsing attributes in process `syz.4.869'. [ 246.624346][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 247.020860][ T9037] Bluetooth: ISO socket layer initialized [ 247.335538][ T9049] lo: entered allmulticast mode [ 247.389538][ T9046] lo: left allmulticast mode [ 248.065593][ T9087] IPv6: sit2: Disabled Multicast RS [ 248.404350][ T9106] 8021q: adding VLAN 0 to HW filter on device .` [ 248.416269][ T9110] __nla_validate_parse: 2 callbacks suppressed [ 248.416288][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 248.598295][ T9106] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 248.790251][ T9111] 0·: left allmulticast mode [ 248.796206][ T9111] hsr_slave_0: left allmulticast mode [ 248.802009][ T9111] hsr_slave_1: left allmulticast mode [ 248.874384][ T9111] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 248.968971][ T9127] syzkaller1: entered promiscuous mode [ 248.984991][ T9127] syzkaller1: entered allmulticast mode [ 249.407394][ T30] audit: type=1107 audit(1787231380.107:2): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 249.594028][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 249.833257][ T9155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.907'. [ 249.921413][ T9171] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 250.069513][ T9171] netlink: 'syz.3.907': attribute type 3 has an invalid length. [ 250.134731][ T9171] netlink: 172 bytes leftover after parsing attributes in process `syz.3.907'. [ 250.205629][ T9171] NCSI netlink: No device for ifindex 813332851 [ 250.528743][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.451758][ T9228] netlink: 'syz.1.924': attribute type 4 has an invalid length. [ 251.657938][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 251.998532][ T9259] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.148138][ T9270] ip6t_srh: unknown srh invflags 4000 [ 253.085299][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 253.371835][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.948'. [ 253.766948][ T9343] netlink: 'syz.0.953': attribute type 13 has an invalid length. [ 253.833406][ T9343] gretap0: refused to change device tx_queue_len [ 253.870497][ T9343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 254.272076][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 254.388093][ T9372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.957'. [ 254.436470][ T9377] raw_sendmsg: syz.0.961 forgot to set AF_INET. Fix it! [ 254.464173][ T9367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.522199][ T9367] bond2: entered promiscuous mode [ 254.557120][ T9367] bond2: entered allmulticast mode [ 254.579905][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 254.666812][ T9382] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 254.713015][ T5276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.807125][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 254.877963][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 255.022283][ T9384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 255.059233][ T9384] nbd: device at index 64 is going down [ 255.337381][ T9398] bridge2: entered promiscuous mode [ 255.398619][ T9398] bond0: (slave bridge2): making interface the new active one [ 255.401281][ T7356] udevd[7356]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 255.424582][ T9398] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 255.483168][ T9384] netlink: 'syz.3.965': attribute type 3 has an invalid length. [ 255.729053][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.759865][ T9425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.973'. [ 256.001250][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 256.031512][ T9435] nbd: must specify at least one socket [ 256.071223][ T9435] netlink: 'syz.4.976': attribute type 2 has an invalid length. [ 256.151359][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'. [ 256.152931][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 256.766043][ T9461] netlink: 'syz.0.984': attribute type 33 has an invalid length. [ 257.474042][ T9484] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 257.520280][ T9484] bond3 (unregistering): Released all slaves [ 258.087867][ T9523] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 258.122819][ T9510] syzkaller0: entered promiscuous mode [ 258.128552][ T9510] syzkaller0: entered allmulticast mode [ 258.147615][ T9523] netlink: 'syz.1.999': attribute type 21 has an invalid length. [ 258.165987][ T9527] macvtap1: entered promiscuous mode [ 258.171612][ T9527] dummy0: entered promiscuous mode [ 258.224365][ T9530] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 258.323467][ T9526] macvtap1: entered promiscuous mode [ 258.372283][ T9] dummy0: left promiscuous mode [ 261.228129][ T9534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.243827][ T9535] veth0: entered promiscuous mode [ 261.254193][ T9545] bridge_slave_1: left allmulticast mode [ 261.262074][ T9545] bridge_slave_1: left promiscuous mode [ 261.291129][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.310619][ T9545] bridge_slave_0: left allmulticast mode [ 261.317330][ T9545] bridge_slave_0: left promiscuous mode [ 261.324528][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.428353][ T9562] __nla_validate_parse: 8 callbacks suppressed [ 261.428371][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1008'. [ 261.496935][ T9535] veth0: left promiscuous mode [ 261.753467][ T9570] bridge1: entered allmulticast mode [ 261.865108][ T9579] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 262.028336][ T9587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.092576][ T9594] netlink: 'syz.1.1017': attribute type 63 has an invalid length. [ 262.596669][ T9614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.636867][ T9616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.697164][ T9618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1026'. [ 262.741175][ T9620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1027'. [ 262.774361][ T9618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1026'. [ 262.790373][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.839163][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.207411][ T9647] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 263.486649][ T9656] IPv6: Can't replace route, no match found [ 263.753888][ T9664] TCP: TCP_TX_DELAY enabled [ 263.767478][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 263.834057][ T9669] xt_hashlimit: size too large, truncated to 1048576 [ 263.864178][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1044'. [ 264.458632][ T9693] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 265.023200][ T9717] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 265.242553][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 265.804738][ T9761] xt_hashlimit: size too large, truncated to 1048576 [ 265.883569][ T9755] bond4: entered promiscuous mode [ 265.891357][ T9755] bond4: entered allmulticast mode [ 265.897571][ T9755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.585093][ T9786] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1075'. [ 267.144881][ T9803] netlink: Unknown conntrack attr (type=16134, max=9) [ 267.163815][ T9803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.211489][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 267.337236][ T9810] xt_TCPMSS: Only works on TCP SYN packets [ 267.392337][ T9810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1081'. [ 267.427460][ T9810] sctp: [Deprecated]: syz.0.1081 (pid 9810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.427460][ T9810] Use struct sctp_sack_info instead [ 268.056671][ T9827] macsec1: entered promiscuous mode [ 268.171153][ T9830] syzkaller0: entered promiscuous mode [ 268.194295][ T9830] syzkaller0: entered allmulticast mode [ 268.704061][ T9822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.753137][ T9846] netlink: 'syz.1.1089': attribute type 3 has an invalid length. [ 269.176126][ T9859] netlink: 'syz.0.1093': attribute type 21 has an invalid length. [ 269.251426][ T9861] pimreg3: entered allmulticast mode [ 269.298677][ T9864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1096'. [ 269.331255][ T9865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1095'. [ 269.425829][ T9868] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1097'. [ 270.046236][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 270.253344][ T9905] sctp: [Deprecated]: syz.1.1105 (pid 9905) Use of int in max_burst socket option. [ 270.253344][ T9905] Use struct sctp_assoc_value instead [ 270.441159][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 270.476814][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 270.487688][ T9911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1107'. [ 271.280737][ T9940] nbd: must specify at least one socket [ 271.599152][ T9946] __nla_validate_parse: 3 callbacks suppressed [ 271.599191][ T9946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1116'. [ 271.670086][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 271.920333][ T9958] IPVS: set_ctl: invalid protocol: 59 172.20.20.15:20004 [ 272.250164][ T9971] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1123'. [ 272.312439][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 272.349007][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 272.704979][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 272.830600][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 273.105325][ T9997] vlan2: entered promiscuous mode [ 273.131826][ T9997] 0·: entered promiscuous mode [ 273.150306][ T9997] vlan2: entered allmulticast mode [ 273.164709][ T9997] 0·: entered allmulticast mode [ 273.184411][ T9997] hsr_slave_0: entered allmulticast mode [ 273.215556][ T9997] hsr_slave_1: entered allmulticast mode [ 274.027035][T10024] bond5: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 274.042848][T10024] bond5 (unregistering): Released all slaves [ 274.502872][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 274.517544][T10053] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1149'. [ 274.547544][T10053] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1149'. [ 275.061754][T10075] netlink: 'syz.0.1157': attribute type 22 has an invalid length. [ 275.124956][T10083] veth0: entered promiscuous mode [ 275.199423][T10075] netlink: 'syz.0.1157': attribute type 22 has an invalid length. [ 275.218041][ T3308] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.282611][ T3308] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.316742][T10087] veth0: left promiscuous mode [ 275.339583][ T3308] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.402901][ T3308] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.453916][ T30] audit: type=1804 audit(1787231406.157:3): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1162" name="/newroot/225/cgroup.controllers" dev="tmpfs" ino=1166 res=1 errno=0 [ 275.540392][ T30] audit: type=1800 audit(1787231406.187:4): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1162" name="cgroup.controllers" dev="tmpfs" ino=1166 res=0 errno=0 [ 275.926716][T10113] ip_tables: iptables: counters copy to user failed while replacing table [ 276.312081][ T9] IPVS: starting estimator thread 0... [ 276.327295][T10105] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 276.455188][T10128] IPVS: using max 32 ests per chain, 76800 per kthread [ 277.493932][T10157] netlink: 'syz.1.1182': attribute type 17 has an invalid length. [ 277.529574][T10160] x_tables: duplicate entry at hook 4 [ 277.550969][T10157] tunl0: left promiscuous mode [ 277.826321][T10171] tipc: Enabled bearer , priority 10 [ 277.847494][T10169] __nla_validate_parse: 8 callbacks suppressed [ 277.847511][T10169] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1187'. [ 278.437476][T10190] netlink: 'syz.3.1192': attribute type 2 has an invalid length. [ 278.467633][T10190] netlink: 'syz.3.1192': attribute type 2 has an invalid length. [ 278.537368][T10190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1192'. [ 278.830576][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 279.068305][T10211] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 279.078359][T10214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 279.099204][T10214] netlink: 'syz.3.1198': attribute type 7 has an invalid length. [ 279.129409][T10214] netlink: 'syz.3.1198': attribute type 8 has an invalid length. [ 279.163027][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 279.566437][T10224] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1201'. [ 279.663900][T10223] bond0: option ad_select: unable to set because the bond device is up [ 279.687387][T10223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1201'. [ 279.952389][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 279.985433][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 280.027732][T10235] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1205'. [ 280.038001][T10233] netlink: 'syz.1.1204': attribute type 33 has an invalid length. [ 280.091273][T10235] x_tables: duplicate underflow at hook 2 [ 280.119851][T10233] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 280.191664][T10233] bond3 (unregistering): Released all slaves [ 280.955484][T10276] netlink: 'syz.2.1214': attribute type 83 has an invalid length. [ 281.121953][T10276] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 282.190187][T10326] netlink: 'syz.1.1229': attribute type 4 has an invalid length. [ 282.484837][T10350] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 282.504322][T10349] batadv0: Caught tx_queue_len zero misconfig [ 283.090761][T10363] __nla_validate_parse: 7 callbacks suppressed [ 283.090779][T10363] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1239'. [ 283.719423][T10393] xt_TCPMSS: Only works on TCP SYN packets [ 283.802030][T10393] erspan0: entered promiscuous mode [ 284.438670][T10388] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.485108][T10388] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 285.027982][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 285.069742][T10451] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 285.120810][T10454] netlink: 'syz.1.1260': attribute type 19 has an invalid length. [ 285.202547][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 285.223369][T10455] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 285.281863][T10455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.358079][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1262'. [ 285.507800][T10472] openvswitch: netlink: Message has 8 unknown bytes. [ 285.945338][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 286.256288][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1274'. [ 287.019787][T10533] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 289.584118][T10519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.597733][T10537] smc: net device lo erased user defined pnetid SYZ0 [ 289.648584][T10537] smc: smcd device lo erased user defined pnetid SYZ0 [ 290.208833][T10573] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1295'. [ 290.281948][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 290.290107][T10573] netlink: 'syz.2.1295': attribute type 10 has an invalid length. [ 290.306983][T10577] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 290.343177][T10577] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 290.367871][T10573] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 290.389652][T10586] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 290.666548][T10605] netlink: 'syz.4.1304': attribute type 49 has an invalid length. [ 290.983085][T10616] bridge2: entered promiscuous mode [ 291.004958][T10616] bridge2: entered allmulticast mode [ 291.052305][T10624] netlink: 'syz.1.1311': attribute type 1 has an invalid length. [ 291.065687][T10627] netlink: 'syz.0.1309': attribute type 4 has an invalid length. [ 291.078012][T10616] team0: Port device bridge2 added [ 291.102146][T10620] bridge0: port 3(team0) entered blocking state [ 291.164907][T10620] bridge0: port 3(team0) entered disabled state [ 291.198117][T10620] team0: entered allmulticast mode [ 291.221247][T10620] team_slave_0: entered allmulticast mode [ 291.244175][T10620] team_slave_1: entered allmulticast mode [ 291.264321][T10620] syz_tun: entered allmulticast mode [ 291.305901][T10638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.306329][T10620] team0: entered promiscuous mode [ 291.343995][T10620] team_slave_0: entered promiscuous mode [ 291.357247][T10620] team_slave_1: entered promiscuous mode [ 291.367089][T10620] syz_tun: entered promiscuous mode [ 291.392318][T10620] bridge0: port 3(team0) entered blocking state [ 291.400188][T10620] bridge0: port 3(team0) entered forwarding state [ 291.508731][T10617] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1307'. [ 291.548944][T10617] tipc: Invalid UDP bearer configuration [ 291.549001][T10617] tipc: Enabling of bearer rejected, failed to enable media [ 291.607574][T10631] bond3: (slave gretap1): making interface the new active one [ 291.621745][T10631] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 291.798430][T10649] netlink: 'syz.3.1316': attribute type 8 has an invalid length. [ 291.927848][T10651] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1317'. [ 292.075164][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1322'. [ 292.157608][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1322'. [ 292.206849][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1324'. [ 292.582388][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 292.610247][T10690] macvlan0: entered promiscuous mode [ 292.638047][T10691] netlink: 'syz.1.1328': attribute type 1 has an invalid length. [ 292.668758][T10691] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 292.690848][T10696] sctp: [Deprecated]: syz.0.1331 (pid 10696) Use of int in max_burst socket option deprecated. [ 292.690848][T10696] Use struct sctp_assoc_value instead [ 293.130978][T10715] ip6tnl0: Caught tx_queue_len zero misconfig [ 293.379699][T10725] openvswitch: netlink: IP tunnel TTL not specified. [ 293.409245][T10725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.979216][T10757] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 294.028375][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 294.156155][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 294.216290][T10765] team0: left allmulticast mode [ 294.257928][T10765] team_slave_0: left allmulticast mode [ 294.283535][T10765] team_slave_1: left allmulticast mode [ 294.313571][T10765] syz_tun: left allmulticast mode [ 294.342365][T10765] team0: left promiscuous mode [ 294.356953][T10765] team_slave_0: left promiscuous mode [ 294.368350][T10765] team_slave_1: left promiscuous mode [ 294.400043][T10765] syz_tun: left promiscuous mode [ 294.419671][T10765] bridge0: port 3(team0) entered disabled state [ 294.474718][T10765] bridge_slave_1: left allmulticast mode [ 294.490949][T10765] bridge_slave_1: left promiscuous mode [ 294.522699][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.547122][T10790] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20001 [ 294.575710][T10765] bridge_slave_0: left allmulticast mode [ 294.589677][T10765] bridge_slave_0: left promiscuous mode [ 294.601727][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.661996][ T50] block nbd1: Receive control failed (result -32) [ 294.662466][ T5621] block nbd1: Receive control failed (result -32) [ 295.303342][T10812] netlink: 'syz.4.1367': attribute type 2 has an invalid length. [ 295.395916][T10812] __nla_validate_parse: 1 callbacks suppressed [ 295.395931][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 295.475883][T10820] netlink: 'syz.1.1370': attribute type 4 has an invalid length. [ 295.504384][T10820] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1370'. [ 295.719009][T10831] netlink: 'syz.0.1374': attribute type 11 has an invalid length. [ 295.766578][T10831] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1374'. [ 296.398864][T10854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1382'. [ 296.895126][T10870] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 297.050054][T10884] netlink: 'syz.3.1390': attribute type 3 has an invalid length. [ 297.050630][T10876] team0: Device gtp0 is of different type [ 297.215159][T10889] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1391'. [ 298.003175][T10910] bond5: entered promiscuous mode [ 298.024951][T10910] bond5: entered allmulticast mode [ 298.042604][T10910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.072687][T10918] veth1_to_bond: entered allmulticast mode [ 298.130902][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 298.137316][T10918] veth1_to_bond: left allmulticast mode [ 298.333723][T10936] netlink: 'syz.1.1406': attribute type 12 has an invalid length. [ 298.499609][T10941] ip6erspan0: entered promiscuous mode [ 298.515000][T10941] ip6erspan0: entered allmulticast mode [ 298.541668][T10941] bridge0: port 3(ip6erspan0) entered blocking state [ 298.558479][T10941] bridge0: port 3(ip6erspan0) entered disabled state [ 298.580145][T10941] bridge0: port 3(ip6erspan0) entered blocking state [ 298.588593][T10941] bridge0: port 3(ip6erspan0) entered forwarding state [ 298.856038][T10958] netlink: 'syz.0.1412': attribute type 2 has an invalid length. [ 298.923313][T10958] netlink: 'syz.0.1412': attribute type 1 has an invalid length. [ 299.463868][T10987] netlink: 'syz.1.1420': attribute type 16 has an invalid length. [ 299.509826][T10987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1420'. [ 299.601343][T10996] Cannot find add_set index 2 as target [ 299.736861][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'. [ 299.751525][T11002] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1425'. [ 299.964175][T11013] netlink: 'syz.2.1427': attribute type 5 has an invalid length. [ 300.218237][T11027] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1431'. [ 300.878777][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 300.985011][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 301.013485][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'. [ 301.329351][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 303.152125][T11026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.399937][T11084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1443'. [ 303.483873][T11091] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1447'. [ 303.495182][T11092] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1446'. [ 303.642277][T11099] netlink: 'syz.0.1450': attribute type 23 has an invalid length. [ 303.686237][T11099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1450'. [ 304.014537][T11122] gre0: Caught tx_queue_len zero misconfig [ 304.202807][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1462'. [ 304.355895][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 304.647918][T11153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.225454][T11176] netlink: 'syz.4.1473': attribute type 30 has an invalid length. [ 305.569341][T11186] macvlan0: entered promiscuous mode [ 305.667168][T11176] wg1 speed is unknown, defaulting to 1000 [ 305.855208][T11176] wg1 speed is unknown, defaulting to 1000 [ 306.001213][T11176] wg1 speed is unknown, defaulting to 1000 [ 307.036728][ T5711] wg1 speed is unknown, defaulting to 1000 [ 307.058016][T11176] infiniband syz2: set active [ 307.079737][T11176] infiniband syz2: added wg1 [ 307.162900][T11176] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 307.204173][T11176] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 307.222663][T11176] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 307.424086][T11234] __nla_validate_parse: 2 callbacks suppressed [ 307.424103][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 307.461883][T11176] RDS/IB: syz2: added [ 307.476022][T11176] smc: adding ib device syz2 with port count 1 [ 307.490356][T11234] netlink: 'syz.2.1493': attribute type 4 has an invalid length. [ 307.510189][T11176] smc: ib device syz2 port 1 has no pnetid [ 307.529118][ T5711] wg1 speed is unknown, defaulting to 1000 [ 307.539225][T11234] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1493'. [ 307.624043][T11176] wg1 speed is unknown, defaulting to 1000 [ 307.666707][T11234] .`: renamed from bond0 (while UP) [ 307.845133][T11242] gre1: entered promiscuous mode [ 307.884303][T11242] gre1: entered allmulticast mode [ 308.003793][T11250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1496'. [ 308.669906][T11264] netlink: 'syz.2.1500': attribute type 32 has an invalid length. [ 308.670363][T11260] bridge0: port 3(ip6erspan0) entered disabled state [ 308.684789][T11260] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.692067][T11268] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.693032][T11260] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.707619][T11264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1500'. [ 308.737800][T11268] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.748807][T11263] netlink: 'syz.2.1500': attribute type 32 has an invalid length. [ 308.778986][T11263] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1500'. [ 308.872872][T11176] wg1 speed is unknown, defaulting to 1000 [ 309.027010][T11278] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 309.260230][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'. [ 309.277248][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'. [ 310.094372][T11176] wg1 speed is unknown, defaulting to 1000 [ 310.269940][T11325] sctp: [Deprecated]: syz.2.1516 (pid 11325) Use of int in maxseg socket option. [ 310.269940][T11325] Use struct sctp_assoc_value instead [ 310.496346][T11332] netlink: 'syz.0.1518': attribute type 11 has an invalid length. [ 310.547257][T11332] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.1518'. [ 310.660601][ T30] audit: type=1800 audit(1787231441.367:5): pid=11341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1520" name="memory.events" dev="tmpfs" ino=1659 res=0 errno=0 [ 311.292223][T11365] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 311.335932][T11176] wg1 speed is unknown, defaulting to 1000 [ 311.609212][T11373] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 311.650574][T11373] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1529'. [ 311.672097][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 312.643903][T11176] wg1 speed is unknown, defaulting to 1000 [ 312.715247][T11401] bond3: (slave vlan5): making interface the new active one [ 312.739032][T11401] bond3: (slave vlan5): Enslaving as an active interface with an up link [ 312.889092][T11375] wg0 speed is unknown, defaulting to 1000 [ 312.908842][T11375] wg0 speed is unknown, defaulting to 1000 [ 312.927882][T11375] wg0 speed is unknown, defaulting to 1000 [ 312.937176][T11375] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 312.954793][T11375] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 312.993001][T11375] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 313.011877][T11375] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 313.036125][T11375] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 313.088100][T11375] wg0 speed is unknown, defaulting to 1000 [ 313.098474][T11375] wg0 speed is unknown, defaulting to 1000 [ 313.107974][T11375] wg0 speed is unknown, defaulting to 1000 [ 313.116979][T11375] wg0 speed is unknown, defaulting to 1000 [ 313.124794][T11375] wg0 speed is unknown, defaulting to 1000 [ 317.168621][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.780333][T11417] Cannot find add_set index 46338 as target [ 376.035459][T11433] __nla_validate_parse: 40 callbacks suppressed [ 376.035479][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 376.120442][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 376.423298][T11446] netlink: 'syz.2.1545': attribute type 21 has an invalid length. [ 376.450748][T11446] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1545'. [ 376.483197][T11446] netlink: 'syz.2.1545': attribute type 5 has an invalid length. [ 376.517474][T11446] netlink: 'syz.2.1545': attribute type 6 has an invalid length. [ 376.624733][T11446] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1545'. [ 376.972317][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 377.031080][T11476] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1553'. [ 377.041622][T11473] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 377.192274][T11482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1554'. [ 377.226751][T11482] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 377.601893][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 378.262969][T11529] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1567'. [ 378.585971][T11543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1570'. [ 378.610117][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.969003][T11557] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 379.086714][T11562] ip6erspan1: entered allmulticast mode [ 379.347616][T11568] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 379.451201][T11568] syzkaller0: entered promiscuous mode [ 379.452994][T11574] Bluetooth: MGMT ver 1.23 [ 379.469998][T11568] syzkaller0: entered allmulticast mode [ 380.024996][T11589] tipc: Enabling of bearer rejected, failed to enable media [ 380.080749][T11597] netlink: 'syz.2.1589': attribute type 1 has an invalid length. [ 380.208092][T11601] netlink: 'syz.4.1590': attribute type 13 has an invalid length. [ 380.258103][T11601] netlink: 'syz.4.1590': attribute type 58 has an invalid length. [ 380.877652][T11627] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 380.895981][T11628] netlink: 'syz.1.1600': attribute type 14 has an invalid length. [ 380.916418][T11628] netlink: 'syz.1.1600': attribute type 13 has an invalid length. [ 381.109030][T11627] bond0: option arp_missed_max: invalid value (0) [ 381.122362][T11627] bond0: option arp_missed_max: allowed values 1 - 255 [ 381.155080][T11627] bond0 (unregistering): Released all slaves [ 381.164010][T11645] openvswitch: netlink: Unknown key attributes 1 [ 381.394824][T11628] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 381.446830][T11628] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 381.475346][T11628] gretap2: entered promiscuous mode [ 381.490145][T11628] gretap2: entered allmulticast mode [ 382.515319][T11683] __nla_validate_parse: 13 callbacks suppressed [ 382.515336][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 382.563118][T11683] validate_nla: 1 callbacks suppressed [ 382.563136][T11683] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 382.729544][T11683] bond5: entered promiscuous mode [ 382.767338][T11683] bond5: entered allmulticast mode [ 382.786669][T11683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.902587][T11688] erspan1: entered allmulticast mode [ 382.964789][T11688] bond5: (slave erspan1): making interface the new active one [ 382.990318][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1618'. [ 383.004746][T11688] erspan1: entered promiscuous mode [ 383.026160][T11688] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 383.532941][T11717] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 383.902833][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 383.948565][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1632'. [ 384.083111][T11755] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1634'. [ 384.606002][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1641'. [ 385.052715][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 385.106571][T11818] x_tables: unsorted underflow at hook 1 [ 385.274437][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1652'. [ 385.391971][T11831] netlink: 'syz.1.1653': attribute type 16 has an invalid length. [ 385.407115][T11831] netlink: 'syz.1.1653': attribute type 17 has an invalid length. [ 385.432881][T11831] 8021q: adding VLAN 0 to HW filter on device .` [ 385.453593][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 385.526969][T11831] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 385.536051][T11831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.564236][T11831] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 386.523999][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 386.569090][T11871] bridge: RTM_NEWNEIGH with invalid ether address [ 386.679935][T11873] geneve3: entered promiscuous mode [ 386.827195][ T7177] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 60538 - 0 [ 386.879648][ T7177] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 60538 - 0 [ 386.951555][ T7177] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 60538 - 0 [ 387.072902][ T7177] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 60538 - 0 [ 387.261228][T11887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.115985][T11919] tunl0: Caught tx_queue_len zero misconfig [ 388.189793][T11918] __nla_validate_parse: 1 callbacks suppressed [ 388.189813][T11918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1676'. [ 388.505864][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 388.517272][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 388.557265][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 388.566674][T11794] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.579053][T11794] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.596628][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 388.597607][T11794] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.938804][T11928] netlink: 'syz.2.1678': attribute type 142 has an invalid length. [ 388.961653][T11931] netlink: 'syz.4.1679': attribute type 4 has an invalid length. [ 389.081228][ T9] IPVS: starting estimator thread 0... [ 389.199836][T11934] IPVS: using max 34 ests per chain, 81600 per kthread [ 389.484286][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 389.856601][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 389.858107][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 389.901424][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1685'. [ 389.923065][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 390.034394][T11950] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 390.091925][T11950] team0: Device ipvlan2 is already an upper device of the team interface [ 390.286467][T11963] macvlan0: left promiscuous mode [ 390.328789][T11963] netlink: 'syz.3.1688': attribute type 2 has an invalid length. [ 391.044560][T11988] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 391.063695][T11988] syzkaller1: group set to 0 [ 391.601014][T12015] sock: sock_timestamping_bind_phc: sock not bind to device [ 392.486323][ T50] block nbd2: Receive control failed (result -32) [ 392.489404][ T5621] block nbd2: Receive control failed (result -32) [ 392.590191][T12021] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 393.022340][T12045] erspan0: entered promiscuous mode [ 393.296522][T12058] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 393.429168][T12064] team0: Device veth1_macvtap failed to register rx_handler [ 393.585952][T12071] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 394.130728][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.277541][T12097] xt_CT: No such helper "pptp" [ 394.833929][T12130] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 394.931296][T12125] __nla_validate_parse: 9 callbacks suppressed [ 394.931316][T12125] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1737'. [ 394.936190][ T5711] wg1 speed is unknown, defaulting to 1000 [ 394.963458][T12143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1741'. [ 394.998916][T12125] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1737'. [ 395.018618][T12143] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 395.039535][T12125] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1737'. [ 395.200562][T12149] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 395.291930][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 395.335381][T12158] openvswitch: netlink: Message has 5 unknown bytes. [ 395.906125][T12174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1751'. [ 396.190252][T12178] syzkaller0: entered promiscuous mode [ 396.222616][T12178] syzkaller0: entered allmulticast mode [ 396.762732][T12219] netlink: 'syz.0.1761': attribute type 12 has an invalid length. [ 399.643301][T12226] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1764'. [ 399.718663][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 399.994482][T12242] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.1768'. [ 400.041942][T12228] netlink: Failed to add @ helper -22 [ 400.048340][T12228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.058428][T12244] netlink: 'syz.4.1769': attribute type 33 has an invalid length. [ 400.395112][T12252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.396156][T12260] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 400.406336][T12267] syzkaller0: entered promiscuous mode [ 400.471190][T12267] syzkaller0: entered allmulticast mode [ 400.841673][T12283] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1779'. [ 400.967907][T12287] xt_hashlimit: size too large, truncated to 1048576 [ 401.203465][T12299] netlink: 'syz.3.1784': attribute type 7 has an invalid length. [ 401.523431][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 401.831315][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1792'. [ 401.870228][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1792'. [ 402.098413][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 402.125925][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 402.145641][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 402.171450][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 402.182037][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 403.242268][T12386] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 404.329265][T12433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.569787][T12444] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 405.541212][T12452] bridge3: entered promiscuous mode [ 405.580623][T12452] bond0: (slave bridge3): making interface the new active one [ 405.618328][T12452] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 406.039454][T12472] __nla_validate_parse: 39 callbacks suppressed [ 406.039471][T12472] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1837'. [ 406.529045][T12495] ip_tables: iptables: counters copy to user failed while replacing table [ 406.555968][T12492] nbd: couldn't find a device at index 0 [ 406.687920][T12502] netlink: 2120 bytes leftover after parsing attributes in process `syz.3.1847'. [ 406.693502][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 406.709637][T12503] geneve3: entered promiscuous mode [ 406.715200][T12503] geneve3: entered allmulticast mode [ 406.726788][ T7177] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 406.751064][ T7177] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 406.786815][ T7177] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 406.923685][T12513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1849'. [ 406.946010][T12512] netlink: 'syz.2.1850': attribute type 1 has an invalid length. [ 406.993029][T12512] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1850'. [ 407.036659][T12518] sctp: [Deprecated]: syz.4.1852 (pid 12518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.036659][T12518] Use struct sctp_sack_info instead [ 407.059221][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 407.140159][T12518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1852'. [ 407.549045][T12531] syz_tun: entered allmulticast mode [ 407.784337][T12531] dvmrp8: entered allmulticast mode [ 407.839113][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 408.239831][T12526] syz_tun: left allmulticast mode [ 408.307352][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1862'. [ 408.317583][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1862'. [ 408.750397][T12564] netlink: 'syz.0.1866': attribute type 21 has an invalid length. [ 409.122561][T12592] syzkaller0: entered promiscuous mode [ 409.161179][T12592] syzkaller0: entered allmulticast mode [ 409.244151][T12600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.588553][T12624] bridge_slave_1: Caught tx_queue_len zero misconfig [ 409.596984][T12618] netlink: 'syz.4.1879': attribute type 5 has an invalid length. [ 409.669520][T12618] geneve4: entered promiscuous mode [ 409.704949][T12618] geneve4: entered allmulticast mode [ 409.854840][T11796] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 409.907559][T11796] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 409.967761][T11796] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 410.037055][ T146] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 410.046336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.046620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.048129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.771412][T12677] openvswitch: netlink: Message has 4 unknown bytes. [ 410.782121][T12677] mac80211_hwsim hwsim8 pim6reg0: entered allmulticast mode [ 411.056821][T12680] __nla_validate_parse: 8 callbacks suppressed [ 411.056839][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1898'. [ 411.134099][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1898'. [ 411.241487][T12693] xt_cgroup: xt_cgroup: no path or classid specified [ 411.315684][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 411.392171][T12699] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 411.541404][T12699] 8021q: adding VLAN 0 to HW filter on device bond6 [ 411.623702][T12708] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1908'. [ 411.787730][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 411.811542][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 411.846071][T12716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1913'. [ 412.074118][T12734] bridge4: entered promiscuous mode [ 412.104915][T12734] bridge4: entered allmulticast mode [ 412.172192][T12738] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1917'. [ 412.452508][T12749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.605436][T12715] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 412.627444][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 412.852427][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1922'. [ 413.252727][T12761] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 413.533540][T12776] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 413.861947][T12788] sctp: [Deprecated]: syz.4.1933 (pid 12788) Use of int in max_burst socket option deprecated. [ 413.861947][T12788] Use struct sctp_assoc_value instead [ 414.005445][T12803] netlink: Setting conntrack mark requires 'commit' flag. [ 414.048609][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.302137][T12818] xt_hashlimit: size too large, truncated to 1048576 [ 414.449536][T12824] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 414.552787][T12825] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 414.911045][T12839] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 415.161030][T12851] bridge_slave_0: entered promiscuous mode [ 415.198324][T12853] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 415.575829][T12859] tipc: Enabled bearer , priority 0 [ 415.616296][T12859] syzkaller0: entered promiscuous mode [ 415.636482][T12859] syzkaller0: entered allmulticast mode [ 415.674014][T12859] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 415.811267][T12872] syz_tun: entered allmulticast mode [ 415.831351][T12859] tipc: Resetting bearer [ 415.851041][T12859] netlink: 'syz.1.1954': attribute type 21 has an invalid length. [ 415.871107][T12872] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 415.886908][T12859] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 415.911066][T12872] syz_tun: entered promiscuous mode [ 415.987471][T12872] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 416.108234][T12859] bond5: option min_links: invalid value (18446744073709551614) [ 416.120170][T12859] bond5: option min_links: allowed values 0 - 2147483647 [ 416.130792][T12859] bond5 (unregistering): Released all slaves [ 416.288938][T12858] tipc: Resetting bearer [ 416.344363][T12858] tipc: Disabling bearer [ 416.351817][T12890] __nla_validate_parse: 1 callbacks suppressed [ 416.351832][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'. [ 416.370910][T12890] netlink: 'syz.2.1966': attribute type 5 has an invalid length. [ 416.399390][T12890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1966'. [ 416.537713][T12896] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 416.571049][T12896] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1968'. [ 416.603554][T12896] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 416.831659][T12902] xt_hashlimit: size too large, truncated to 1048576 [ 416.845286][T12909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1971'. [ 417.247310][T12917] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 417.358137][T12927] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 417.388180][T12927] netlink: 'syz.0.1978': attribute type 2 has an invalid length. [ 417.422726][T12926] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 417.435410][T12926] netlink: 'syz.0.1978': attribute type 2 has an invalid length. [ 417.462314][T12931] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 417.471538][T12917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1975'. [ 417.500475][T12926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1978'. [ 417.822857][T12943] team0: Port device dummy0 added [ 417.982121][T12934] team0: Port device dummy0 removed [ 418.009141][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 418.394030][T12966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.453381][T12966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.831555][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1995'. [ 418.845886][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1994'. [ 418.911417][T12996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1995'. [ 420.267490][T13063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.303701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.548664][T13063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.557587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.614702][T13063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.646469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.738882][T13063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.767526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.794388][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.805040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.994472][T13091] syzkaller1: entered promiscuous mode [ 421.000689][T13091] syzkaller1: entered allmulticast mode [ 422.645604][T13031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.953087][T13104] __nla_validate_parse: 7 callbacks suppressed [ 422.953104][T13104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2024'. [ 422.961292][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 422.978932][T13104] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2024'. [ 423.014212][T13103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.168518][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2025'. [ 423.217089][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2025'. [ 423.235603][T13103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.277347][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2025'. [ 423.520490][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 423.591872][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 423.651913][T13133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.683402][T13133] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2031'. [ 423.897390][T13145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2036'. [ 426.343119][T13196] tun0: tun_chr_ioctl cmd 1074025675 [ 426.364784][T13196] tun0: persist disabled [ 426.521880][T13203] validate_nla: 2 callbacks suppressed [ 426.521897][T13203] netlink: 'syz.1.2045': attribute type 6 has an invalid length. [ 426.554655][T13203] netlink: 'syz.1.2045': attribute type 5 has an invalid length. [ 426.770859][T13216] net_ratelimit: 2 callbacks suppressed [ 426.770879][T13216] netlink: NAT attribute has 4 unknown bytes [ 426.900513][T13216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.359816][T13245] x_tables: duplicate underflow at hook 1 [ 427.742807][T13250] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 427.894653][T13265] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 427.979509][T13272] __nla_validate_parse: 10 callbacks suppressed [ 427.979526][T13272] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2067'. [ 428.173280][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2065'. [ 428.284761][T13265] bridge6: entered promiscuous mode [ 428.305905][T13265] bond7: (slave bridge6): making interface the new active one [ 428.314334][T13265] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 428.337586][T13278] netlink: 'syz.2.2069': attribute type 3 has an invalid length. [ 428.684280][T13297] netlink: 'syz.4.2075': attribute type 21 has an invalid length. [ 428.728939][T13297] netlink: 'syz.4.2075': attribute type 22 has an invalid length. [ 428.751411][T13297] netlink: 'syz.4.2075': attribute type 23 has an invalid length. [ 428.766879][T13297] netlink: 'syz.4.2075': attribute type 25 has an invalid length. [ 428.788258][T13297] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2075'. [ 428.879730][T13310] xt_nfacct: accounting object `' does not exist [ 429.082115][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 429.136030][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 429.557405][T13342] netlink: 'syz.2.2086': attribute type 16 has an invalid length. [ 429.585794][T13342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2086'. [ 430.240191][T13357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2091'. [ 430.442619][T13376] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 430.596062][T13385] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2098'. [ 430.623595][T13387] pim6reg533: entered allmulticast mode [ 431.298085][T13424] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 431.896672][T13450] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2115'. [ 431.938621][T13451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2115'. [ 432.308465][T13470] ip_tables: iptables: counters copy to user failed while replacing table [ 432.871198][T13493] xt_hashlimit: size too large, truncated to 1048576 [ 432.936779][T13488] hsr_slave_1 (unregistering): left promiscuous mode [ 435.408802][T13474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.642628][T13522] lo: left promiscuous mode [ 435.686568][T13522] syz_tun: left promiscuous mode [ 435.729726][T13529] __nla_validate_parse: 1 callbacks suppressed [ 435.729744][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 435.822369][T13522] macvlan0: left promiscuous mode [ 435.878498][T13522] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 435.919889][T13522] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 435.963226][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.970478][T11793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.009952][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 436.067370][T13538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2137'. [ 436.214539][T13549] netlink: 'syz.3.2140': attribute type 11 has an invalid length. [ 436.260922][T13549] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.2140'. [ 436.896343][T13580] syzkaller1: entered promiscuous mode [ 436.902192][T13580] syzkaller1: entered allmulticast mode [ 437.022928][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 437.030796][T13584] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2153'. [ 437.157905][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 437.280439][T13599] sctp: [Deprecated]: syz.2.2157 (pid 13599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.280439][T13599] Use struct sctp_sack_info instead [ 437.315587][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 437.400456][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 437.567999][T13590] hsr_slave_1 (unregistering): left promiscuous mode [ 437.814049][T13613] xt_hl: Unknown Hop Limit match mode: 206 [ 437.873157][T13631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2166'. [ 438.073692][T13639] No such timeout policy "" [ 438.078814][T13639] netlink: Failed to associated timeout policy '' [ 438.136495][T13642] validate_nla: 1 callbacks suppressed [ 438.136513][T13642] netlink: 'syz.2.2168': attribute type 1 has an invalid length. [ 438.211512][T13642] netlink: 'syz.2.2168': attribute type 2 has an invalid length. [ 438.322530][T13648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.372891][T13655] x_tables: duplicate underflow at hook 2 [ 438.904219][T13677] vcan1: entered promiscuous mode [ 438.912625][T13681] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20005 [ 438.952382][T13677] vcan1: entered allmulticast mode [ 439.161904][ T5621] block nbd3: Receive control failed (result -32) [ 439.389791][T13697] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 439.419892][T13703] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 439.431568][T13697] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 439.480699][T13703] xt_SECMARK: invalid mode: 9 [ 440.051017][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.071408][T13728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.083389][T13728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.146779][T13735] netlink: 'syz.2.2192': attribute type 3 has an invalid length. [ 440.437208][T13743] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 440.554195][T13743] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.700154][T13750] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 442.900191][T13743] bond7: (slave bridge6): making interface the new active one [ 442.978541][T13760] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 442.998399][T13743] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 443.361039][T13780] __nla_validate_parse: 10 callbacks suppressed [ 443.361059][T13780] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2205'. [ 443.404353][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 443.645486][T13792] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2209'. [ 443.745453][T13802] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.020699][T13808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2213'. [ 444.143752][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2217'. [ 444.310044][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2217'. [ 444.351276][T13790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2208'. [ 444.372196][T13823] wg1 speed is unknown, defaulting to 1000 [ 445.000392][T13843] IPVS: set_ctl: invalid protocol: 73 127.0.0.1:20000 [ 445.038136][T13846] syz_tun: left allmulticast mode [ 445.142151][T13848] netlink: 'syz.1.2226': attribute type 4 has an invalid length. [ 445.238902][T13823] wg0 speed is unknown, defaulting to 1000 [ 445.280233][T13849] netlink: 'syz.1.2226': attribute type 13 has an invalid length. [ 445.326114][T13849] veth1_macvtap: left promiscuous mode [ 445.358256][T13849] macsec0: entered allmulticast mode [ 445.753056][T13878] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2233'. [ 445.786544][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 446.248514][T13893] ip_vti0: mtu less than device minimum [ 446.321745][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2239'. [ 446.659913][T13907] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.397456][T13928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 447.404778][T13928] IPv6: NLM_F_CREATE should be set when creating new route [ 447.412061][T13928] IPv6: NLM_F_CREATE should be set when creating new route [ 447.611942][T13941] netlink: 'syz.2.2251': attribute type 2 has an invalid length. [ 447.924753][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.965930][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.998950][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.044395][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.778659][T14027] lo: Caught tx_queue_len zero misconfig [ 450.098191][T14035] __nla_validate_parse: 8 callbacks suppressed [ 450.098212][T14035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2277'. [ 450.454468][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 450.618556][T14048] veth1_to_bond: entered allmulticast mode [ 450.780969][T14030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.790615][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 450.821067][T14067] netlink: 'syz.3.2284': attribute type 1 has an invalid length. [ 450.883930][T14064] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 450.950447][T14064] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 450.980283][T14071] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2285'. [ 451.018375][T14064] gretap3: entered promiscuous mode [ 451.034906][T14064] gretap3: entered allmulticast mode [ 451.059933][T14048] veth1_to_bond: left allmulticast mode [ 451.472186][T14099] ip_tables: iptables: counters copy to user failed while replacing table [ 451.525247][T14104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2289'. [ 451.670873][T14110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 451.949691][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 451.969754][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'. [ 452.061234][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 452.282816][T14139] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 452.378791][T14139] 8021q: adding VLAN 0 to HW filter on device bond6 [ 452.411400][T14145] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2300'. [ 452.436074][T14147] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2300'. [ 452.583530][T14149] bond6: (slave gretap1): making interface the new active one [ 452.598084][T14161] netlink: 'syz.0.2305': attribute type 49 has an invalid length. [ 452.615269][T14149] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 453.334341][T14185] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 453.668562][T14204] netlink: 'syz.2.2317': attribute type 30 has an invalid length. [ 453.687174][T14205] netlink: 'syz.2.2317': attribute type 30 has an invalid length. [ 454.060226][T14217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.261555][T14217] vlan3: entered promiscuous mode [ 454.274673][T14217] bridge0: entered promiscuous mode [ 454.293256][T14217] vlan3: entered allmulticast mode [ 454.312271][T14217] bridge0: entered allmulticast mode [ 455.447792][T14234] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 455.843298][T14294] xt_hashlimit: size too large, truncated to 1048576 [ 455.894230][T14295] xt_hashlimit: size too large, truncated to 1048576 [ 456.212087][T14310] __nla_validate_parse: 80 callbacks suppressed [ 456.212103][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2346'. [ 456.273746][T14310] IPv6: addrconf: prefix option has invalid lifetime [ 456.599261][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2349'. [ 456.774394][T14343] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 456.893535][T14343] bond7 (unregistering): Released all slaves [ 456.945733][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2352'. [ 457.127056][T14358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2356'. [ 457.244443][T14358] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2356'. [ 457.262399][T14360] netlink: 'syz.0.2357': attribute type 1 has an invalid length. [ 457.436136][T14374] Cannot find del_set index 4 as target [ 457.534514][T14380] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 457.603227][T14381] netlink: 'syz.3.2362': attribute type 39 has an invalid length. [ 458.030885][T14401] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2366'. [ 458.139757][T14403] ip_tables: iptables: counters copy to user failed while replacing table [ 458.641702][T14417] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 458.685472][T14417] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2371'. [ 458.702222][T14422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2373'. [ 459.086427][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'. [ 459.145360][T14446] sctp: [Deprecated]: syz.3.2380 (pid 14446) Use of int in maxseg socket option. [ 459.145360][T14446] Use struct sctp_assoc_value instead [ 459.177704][T14450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2381'. [ 459.394277][T14459] netlink: 'syz.2.2384': attribute type 2 has an invalid length. [ 459.703231][T14464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.739909][T14464] netlink: 'syz.0.2386': attribute type 10 has an invalid length. [ 459.778181][T14464] veth1_macvtap: left promiscuous mode [ 459.806506][T14464] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 460.056170][T14483] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 460.089556][T14487] netlink: 'syz.4.2393': attribute type 1 has an invalid length. [ 460.294521][T14487] bond7: entered promiscuous mode [ 460.300832][T14500] Cannot find add_set index 0 as target [ 460.328945][T14487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 460.481633][T14491] vlan4: entered allmulticast mode [ 460.497451][T14491] bond7: entered allmulticast mode [ 460.542299][T14512] netlink: 'syz.2.2398': attribute type 11 has an invalid length. [ 460.577541][T14495] bond7: (slave bridge6): making interface the new active one [ 460.588030][T14495] bridge6: entered promiscuous mode [ 460.597966][T14495] bridge6: entered allmulticast mode [ 460.618819][T14495] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 461.329437][T14545] bond0: invalid NS target :: specified for addition [ 461.349400][T14545] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 461.391870][T14544] __nla_validate_parse: 6 callbacks suppressed [ 461.391888][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 461.442599][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 461.472808][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 462.200498][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 462.273720][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 462.304128][T14584] netlink: 'syz.4.2418': attribute type 1 has an invalid length. [ 462.447857][T14591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2420'. [ 462.595007][T14599] netlink: 'syz.3.2422': attribute type 39 has an invalid length. [ 462.633161][T14605] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 462.677498][T14593] bond8: (slave vlan0): Opening slave failed [ 462.680098][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 462.686855][T14603] xt_hashlimit: size too large, truncated to 1048576 [ 462.758229][T14597] bond8: (slave vlan0): Opening slave failed [ 463.131101][T14614] geneve2: entered promiscuous mode [ 463.253695][T14621] netlink: 'syz.2.2429': attribute type 11 has an invalid length. [ 463.538264][T14632] lo: entered promiscuous mode [ 463.542345][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2432'. [ 463.559617][T14632] tunl0: entered promiscuous mode [ 463.574316][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2432'. [ 463.637229][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2432'. [ 463.637541][T14632] gre0: entered promiscuous mode [ 463.660290][T14632] gretap0: entered promiscuous mode [ 463.673184][T14632] erspan0: entered promiscuous mode [ 463.685764][T14632] ip_vti0: entered promiscuous mode [ 464.023256][T14652] Bluetooth: hci0: unsupported parameter 5135 [ 464.066223][T14652] Bluetooth: hci0: unsupported parameter 8192 [ 464.072348][T14652] Bluetooth: hci0: unsupported parameter 5135 [ 464.087786][T14652] Bluetooth: hci0: unsupported parameter 8192 [ 464.157563][T14658] netlink: 'syz.2.2438': attribute type 1 has an invalid length. [ 464.387331][T14669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.407817][T14672] netlink: 'syz.4.2444': attribute type 4 has an invalid length. [ 465.637969][T14732] bridge0: port 3(ipvlan2) entered blocking state [ 465.645977][T14732] bridge0: port 3(ipvlan2) entered disabled state [ 465.653409][T14732] ipvlan2: entered allmulticast mode [ 465.660707][T14732] bridge0: entered allmulticast mode [ 465.673910][T14732] ipvlan2: left allmulticast mode [ 465.686117][T14732] bridge0: left allmulticast mode [ 466.343444][T14761] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 466.435755][T14761] team0: entered promiscuous mode [ 466.474562][T14761] team_slave_0: entered promiscuous mode [ 466.521590][T14761] team_slave_1: entered promiscuous mode [ 466.582230][T14761] debugfs: 'hsr0' already exists in 'hsr' [ 466.629717][T14761] Cannot create hsr debugfs directory [ 466.963159][T14785] __nla_validate_parse: 6 callbacks suppressed [ 466.963176][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'. [ 467.209318][T14792] syz.2.2478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 467.234786][T14792] CPU: 1 UID: 0 PID: 14792 Comm: syz.2.2478 Not tainted syzkaller #0 PREEMPT(full) [ 467.234823][T14792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.234841][T14792] Call Trace: [ 467.234848][T14792] [ 467.234855][T14792] dump_stack_lvl+0xe8/0x150 [ 467.234882][T14792] warn_alloc+0x24c/0x270 [ 467.234904][T14792] ? stack_depot_save_flags+0x33/0x800 [ 467.235006][T14792] ? __pfx_warn_alloc+0x10/0x10 [ 467.235026][T14792] ? kasan_save_track+0x3e/0x80 [ 467.235043][T14792] ? __kasan_kmalloc+0x93/0xb0 [ 467.235062][T14792] ? xsk_setsockopt+0x52a/0x960 [ 467.235114][T14792] ? do_sock_setsockopt+0x17c/0x1b0 [ 467.235170][T14792] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 467.235186][T14792] ? do_syscall_64+0x174/0x580 [ 467.235229][T14792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.235255][T14792] __vmalloc_node_range_noprof+0x12c/0x1730 [ 467.235302][T14792] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 467.235324][T14792] ? __kasan_kmalloc+0x93/0xb0 [ 467.235345][T14792] ? __kmalloc_cache_noprof+0x32d/0x660 [ 467.235365][T14792] ? __kmalloc_cache_noprof+0x150/0x660 [ 467.235387][T14792] vmalloc_user_noprof+0xad/0xe0 [ 467.235406][T14792] ? xskq_create+0xbf/0x170 [ 467.235423][T14792] xskq_create+0xbf/0x170 [ 467.235443][T14792] xsk_init_queue+0x8a/0xe0 [ 467.235462][T14792] xsk_setsockopt+0x52a/0x960 [ 467.235477][T14792] ? __fget_files+0x2a/0x420 [ 467.235497][T14792] ? __pfx_xsk_setsockopt+0x10/0x10 [ 467.235513][T14792] ? __pfx_aa_sk_perm+0x10/0x10 [ 467.235573][T14792] ? aa_sock_opt_perm+0xff/0x1a0 [ 467.235592][T14792] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 467.235608][T14792] ? __pfx_xsk_setsockopt+0x10/0x10 [ 467.235625][T14792] do_sock_setsockopt+0x17c/0x1b0 [ 467.235645][T14792] __x64_sys_setsockopt+0x13d/0x1b0 [ 467.235665][T14792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.235687][T14792] do_syscall_64+0x174/0x580 [ 467.235704][T14792] ? clear_bhb_loop+0x70/0xc0 [ 467.235721][T14792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.235736][T14792] RIP: 0033:0x7f6ca2f9e0d9 [ 467.235758][T14792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.235772][T14792] RSP: 002b:00007f6ca3dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 467.235789][T14792] RAX: ffffffffffffffda RBX: 00007f6ca3225fa0 RCX: 00007f6ca2f9e0d9 [ 467.235801][T14792] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 467.235811][T14792] RBP: 00007f6ca3035024 R08: 0000000000000004 R09: 0000000000000000 [ 467.235819][T14792] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.235829][T14792] R13: 00007f6ca3226038 R14: 00007f6ca3225fa0 R15: 00007fffa25a4f38 [ 467.235858][T14792] [ 467.236032][T14792] Mem-Info: [ 467.475825][T14797] netlink: 'syz.3.2481': attribute type 4 has an invalid length. [ 467.555065][T14785] team0: Port device team_slave_0 removed [ 467.581422][T14792] active_anon:5694 inactive_anon:0 isolated_anon:0 [ 467.581422][T14792] active_file:0 inactive_file:42883 isolated_file:0 [ 467.581422][T14792] unevictable:0 dirty:74 writeback:0 [ 467.581422][T14792] slab_reclaimable:11064 slab_unreclaimable:107724 [ 467.581422][T14792] mapped:29267 shmem:537 pagetables:1238 [ 467.581422][T14792] sec_pagetables:0 bounce:0 [ 467.581422][T14792] kernel_misc_reclaimable:0 [ 467.581422][T14792] free:1313520 free_pcp:7717 free_cma:0 [ 467.642188][T14805] ip6gre2: entered allmulticast mode [ 467.650100][T14792] Node 0 active_anon:22676kB inactive_anon:0kB active_file:0kB inactive_file:171324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117068kB dirty:296kB writeback:0kB shmem:2148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13512kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 467.724774][T14792] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 467.798493][T14792] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.849069][T14792] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 467.859228][T14792] Node 0 DMA32 free:1297164kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22676kB inactive_anon:0kB active_file:0kB inactive_file:171324kB unevictable:0kB writepending:296kB zspages:0kB present:3129332kB managed:2548480kB mlocked:0kB bounce:0kB free_pcp:31176kB local_pcp:21368kB free_cma:0kB [ 467.899565][T14792] lowmem_reserve[]: 0 0 0 0 0 [ 467.906790][T14792] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.908310][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 467.939174][T14792] lowmem_reserve[]: 0 0 0 0 0 [ 467.954509][T14792] Node 1 Normal free:3941440kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 467.993719][T14792] lowmem_reserve[]: 0 0 0 0 0 [ 468.017232][T14792] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.033089][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 468.051939][T14792] Node 0 DMA32: 257*4kB (UE) 85*8kB (UME) 156*16kB (UME) 419*32kB (UM) 166*64kB (UM) 50*128kB (UM) 8*256kB (UM) 0*512kB 3*1024kB (UE) 8*2048kB (UME) 303*4096kB (UM) = 1297228kB [ 468.116362][T14792] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.130175][T14792] Node 1 Normal: 4*4kB (U) 6*8kB (UM) 8*16kB (UM) 4*32kB (UM) 10*64kB (UM) 1*128kB (M) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3941440kB [ 468.166490][T14792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.178162][T14792] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.207163][T14792] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.288136][T14792] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.334215][T14792] 43399 total pagecache pages [ 468.359525][T14792] 0 pages in swap cache [ 468.369782][T14792] Free swap = 124996kB [ 468.379357][T14792] Total swap = 124996kB [ 468.394835][T14792] 2097051 pages RAM [ 468.408083][T14792] 0 pages HighMem/MovableOnly [ 468.448949][T14792] 428252 pages reserved [ 468.475696][T14792] 0 pages cma reserved [ 468.736098][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2491'. [ 468.807922][T12140] ------------[ cut here ]------------ [ 468.815174][T12140] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 468.825094][T12140] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:1/12140 [ 468.835998][T12140] Modules linked in: [ 468.841428][T12140] CPU: 0 UID: 0 PID: 12140 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 468.850949][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.861080][T12140] Workqueue: mld mld_ifc_work [ 468.865925][T12140] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 468.872321][T12140] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 468.892002][T12140] RSP: 0018:ffffc9000333e738 EFLAGS: 00010246 [ 468.898396][T12140] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 468.906448][T12140] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9069c9c0 [ 468.914443][T12140] RBP: ffff888067920f40 R08: 0000000000000000 R09: 0000000000000000 [ 468.922469][T12140] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888075672b68 [ 468.930496][T12140] R13: dffffc0000000000 R14: ffffffff9069c9c0 R15: ffff888067923258 [ 468.938534][T12140] FS: 0000000000000000(0000) GS:ffff888124f49000(0000) knlGS:0000000000000000 [ 468.947525][T12140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.954132][T12140] CR2: 00007f4ba1a0fcf0 CR3: 0000000032658000 CR4: 00000000003526f0 [ 468.962186][T12140] Call Trace: [ 468.965512][T12140] [ 468.968613][T12140] rate_control_send_low+0x1a7/0x7b0 [ 468.973922][T12140] ? __lock_acquire+0x683/0x2cf0 [ 468.978938][T12140] rate_control_get_rate+0x20b/0x5d0 [ 468.984261][T12140] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 468.990070][T12140] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 468.996205][T12140] ? __asan_memcpy+0x40/0x70 [ 469.000847][T12140] invoke_tx_handlers_late+0xb5/0x1830 [ 469.006417][T12140] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 469.012359][T12140] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 469.017869][T12140] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 469.023634][T12140] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 469.029080][T12140] ? do_raw_spin_lock+0x12b/0x2f0 [ 469.034137][T12140] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 469.039680][T12140] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 469.045758][T12140] ieee80211_queue_skb+0x1923/0x22c0 [ 469.051109][T12140] ieee80211_tx+0x2c2/0x4b0 [ 469.055748][T12140] ? __pfx_ieee80211_tx+0x10/0x10 [ 469.060823][T12140] ? ieee80211_xmit+0x2e5/0x3c0 [ 469.065733][T12140] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 469.071729][T12140] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 469.077955][T12140] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 469.084430][T12140] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 469.090765][T12140] ieee80211_subif_start_xmit+0xf1/0x570 [ 469.096468][T12140] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 469.102739][T12140] ? irqentry_exit+0x218/0x8f0 [ 469.107670][T12140] ? trace_irq_disable+0x3b/0x140 [ 469.112768][T12140] dev_hard_start_xmit+0x2cd/0x830 [ 469.118047][T12140] __dev_queue_xmit+0x14c0/0x3820 [ 469.123184][T12140] ? __lock_acquire+0x683/0x2cf0 [ 469.128197][T12140] ? __dev_queue_xmit+0x29b/0x3820 [ 469.133340][T12140] ? ___neigh_create+0x1cd2/0x22b0 [ 469.138635][T12140] ? __pfx___dev_queue_xmit+0x10/0x10 [ 469.144048][T12140] ? neigh_resolve_output+0x428/0x720 [ 469.149497][T12140] ? eth_header+0x11b/0x200 [ 469.154110][T12140] ? __asan_memcpy+0x40/0x70 [ 469.158787][T12140] ? ip6_output+0x11e/0x540 [ 469.163386][T12140] ip6_output+0x337/0x540 [ 469.167782][T12140] ? __pfx_ip6_output+0x10/0x10 [ 469.172676][T12140] NF_HOOK+0x177/0x4f0 [ 469.176818][T12140] ? __pfx_NF_HOOK+0x10/0x10 [ 469.181430][T12140] ? icmp6_dst_alloc+0x39b/0x430 [ 469.186525][T12140] ? __pfx_dst_output+0x10/0x10 [ 469.191393][T12140] ? __local_bh_enable_ip+0xd0/0x130 [ 469.196770][T12140] ? icmp6_dst_alloc+0x39b/0x430 [ 469.201765][T12140] ? icmp6_dst_alloc+0x39b/0x430 [ 469.206767][T12140] mld_sendpack+0x890/0xe10 [ 469.211316][T12140] ? mld_sendpack+0x206/0xe10 [ 469.216047][T12140] ? __pfx_mld_sendpack+0x10/0x10 [ 469.221124][T12140] mld_ifc_work+0x842/0xd60 [ 469.225704][T12140] ? process_scheduled_works+0xa20/0x14e0 [ 469.231448][T12140] process_scheduled_works+0xa8e/0x14e0 [ 469.237081][T12140] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.243099][T12140] ? assign_work+0x3cf/0x5d0 [ 469.247764][T12140] worker_thread+0xa47/0xfb0 [ 469.252401][T12140] ? __kthread_parkme+0x71/0x1f0 [ 469.257415][T12140] kthread+0x388/0x470 [ 469.261517][T12140] ? __pfx_worker_thread+0x10/0x10 [ 469.266681][T12140] ? __pfx_kthread+0x10/0x10 [ 469.271300][T12140] ret_from_fork+0x514/0xb70 [ 469.275952][T12140] ? __pfx_ret_from_fork+0x10/0x10 [ 469.281105][T12140] ? __switch_to+0xc89/0x1420 [ 469.285840][T12140] ? __pfx_kthread+0x10/0x10 [ 469.290457][T12140] ret_from_fork_asm+0x1a/0x30 [ 469.295294][T12140] [ 469.298353][T12140] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 469.305650][T12140] CPU: 0 UID: 0 PID: 12140 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 469.315119][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.325200][T12140] Workqueue: mld mld_ifc_work [ 469.329904][T12140] Call Trace: [ 469.333179][T12140] [ 469.336106][T12140] vpanic+0x56c/0xa60 [ 469.340091][T12140] ? __pfx__printk+0x10/0x10 [ 469.344669][T12140] ? __pfx_vpanic+0x10/0x10 [ 469.349183][T12140] ? is_bpf_text_address+0x292/0x2b0 [ 469.354458][T12140] ? is_bpf_text_address+0x26/0x2b0 [ 469.359653][T12140] panic+0xc5/0xd0 [ 469.363366][T12140] ? __pfx_panic+0x10/0x10 [ 469.367782][T12140] ? ret_from_fork_asm+0x1a/0x30 [ 469.372727][T12140] __warn+0x315/0x4c0 [ 469.376791][T12140] ? __rate_control_send_low+0x60c/0x8a0 [ 469.382421][T12140] ? __rate_control_send_low+0x60c/0x8a0 [ 469.388044][T12140] __report_bug+0x276/0x570 [ 469.392643][T12140] ? __rate_control_send_low+0x60c/0x8a0 [ 469.398268][T12140] ? __pfx___report_bug+0x10/0x10 [ 469.403305][T12140] report_bug_entry+0x19a/0x290 [ 469.408149][T12140] ? __rate_control_send_low+0x638/0x8a0 [ 469.413770][T12140] ? __rate_control_send_low+0x63d/0x8a0 [ 469.419390][T12140] handle_bug+0xce/0x200 [ 469.423635][T12140] exc_invalid_op+0x1a/0x50 [ 469.428216][T12140] asm_exc_invalid_op+0x1a/0x20 [ 469.433052][T12140] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 469.439278][T12140] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 469.458878][T12140] RSP: 0018:ffffc9000333e738 EFLAGS: 00010246 [ 469.464950][T12140] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 469.473095][T12140] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9069c9c0 [ 469.481073][T12140] RBP: ffff888067920f40 R08: 0000000000000000 R09: 0000000000000000 [ 469.489039][T12140] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888075672b68 [ 469.497000][T12140] R13: dffffc0000000000 R14: ffffffff9069c9c0 R15: ffff888067923258 [ 469.504981][T12140] ? __rate_control_send_low+0x600/0x8a0 [ 469.510652][T12140] rate_control_send_low+0x1a7/0x7b0 [ 469.515926][T12140] ? __lock_acquire+0x683/0x2cf0 [ 469.520861][T12140] rate_control_get_rate+0x20b/0x5d0 [ 469.526171][T12140] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 469.531806][T12140] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 469.537874][T12140] ? __asan_memcpy+0x40/0x70 [ 469.542473][T12140] invoke_tx_handlers_late+0xb5/0x1830 [ 469.547928][T12140] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 469.553826][T12140] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 469.559237][T12140] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 469.564964][T12140] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 469.570325][T12140] ? do_raw_spin_lock+0x12b/0x2f0 [ 469.575339][T12140] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 469.580788][T12140] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 469.586704][T12140] ieee80211_queue_skb+0x1923/0x22c0 [ 469.592000][T12140] ieee80211_tx+0x2c2/0x4b0 [ 469.596589][T12140] ? __pfx_ieee80211_tx+0x10/0x10 [ 469.601621][T12140] ? ieee80211_xmit+0x2e5/0x3c0 [ 469.606465][T12140] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 469.612439][T12140] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 469.618590][T12140] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 469.625002][T12140] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 469.631260][T12140] ieee80211_subif_start_xmit+0xf1/0x570 [ 469.636884][T12140] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 469.643112][T12140] ? irqentry_exit+0x218/0x8f0 [ 469.647870][T12140] ? trace_irq_disable+0x3b/0x140 [ 469.652901][T12140] dev_hard_start_xmit+0x2cd/0x830 [ 469.658022][T12140] __dev_queue_xmit+0x14c0/0x3820 [ 469.663049][T12140] ? __lock_acquire+0x683/0x2cf0 [ 469.667985][T12140] ? __dev_queue_xmit+0x29b/0x3820 [ 469.673106][T12140] ? ___neigh_create+0x1cd2/0x22b0 [ 469.678217][T12140] ? __pfx___dev_queue_xmit+0x10/0x10 [ 469.683595][T12140] ? neigh_resolve_output+0x428/0x720 [ 469.688985][T12140] ? eth_header+0x11b/0x200 [ 469.693494][T12140] ? __asan_memcpy+0x40/0x70 [ 469.698099][T12140] ? ip6_output+0x11e/0x540 [ 469.702593][T12140] ip6_output+0x337/0x540 [ 469.706915][T12140] ? __pfx_ip6_output+0x10/0x10 [ 469.711756][T12140] NF_HOOK+0x177/0x4f0 [ 469.715823][T12140] ? __pfx_NF_HOOK+0x10/0x10 [ 469.720404][T12140] ? icmp6_dst_alloc+0x39b/0x430 [ 469.725333][T12140] ? __pfx_dst_output+0x10/0x10 [ 469.730177][T12140] ? __local_bh_enable_ip+0xd0/0x130 [ 469.735451][T12140] ? icmp6_dst_alloc+0x39b/0x430 [ 469.740384][T12140] ? icmp6_dst_alloc+0x39b/0x430 [ 469.745325][T12140] mld_sendpack+0x890/0xe10 [ 469.749833][T12140] ? mld_sendpack+0x206/0xe10 [ 469.754501][T12140] ? __pfx_mld_sendpack+0x10/0x10 [ 469.759537][T12140] mld_ifc_work+0x842/0xd60 [ 469.764056][T12140] ? process_scheduled_works+0xa20/0x14e0 [ 469.769771][T12140] process_scheduled_works+0xa8e/0x14e0 [ 469.775335][T12140] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.781319][T12140] ? assign_work+0x3cf/0x5d0 [ 469.785904][T12140] worker_thread+0xa47/0xfb0 [ 469.790503][T12140] ? __kthread_parkme+0x71/0x1f0 [ 469.795442][T12140] kthread+0x388/0x470 [ 469.799504][T12140] ? __pfx_worker_thread+0x10/0x10 [ 469.804606][T12140] ? __pfx_kthread+0x10/0x10 [ 469.809215][T12140] ret_from_fork+0x514/0xb70 [ 469.813822][T12140] ? __pfx_ret_from_fork+0x10/0x10 [ 469.818957][T12140] ? __switch_to+0xc89/0x1420 [ 469.823640][T12140] ? __pfx_kthread+0x10/0x10 [ 469.828231][T12140] ret_from_fork_asm+0x1a/0x30 [ 469.833008][T12140] [ 469.836177][T12140] Kernel Offset: disabled [ 469.840523][T12140] Rebooting in 86400 seconds..