last executing test programs: 5.850205089s ago: executing program 2 (id=2859): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x1, 0x3, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) 5.739853132s ago: executing program 2 (id=2861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000480)={r1, 0xe, 0x9, 0x913}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x16, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ceb8637}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @jmp={0x5, 0x0, 0x1, 0x7, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0xd, 0x0, 0x9, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0xa, 0xe3, &(0x7f00000006c0)=""/227, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xc, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r9], &(0x7f0000000900)=[{0x3, 0x5, 0xc, 0x6}], 0x10, 0x2}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x1b, r10}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) r13 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8983, &(0x7f0000000a00)) sendmsg$sock(r12, &(0x7f00000005c0)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, 0x0}, 0x4004800) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000340)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001340)="972d35bbe9a150a8af9e4e6533d7314f46c6d6be361a351872e88b43be41ae3bc2ab357c7c573a499c5bfc62ed02d1473d0519fc4419efc5fd9d1dd71ef4e0a8f51dbff730b067eda8c975b365dbae41c3022fa27193bbeb86879347a8e10ac36fd0b2eb5ede00b7b4d1d17601c1fd0004fd705df9253852d936af5203b8cbbc6e8d529c79a00afc6c4908721b50d8e978793bef4d2434a9fdfa8469c47c2672b807dd9ce09b40338eafabb39d22e66ba0dcf1bc9258ac6a98404627889f75380b48a536679663fbc92cb70cb9a48d5c7b3fc374a645bafb572233bf90b400194e75faede08022f293fb44c4afdb7642f39e5ab8b319a060856c35fff4cd6edfaa5e7f262574bbcd257afcbde519926a049383796c36a6151bef7e67f780afa45421a8211386aa6b293cbe7f49d3eb94a3762190f99c57af94de834d3cd2f3f3cfbfc858634067d92f288dc8de5876b067f926a38690ff201665e3b630ee372a98ccab2e79cc5d1c2774c99335770d5a52714ebc342203ad00e0ecc6613e54ecda284f174dd1a03e9300c90bad58b1a081b61b3b6970403a8e7368415dad32ff4765217cd6c5412e5ffa2b2e33ebed2f210990172ed5e5e389f250aa6c426704c8a08d6e0c3398c4d8582f5e15f21bb8ad6bd5e2f18391a7f8891f35e30fb9cd5eaebf760f1464b901a109c3bcf074a06de6d595eb52bdfdd56dd280ad8f0a93b41e2d036d65d75571b6ffc1d9f0b8268f5bfbd004a343058414a7f774d295b72a1bc6c9327b3a4f9cdcfab1026deac81e4680a9c96f5ec12c8c78aae6ff2e6c3b74603835a1324a5048bb7a347a3f83cc785167bd78a2302a073ac551aa110ddd9cb41044d639aebf64cb178d623d7df06f8be148afe5d004b3b887d5e3b3d00688eeca136e6ba008fc43dac8338692f1f32494303d969ddcb0d7e7ff8d01a6be40ad4cebd05de8030326cd1c0beef6017708920f92b0c7b5f342d40f3daf5cffd4f4eef62e8d9ab55a68516c6a436c0138fd8793448572fb87ab3316e0af894500084e82fc7ffdf001fc3b86bbf831469a9d0d9a43bd61b3860bcd3fe3622da74a83b5312c864cad812070a394fbab70a6dbbf5b1ad07096b8de87604f29c46e34916266689e0d323b21619b022e11f7ee8f6c0eec769172cf9c8b650386383e19346129eb62f1bd715127855d42220a962d1451d601b8b68648b048a259e9e14c9e76db7846c7aa27c41fdee41415a161162046eaec549e3eccc2983d07919f98909e68f31a0e0cc333015bc17857462718e8676b1e007e8c4980acbb265651ba4c87d59816c6c66979b63f753d699fe4e433dcebf1744ee7b956bb543586c2ada6815e6cafd83b7e87774c1d9801ce4d902910fadb8d7ba121ca90c0561e9550504b5833831972c492588bc781303f613c71bfc2360d70584259e8b8bb4097681674d2db711d5cdfb43eb92d1284373762b18b170f0f3efd2c8db30b98c34bfd14e7f3f4dfa9c8c517f37a7c07d630431683e6f70f97975171047054cf8cbfb7649e8072a578337b93587cdaa3f31e13af1fb3e7e9385f90f1feb790f0f64138999b7a292c736eb64721a000c9e845dd1ca3191e7ecadc521e38f1749b3f31672a489c8039883098efce2f820526d81f425a0ec6b4479b846d1a018a2db3cba75f4e8999b56f493a067efaec3ff2cea22109ff77c840ce002ecb6051831b0554f5280a169ab1d819fe47b9f9d226f64e8fef30443cb38cf4065d5b00ed9e8abc18a4977c9ae489be7be9fd17534812b9e58089efd160c94aac92e58d6e3f71edad28421cab391197255f65d6aebcb8a0fa250683a327109eb4c47b698a12592c2559e019b2c46aa74f98f7f77899fc4985a72c7866da3073f82ed429064dd73892997f66f40098938cf7bf698616265dc4fee23ed458ff3e49d23bdf074a3ea2c9e14b393396b980019492b23b609d1cf7f4b64b99c22c4c3da870c9c5371dd740820bb82cb005fdb3b93a2086932dc0d438341212ac58cc2455d1b6ba433f0c806c4670b872b8ecacf37744ad3849f9bcb1248b516cf591ea4f2053d6203e6d19fd81453e726892200daf7567257c1b743c12f66b38efa4dc9684c08a71bf86ecf7e24b534976c0f5611ed35734c5a3a57f10b67d1970d33e28a5236da4035e41ba199fb698c94300ec0823f60d2455208a133490f920cbeee1b39b5d716a5e215992b55cdfa6971500e1146a5860e9553653bca62d668b71df594e160dea4c94dddbb091d99fc3cc84f5555a46af13aa515cb5736558daec75b07aa91d7e3dd297da535b3038b37d03004e633e82a05454f85b497194e60db59f2a76875eb104ebe995f462884340b82478a0f57b345a26791b4fc3027701240e0aad454a915f55aad98b4527eb25a02f75aad956ef2b34532fa81703aaeb6384683bee70e39437da50ffc0223db38b50ea3c1bfe5a10331bff101ac586cb12824bb4988da66410bc4c7f9bd1de730c198ae6629101e1fbbe9792eecde4daf7eb4c8723dc25f12e19c525c65377513914e4153c4724674131e1e08498f80e603d8c3efc62197d2ba0aee569131f12a7da86c153bff94d519ece69e9d3acf47101ceb2f515788eecb3eea030ebe1756ef6ac9628c6cfcd1dcdad105b234c56b1126495cb335c3bec6e08ef85fc7e3a524b5f3761bd7962d91b7d7a6ccfec78f96c8a60bc6ba8f9346daa1fb318e37e05ad18c472d0e35930634f7024d6817114e12ac6772e0dced98c6e1ce8578f6ec18d9420d4a30f9041937f328a8471be607f37c0e87b20d0776e86c56297043f7d16bfc9d80a68d84a8274132b0d5fe5245415215af23edc1cec48b016177840063208dfe25861df9823cff9d868f63345c2d3cd256f116d276b760a4bdb79d7523c9885d11c98d716b96a311b573dc6728dea0554a96121e9876f544816b906bed6a5b1bb18d65590210be7d40eefb6976765f781daacf12f9df117e0a9c90d134558027898baf89ea2310710042a091a91645199860889e6bd8345da9e23385ed50972b92154e74f21ff021050ea60eeeda9d0a2c0dfd3f48e785d2004e5ed590dd6e2c0a6c0df4df014d8853e89c3d754c325aebf64c134e0f5290fe8a206676a3c70758bd85f2a8e00d375c344041e3c36b19f1175a66a94efb06b3e0174beaee3764288cf74c9d2b7f85a48a5badfa88c4727890e53c1e077d79b6e4d180a9cf50b9c8e4c6556383b0cb38d199c4e10df4d2974b8b78a72ae1420c48d9663ba6cad24159b46c156148e0df5c6dd5bba7786f5b4b0cfb267b82b54580ac8165cc90503aeba943de9978a19cfe1cb880a8b3d3e627ce712dda1a7b9b381fccf214dc88883bba7afc730e0e5c484c1f960cc7bdf9e8ae91164c8f75b8755631dfea7a098beed49bbc89d08ded2ad8476ea1405d4d39e7f88fd0668152f63923a74affc909c0d3171c3f86130cdf956ee28bfccf83835ac923c9045c367b3f8ba84eaebec7d8d828fe1f1514c5c3e5418cbff07a3d2c6c4cd327e85d0f3fd96507e74986f19734ec2e80f5c7f58b6fbe0480e9fe1ea8204e274f26a113dc7ab67f76cff170be23fb711509cad1cdf62f935626d39aa5c25f2c454246342fbda29e231b4f13804f94a09a539999282ee169a7a552944e613b4481c7726123444f41b844f915e8cfb52267ae438b43e2e1d2c7e24f7428bd7808699ada2920fe8fd90e96d96a041150be2d67910afe7c7bfa3ef73379af1e31326d17bbb5f9bd7fd91e59d977775a0a37c96e34f984ec8f10804fb4af9e0d7d02b1de51e97d96c5b1b9ccf1dab292fa193e5db7605e6fbf99f6b30d73c8e3dce62dbd80bf9da0c9b472b3864b331d34fc444a149ee71ce891ed58472f407733f1326cbf070959d29213db928f7b916e6cd348ed6bb54eb83f94f16584fec68dd3a45306064451008b72bcf46a1c9cff4f74c78a99a019fff2a1c1bbf7ccd1720ad3a6084502247cc35a5d8f8110987b4f398c9e7a8471a176094d1c566df6f8e3ab910779b06409df910bdddf9b9b0e56b4077c0cccc13ed8062abd99fb24ddbc9fd155285cc49cb13371bb244a8e10fbc924d3bbc2f5ef8ddde12e14e57cb87baf6f73d9e454b812c511389d2e0b23a28b4de71813df6927418da51484727085ca7ea3c5a616425bb0d07aa058e1ec067b537b400626176e659db3299923b0c423b9e8ff801b51c4767f4b393e43d04ff42c09d90bad46c67c30ad6ee9c423818bb9f289f528fcd31bf6e42603dc23cdd1b049e9ef50c883d27118cc7764113ec354abe394d8e5f32f6dfb365805e2bd69c75fd59bb3338c88323077c4e5c0c853c10e05d92bc23ea1608994cfe5cf811ff86bcc2a43b12cb3d49aabfd6d7ba327968bde43e97998bf804ea38b5a2579d9638682e96e789ac99f1a75ffd9b24d8d651b48778330a598079b7bcdf695e2b66ab3232e7c67e2e8071c50f6a9aa664e0f68f369659402a92cf4be647a2d52df39089c08c5be5fc817a586fe594fa579fdbf0a6c6311216c4aa39dd439a4e8240df9e7b897f90a3df054a35dc0ea45a1558c9c4e960f25f53ef7b73ae9d1de2bc4b4d77bfc0590cbb9f8ea476f764d57afe203967b86652055a814b8f3fbecefc0a3876674397d12d0a6722370eee59c23a9c770a5027240d44bdb5f717d5f8c8ac4fa434472ecb63cd1c41a34fc006afa76fd866567b6300e8d739509e20502686ff522b1cdaf86e88fda0bf3e701fdcf0f7515fcd5d5084664163d5bca4eec14f2311d0c191e8a25053d6a192dc9dcef69dae3e9e9eb57bdf93702ff29371517fecb626775e27753ff584d3ff17988beafb5579b4fc24067983cf961f8e3e2ec79ed751adb9d5fb57362a55d5dc8e3d6b2b8f012a55f6b95e73111fcb003ace5fa7bdbab3b174c29d4aeb2b1e644c9892656bc45493c8be924af217eccb37a75014f822e13ed072353dd23f365814d9faea93c241ecaa2044726f57b01f19b4ec7f5d2ff92c7e2d56a3c972979b65b9396599db8cfea5d9d70ff641f776a490773bfed8803681ff3fde4ff1035a109757a55159518e96c01761007fa74e03c74c372aadd3be3e6dd6d6737b88b6dcef4f2551e1f84e9a66b1e83a63fc1b8b247a8eec5ee70b8462112eb8a4e9a9da397f8970a030f487c755b6d434cc697913cc5058e2766622d9835ce1cd3b78cf8232dc7f724a62742f0e8bf4e1cc10161f48ada0908c7f396db0395aa7505107a6ebacdc6eea39b2d9e590ecccad7373c7a69ac1778bd6eee860be71ad44a4d68c82e71ff0c50d32ed79592955894acaf7cbc54d314383133983a1b48dbd50ab2e3787ab52630cd0a0bd1b857414634ca562ba76efa83e6d2478b358035107bef4a592468f410ff0286634e663c119db4558b4ee196b30deaa230deb05e5518bfc5a3c245fcbe08a707bb28ded0fe5175ce5cf6511b25d49364ebbd7f7e37dc902e8859fe21325c399ef2265b33a56b3e627c68d9579c97ba4ced41f495155dec6c0f1983c850c18c91fc725d07ae272878823bdb7cffb5855e3965923f5d3182183a4b6ae5dd9670ab0bcac80ed8b9f558184089b4d42d0fd2dae4b3351ebed06169a0d6eeddc04a0af140f174c3f1357c9fd7c9e00d2db022dbc317fa94a41696454d860154051ce7bd1ee6440b6f65578390d974fec8271e3fe2c286c22d5b5f3203e012d678a8dbc5337d31bfb7e73cc0ed9590b380727d7e8705b51a3a1b7d0f2bca1449ef7cc9889d323048cd61e9c624df941b6d18e7251", 0x1000}], 0x1}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 5.084826501s ago: executing program 2 (id=2871): unshare(0x20000400) unshare(0x24020400) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300031000000000000000000000000200090008000000e40000000000000005000600000000000000fc01000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fc0100"/122], 0x80}, 0x1, 0x7}, 0x0) 5.014471295s ago: executing program 2 (id=2876): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'io'}, {0x2d, 'freezer'}, {0x2d, 'memory'}, {0x2d, 'hugetlb'}, {0x2b, 'devices'}]}, 0x27) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) 4.906245681s ago: executing program 2 (id=2879): r0 = socket$inet6(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000080)="8b091f56f1", 0x5}], 0x1}}], 0x1, 0x20000084) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000400), 0xe) listen(r3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0xbe}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="638c7f360000ffdbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="2c007a800c000300"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000003c0)={r8, 0x68}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000004c0)={r8, @in6={{0xa, 0x4e21, 0x4, @remote, 0x1}}, 0xd, 0x8000}, &(0x7f0000000400)=0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x1, 0x804, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x7f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r9, 0xb, 0x9, [0x6, 0x1, 0x8f00, 0xfffb, 0x3, 0x0, 0xcbd, 0x7, 0xfb85]}, &(0x7f0000000200)=0x1a) 1.95846528s ago: executing program 2 (id=2886): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x26, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x89b3, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x3c, &(0x7f00000000c0)=""/60, 0x41000, 0x22, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xb, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x4, 0xb, 0x5}], 0x10, 0x7}, 0x94) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500), 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000020000000000000c006e007013200000000000"], &(0x7f00000005c0)='syzkaller\x00', 0xfffffffc, 0x8, &(0x7f0000000600)=""/8, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x3, 0xd, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x4, 0x3, 0x6, 0x8}, {0x3, 0x1, 0x7, 0xc}, {0x0, 0x5, 0x4, 0x8}, {0x0, 0x4, 0xb, 0x1}, {0x5, 0x5, 0x1, 0x6}, {0x3, 0x1, 0xf, 0x7}, {0x1, 0x3, 0x4, 0x8}], 0x10, 0x5}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=@newlink={0x7c, 0x10, 0x503, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_OPERSTATE={0x5, 0x10, 0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.489259642s ago: executing program 3 (id=2899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 1.432915145s ago: executing program 4 (id=2900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xa, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) listen(r2, 0x7) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000034001280080001006774700028000280080003000906000014000800fe8800000000000000000000000000010800040002000000"], 0x54}}, 0x0) 1.237400885s ago: executing program 4 (id=2902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) (async) accept4$tipc(r2, 0x0, 0x0, 0x800) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4009}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004040}, 0x40440c4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "ac3381"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 1.129239334s ago: executing program 4 (id=2904): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x3, 0x1, {0x0, 0x0, 0x0, r1, 0x51b4b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.045867609s ago: executing program 4 (id=2905): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="140000001800eb8976156951b2ba29ef80"], 0xfe33) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) read(r1, &(0x7f0000000040)=""/244, 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 907.115973ms ago: executing program 1 (id=2907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x3, 0x300) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, [@FRA_FLOW={0x8, 0xb, 0xc}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x2f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7, 0x1}, 0x8) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000002080004400000000f08000140000000001c000580090001006d657461000000000c000280080002402000000d0900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1d, 0xfffffffc, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r9}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 858.907486ms ago: executing program 0 (id=2908): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x16) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 737.953806ms ago: executing program 1 (id=2909): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf48, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="137a9343524cb34a7a5e2f56af2074e48e5b099ac7ef3078184b4fc628b4a9acb7a05ad3216ccfea2dcf825df2475230d5c113d0cd2904f6cafa238f47bf13335558d81b9c52423424518d3ca050ad7f", 0x50}, {&(0x7f0000000300)="cc1e1229a434fc9941a1dbefa096cc6608712b58fafa1f24cf1a", 0x1a}, {&(0x7f0000000340)="9e2c43b8f8615753fc240fd71acae25d1febe81c55191187eefd6c76b4c8f5b22784ab5ccb1f1f9b328deb59db31394a2f33885ff93ec84b01b2ce35195ff9647dec7382ce2b47edff5fce48ce73cc", 0x4f}, {&(0x7f00000003c0)="b5a7e682c42f9ebb6a", 0x9}, {&(0x7f0000000400)="97cc58878974788c964edf9a40a5e75721f1e33b15a087e6f95f95207b2c08db288902504702a550a27c253ccf3b1da2576959d0f5ab8785333302f5302489f254f1969e0597c0da746fd921fe4881c9ee6db54bca93ca74619ed52b4b6d1bf9ac78fb44614e5bf3debd9e438a9cb38ab172f8d470ebf7950ca21542ca39fa510fdf8f4d636c3bad2ddda277a06c950344869ca519d48e76be405603e003cab2154a3ff8401d7c39c2", 0xa9}, {&(0x7f00000005c0)="e5452d04d22140616ef584c6c1e16917c939a5b20289f5540148c9e170d815d0d1dd959bac93628f314cbc3efc12e98691958a2a19d3840fa5e1ba63a2761da26f98fc44104f7dc42d29bb4e9b5b13ab809158eddb64c810e28bd6cb65c31588af144538d4c9caaee4623f1850e3618dcd7fbfab27a2273340762ddf8c03179b950695453576eb89b1265d609422e90866c2efaf6ecf295078ff656dfa8167949ff6aa283b7023044bec50e7f212fb4c93ce54d5703abd50bc17248326b3ac12ab9cdb37f157f67935784e95e960e5a955", 0xd1}, {&(0x7f00000004c0)="65b655ea2d60e8d3fba944a543517454a1", 0x11}], 0x7}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x400, 0x3a}}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba91973"], 0x2c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x46940, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) socket$netlink(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000080)={0x11, 0x19, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a300900030073797a3200000000a0000000060a010400000000000000000100000208000b400000000078000480340001800b000100657874a797351660ac8b57686472000024000280080001400000000c080003400000000208000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780080001001f00000008000640000000020900010073797a3000000000140000001100010000000000"], 0x114}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'veth0_to_batadv\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x324) 736.080818ms ago: executing program 0 (id=2910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x891b, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x891b, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1429137077574d5bb6b6d5e3e2b268c315e21affce53fce9eb340800de002e51bfce92126095ffff8450fe93a82a9fb74b6f9bbe0cbbd50b616f1994f27bb113185aa3ea12fb94699ffa0990267e9425881a325c2b75fbc7c00731fb9be5c8c6c1c3", @ANYRES16=r6, @ANYBLOB="05fb00ffffffffffffff1f"], 0x18}}, 0x0) sendmsg(r1, &(0x7f0000000c00)={&(0x7f0000000740)=@ethernet={0x6, @multicast}, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)="26663ed129ef4ebb8fc1a9a09a3e9340bc1b79be544f571d093b695d85b73ecb46889ca2", 0x24}, {&(0x7f0000000800)="94ae6565a2e1a2eab5ee725722fad59b0ef3021fe596f270a90d7b4eaa8825c1cdd730f7786fd77f71e75f10ec8580ed44354a090b546a968bd1af2b14fe5c5f03a04ad3aef277ea561e210eae", 0x4d}], 0x2, &(0x7f00000008c0)=[{0xa0, 0xff, 0x0, "1a0264ae5125011f4abc2af490e537b3cbde38d7b2e9259afa96c0baded60367a773e28c68649ce443cbc6517e768fc52906d4b937144a7b49533fae8d12e1e36bc6591c4c5685f49468b68e3aabef26fc95d56a1c9823550f785ea8bf3cbae74d6eaf864a44d8c7b4bf87a584ce035d9210789d9bdcd29fda26f656a4d4040a2ef4db9990c5d275318759b803"}, {0x108, 0x10f, 0x6, "ff7055e9d846ade39da8feea9489123b0e2db33144106b36736979e099820cf10672afd5f0fc8e89884e4dd013f1a64db6d42b6c6ddb850bfda01368f58f2c1155db503b668566c689a85c113830ae436fd7f9a7dc581a59b9219d4a6fd1ad15ef6b699807525af20549be01404da8d191806c716f8d5a06ae6926c92ac1c0088a203cab38eae79b2ae4ff87a42ed56db7da675d2a9a0f29a24e4f804bcce79a1113a45c756266b20171f773736bb85e7d580de24984795af37e4bc4ded42f922c8f9c3991b6c2d88334f40d12c285a79c3b29a725e2633a69fd1cacc8120f49d36031e29d308da267d9e53eb41a39ad01"}, {0xd0, 0x3a, 0x6, "5a5b2f0872b98a2431ad59626afde329253fe20d9b1af0cc5f116e1ccf88a32c3f35f655a8c316645d293a0944fa3b48035af91894fc1bddf99827ed89d1d0f7dba4ced8be3b72ebc90b88ffac713c723c57444abcd3fe7beb7af9c522e10366b161904db87ed8347f5f1b2461e156c485d0bc655b7b550e4a3af20748645d6bb8d6dc5c9cd4b1660263e0366782fd13aeeeeb8e97388299ab82b85bcffa3bd1850792730bb8c0e6bcc7c025e0d8ce634edcaad088e5e4c296d45fb985d410"}, {0xc0, 0x1, 0x200, "9d0674f5e2fa1503d64edde9ba91c977ed75a4626dccbffce720a133fce485fce5cbe2dce0a8142caff38d9e26826113bf52cb6eae9f75c965b4f6547153a58d1657827646dca7b1b5fc072241b26b5948896793b99442d80562ab924e741e4e28031df652b28a79ce1d5d829d09e1f83e67d70ab4e59f36ccb86e2312349e6d2cf7b7c5ab906c69a14eefc2cba4cd5a41611a4e19fc32fb364a2c28e7533128dc63cbe0eefa3b73cc5ce6320a798fca"}], 0x338}, 0x890) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r10, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0)=0xffffffff, 0x4) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0)=0xffffffff, 0x4) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000480)=0x8) (async) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000480)=0x8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x3, 0xf}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x3, 0xf}}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r12) sendmsg$NL802154_CMD_NEW_INTERFACE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fbdbdf2507e80ad5ce3a24b1c10c00000a0004007770616e3400c77fc3a27d8e653ba29ed53a74578288920100008e00050002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f", 0x7}], 0x2) 637.135699ms ago: executing program 1 (id=2911): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) (async) shutdown(r2, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00"], 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89fe, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) setsockopt(r2, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) 526.38338ms ago: executing program 3 (id=2912): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000016b, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000001240)={0x1a4, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3dd7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2117}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9d37}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2eb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4050}, 0x8810) syz_emit_ethernet(0x1015, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@llc={0x4, {@llc={0x2, 0xbc, "a8", "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"}}}}}, 0x0) 478.237451ms ago: executing program 1 (id=2913): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000000f81c02bb27540432b767ef215ff96b07c2e2545386f509000000f6c0fb9da45af480839b4129f91a57a9e694e3ae05fa07b8685f37b5f58cf4ff39f597653a4fe7a1348d882af1278b8448208dc3caff744b7aa35026daea", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 451.591907ms ago: executing program 3 (id=2914): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) write$tun(r1, &(0x7f00000000c0)={@void, @void, @ipv6=@dccp_packet={0x4, 0x6, "3b9376", 0x2ae, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @loopback, {[@dstopts={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x48, {0x3, 0x10, 0x5f, 0x6, [0x6, 0xd45f, 0x7, 0x7fffffff, 0x4, 0x2, 0x6, 0x8000000000000001]}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2f, 0x4, 0x1, 0x1, 0x0, [@private1, @remote]}, @routing={0x6, 0xc, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty, @remote, @loopback]}, @fragment={0x3a, 0x0, 0x1, 0x0, 0x0, 0x4, 0x66}, @hopopts={0x8, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0xfffff800}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0x8, [0x8, 0x7, 0xfff]}}, @pad1, @hao={0xc9, 0x10, @empty}]}, @fragment={0x0, 0x0, 0x9, 0x1, 0x0, 0x2, 0x66}, @dstopts={0x27, 0xa, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x6, 0x80, [0x7fffffff, 0x7fffffffffffffff, 0x0, 0x9f, 0xf, 0x200, 0x2]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x96, [0x48]}}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x5, "7d2a8f", 0xf0, "0283ce"}, "f8e139f7c29e6ca0de21e635738cf964e383ea568c69b9365b464c7b09a80173687f53012aabf4801f38e8e6e9cafd44ae28f22ab1c0c7525a8cd8716c31cf1356e4b676aa745955855b0b091719dc2a2049fc99969081cc842e4e861713b4c94c80e3c488d1afc64662d65fb116ff20883f877aecb054448ef88464c319471cc3ca1c8adea519acd379e559df45f51db609a7068a2f6c51ada6e0a550c946429d8b499627d0ea551dc628eec19c2e9886d4b40208eab5ddf1c8dfd773cc4b58de65baf3ff024c5c095b0c00d3dcf3ad012fb6f2bcbe64a1eead090d158a"}}}}, 0x2d6) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 447.782212ms ago: executing program 1 (id=2915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1fffe00, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0xa6, &(0x7f0000000140)=""/166, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x5, 0x6, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x5, 0x9, 0x3}, {0x3, 0x2, 0x5, 0x4}, {0x4, 0x1, 0xc, 0x2}, {0x0, 0x2, 0x3, 0xa}, {0x3, 0x2, 0x3, 0x8}, {0x5, 0x2, 0x3, 0x7}, {0x4, 0x2, 0x5, 0x1}], 0x10, 0x7ff}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40100000000000061110a0d0000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 396.403419ms ago: executing program 0 (id=2916): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 306.919074ms ago: executing program 1 (id=2917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120800060100000005040004800900010073797a30"], 0x10c}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 297.043101ms ago: executing program 3 (id=2918): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x5, 0x3}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000280)={{r0, &(0x7f0000000040)='(,\'^{^$\x00', 0x10080, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x51c]}, {0x13, 0x1, 0x5}}, 0x8001, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}, 0x1, &(0x7f0000000240)=[{0x3, 0xe5b3, &(0x7f0000000140)='[+(%\x00', &(0x7f0000000180)="c84a0e81e6047a741d8adfda47eabef927cef35ea7cfb14d074c246396fc765eff9f73c2f3de323301a2d18667453e7b15cd69af3abf1a3d4a88f7b1c561c24128e378762f1fa40da750cd63e51a5762a9eb607dcd9c3e99dedeb3b1f9d4b4fa83308fc1acc773f5bdc80768e068fc2988a7e5de2a3e3b8ede48a8cb06809d208bd7e1f5d93d8261f5341157a204e1bff5a95c6edc430cfa86604f584a30f4b56039afa7547c6207c503a596a1ad8cb18c15b3628db662c16a3e50", 0xbb, 0x2}]}) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000300)={@remote, @remote}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={r2, 0x0, 0xa, [0x25, 0x43, 0x6, 0x4, 0x8001, 0x80, 0x6, 0x7, 0xfff, 0x4]}, &(0x7f0000000400)=0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = accept4$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x0, @none}, &(0x7f0000000480)=0xe, 0x80000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000004c0)=0x0) connect$nfc_raw(r7, &(0x7f0000000500)={0x27, r8, 0xffffffffffffffff, 0x7}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x4}}, 0x7, 0x2, 0x800, 0x1, 0x8cd}, &(0x7f0000000600)=0x98) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000640)=0x7fff, 0x4) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000680)) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f00000007c0)={r5, &(0x7f00000006c0)='[+(%\x00', 0x480, &(0x7f0000000700)={@align=0x81, {0x8f0e, 0x7, 0x1, 0xfffffffffffffffa}}, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x82}) syz_emit_ethernet(0x26, &(0x7f0000000800)={@multicast, @remote, @val={@void, {0x8100, 0x5, 0x1}}, {@llc={0x4, {@snap={0xaa, 0x1, "c5", "6574ec", 0x4305, "e7c2caf6013056b758ba71d3"}}}}}, &(0x7f0000000840)={0x0, 0x2, [0x696, 0xab8, 0x70c, 0x500]}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000880)=r9, 0x4) shutdown(r6, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f00000008c0)={0x8000000000000001, 0x10}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000900)=@sack_info={r3, 0x5, 0x9}, 0xc) setsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000000940), 0x4) setsockopt$inet6_udp_int(r9, 0x11, 0xa, &(0x7f0000000980)=0x6, 0x4) connect$bt_l2cap(r1, &(0x7f00000009c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x1}, 0xe) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x2f, 0xe, 0x1, 0x5, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x9ed, 0x80000000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x10001, 0xb, 0xa378, 0x8, 0x1, 0x9, '\x00', r10, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000b40)={@private1, @loopback, 0x7, 0x13}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) getpeername(r11, &(0x7f0000000c00)=@l2tp, &(0x7f0000000c80)=0x80) ioctl$sock_inet_SIOCGIFNETMASK(r11, 0x891b, &(0x7f0000000cc0)={'macvlan0\x00', {0x2, 0x0, @loopback}}) 269.25674ms ago: executing program 0 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 178.864097ms ago: executing program 3 (id=2920): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='.\x00', 0x0, 0x4000, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}}, 0x8000) 177.896139ms ago: executing program 0 (id=2921): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x200000}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000400)=""/4096, 0x33, 0x1000, 0x0, 0xa}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) 151.338027ms ago: executing program 4 (id=2922): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000040)) close(r0) 109.468507ms ago: executing program 0 (id=2923): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000001f00)=""/4105, 0x5e, 0x1009, 0x1}, 0x28) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed981572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134", 0x42b}], 0x1, &(0x7f0000001ac0)}, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x4) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000001f00)=""/4105, 0x5e, 0x1009, 0x1}, 0x28) (async) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$inet(r6, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x42b}], 0x1, &(0x7f0000001ac0)}, 0x4) (async) 54.455142ms ago: executing program 4 (id=2924): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$isdn(0x22, 0x2, 0x24) close(r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000100)={0x10, 0x0, "30fb5f72cea8a9ec614692052998677a"}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) recvfrom(r8, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a3200000000141000001100010000000000000000000000000a"], 0x98}}, 0x4048010) syz_genetlink_get_family_id$nl802154(0x0, r3) close(0x4) 0s ago: executing program 3 (id=2925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f0000060001"], 0x1c}}, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, 0x0, &(0x7f0000000180)) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000880)={{r1, &(0x7f0000000080)='memory.events\x00', 0x2001, &(0x7f00000000c0)={@_ha_fsid={[0x10001, 0xd739]}, {0x7fff, 0x401, 0xa2f, 0x80000001}}, 0x4, &(0x7f0000000140), &(0x7f0000000480)=0x80000001}, 0x3, &(0x7f0000000800)=[{0x0, 0x80, &(0x7f00000004c0)='memory.events\x00', &(0x7f0000000600)="214afeabe3bb1b784d4495e00c493ea34d3406858263a2d25e64838254b9996688e2af41bbae4ade9b2d04f498aa84ff21a7b6fb6cf75641d28589c63748ce632e25b6f3c91f91ec9726f92bba76401ef5e418d6fc2f7ebbd49ede5d5de5dee7ecfcace136db4d4dd8fbe6136fad8e7d9f0496aa4f0c747f7f0502a28bea127fb5d992a925055d2412e63f9ccd2a89227f62d705ed76d4d8907b02a2fe7a55738eabb0e8220ba07b39", 0xa9, 0x30}, {0x1, 0x5, &(0x7f00000006c0)='@\x00', &(0x7f0000000700)="1d4a304bf6f08fa19b323e686c9ed5a29f9ed1ae6fddecb9fb908478a6fe1380be18e038463dfee037933b09aa0ffc84f374c5e457f57e62c8a5da6d41eb99c30522b1a4c32435a60bcb08949efb7162747d0a08720ed4936398c5a997f382e2d9fdc2ee131353f88ab7ab37", 0x6c, 0x10}, {0x1, 0x7, &(0x7f0000000780)='memory.events\x00', &(0x7f00000007c0)="8011cbe7", 0x4, 0x1a}]}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x80010, r5, 0x45ee0000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00fffeffff"], 0x140}}, 0x844) kernel console output (not intermixed with test programs): attributes in process `syz.4.457'. [ 112.880816][ T7638] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.975893][ T7640] tipc: Failed to obtain node identity [ 113.013146][ T7640] tipc: Enabling of bearer rejected, failed to enable media [ 113.067741][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 113.158405][ T7655] bond1: entered allmulticast mode [ 113.296870][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 113.344013][ T7658] syzkaller0: entered promiscuous mode [ 113.350457][ T7658] syzkaller0: entered allmulticast mode [ 113.361873][ T7670] netdevsim netdevsim2 : renamed from netdevsim0 [ 114.850693][ T7713] sit0: entered promiscuous mode [ 114.870140][ T7713] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 114.933258][ T7720] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 115.047795][ T7727] openvswitch: netlink: Missing key (keys=40, expected=100) [ 115.113540][ T7732] ip6tnl0: left promiscuous mode [ 115.133297][ T7734] netlink: 'syz.2.485': attribute type 83 has an invalid length. [ 115.145813][ T7733] block nbd0: NBD_DISCONNECT [ 115.157792][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.164997][ T7732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.170942][ T7736] netlink: 'syz.4.488': attribute type 13 has an invalid length. [ 115.172586][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.187057][ T7732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.228969][ T7732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.275502][ T7736] veth0_macvtap: left promiscuous mode [ 115.302285][ T7736] macvtap0: entered allmulticast mode [ 115.315157][ T7736] macvtap0: refused to change device tx_queue_len [ 115.419524][ T7745] syzkaller0: entered promiscuous mode [ 115.425100][ T7745] syzkaller0: entered allmulticast mode [ 115.461966][ T7741] sctp: [Deprecated]: syz.1.489 (pid 7741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.461966][ T7741] Use struct sctp_sack_info instead [ 116.789384][ T7784] netlink: 'syz.3.499': attribute type 3 has an invalid length. [ 116.842620][ T7790] Cannot find add_set index 0 as target [ 117.054513][ T7810] netlink: 'syz.0.505': attribute type 12 has an invalid length. [ 117.191501][ T7814] netlink: 'syz.3.508': attribute type 23 has an invalid length. [ 117.279411][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.288219][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.294868][ T7820] __nla_validate_parse: 10 callbacks suppressed [ 117.295907][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 117.321103][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.386310][ T7825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.503797][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.535062][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.560379][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.568831][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.626783][ T7825] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.659515][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 117.774010][ T7854] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 117.832782][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'. [ 117.981495][ T7857] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.522'. [ 118.128233][ T7874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.161611][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 118.188589][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 118.235120][ T7883] raw_sendmsg: syz.3.531 forgot to set AF_INET. Fix it! [ 118.243259][ T7883] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 118.442615][ T7894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.532'. [ 118.462057][ T7894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.532'. [ 118.632968][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 118.646046][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.537'. [ 118.791993][ T7917] syz_tun: entered promiscuous mode [ 118.831073][ T7917] netlink: 'syz.3.539': attribute type 6 has an invalid length. [ 119.385587][ T7963] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 119.437765][ T7963] netlink: 'syz.1.546': attribute type 2 has an invalid length. [ 119.590931][ T7972] macsec0: entered promiscuous mode [ 119.624625][ T7972] macsec0: entered allmulticast mode [ 119.962676][ T7999] validate_nla: 1 callbacks suppressed [ 119.962694][ T7999] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 120.061987][ T8007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.584301][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.015719][ T8063] sctp: [Deprecated]: syz.0.578 (pid 8063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.015719][ T8063] Use struct sctp_sack_info instead [ 121.163311][ T8071] x_tables: duplicate underflow at hook 2 [ 121.247758][ T8073] syzkaller0: entered promiscuous mode [ 121.255973][ T8073] syzkaller0: entered allmulticast mode [ 121.430115][ T8092] sctp: [Deprecated]: syz.0.587 (pid 8092) Use of int in maxseg socket option. [ 121.430115][ T8092] Use struct sctp_assoc_value instead [ 121.526016][ T8099] netlink: 'syz.4.589': attribute type 11 has an invalid length. [ 121.547536][ T8099] netlink: 'syz.4.589': attribute type 11 has an invalid length. [ 121.581897][ T8102] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 121.600221][ T8103] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.627667][ T8104] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 121.791304][ T8115] ipt_ECN: cannot use operation on non-tcp rule [ 121.835858][ T8115] netlink: 'syz.1.592': attribute type 24 has an invalid length. [ 121.913158][ T8124] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 122.209929][ T8142] tls_set_device_offload_rx: netdev not found [ 122.452325][ T8157] __nla_validate_parse: 11 callbacks suppressed [ 122.452344][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 122.476753][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 122.732530][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 123.000391][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 123.023504][ T8193] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.612'. [ 123.203841][ T8202] xt_ipcomp: unknown flags 1D [ 123.308834][ T8220] syzkaller0: entered promiscuous mode [ 123.331477][ T8220] syzkaller0: entered allmulticast mode [ 123.497828][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 123.639612][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 123.653953][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 123.664159][ T8246] netlink: zone id is out of range [ 123.687461][ T8246] netlink: get zone limit has 4 unknown bytes [ 123.790612][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 123.889283][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'. [ 123.904157][ T8259] netlink: 'syz.2.631': attribute type 23 has an invalid length. [ 123.959840][ T8259] netlink: 'syz.2.631': attribute type 23 has an invalid length. [ 124.051695][ T8265] tipc: Enabling of bearer rejected, failed to enable media [ 124.494743][ T8293] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 124.699993][ T8311] IPVS: set_ctl: invalid protocol: 99 224.0.0.2:20001 [ 124.930068][ T8332] : renamed from ip_vti0 [ 125.264768][ T8351] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 125.288305][ T8357] netlink: 'syz.0.661': attribute type 2 has an invalid length. [ 125.370635][ T8357] 9: entered promiscuous mode [ 125.594443][ T8375] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 125.626530][ T8321] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 125.626654][ T8378] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 125.689982][ T8378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.728058][ T8383] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 125.734166][ T8383] syzkaller1: Refused to change device type [ 126.086381][ T8402] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 126.979089][ T8468] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 127.001224][ T8468] netlink: 'syz.3.700': attribute type 2 has an invalid length. [ 127.282815][ T8485] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 127.318451][ T8489] veth1_vlan: left promiscuous mode [ 127.684597][ T8506] syzkaller0: entered promiscuous mode [ 127.715140][ T8506] syzkaller0: entered allmulticast mode [ 127.763031][ T8520] xt_hashlimit: size too large, truncated to 1048576 [ 127.773416][ T8511] tipc: Invalid UDP bearer configuration [ 127.773467][ T8511] tipc: Enabling of bearer rejected, failed to enable media [ 128.101088][ T8538] syzkaller0: entered promiscuous mode [ 128.124207][ T8538] syzkaller0: entered allmulticast mode [ 128.125380][ T8546] __nla_validate_parse: 29 callbacks suppressed [ 128.125396][ T8546] netlink: 76 bytes leftover after parsing attributes in process `syz.0.721'. [ 128.253620][ T8550] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 128.401247][ T8553] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 128.451291][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 128.573849][ T5485] veth1_vlan: entered promiscuous mode [ 128.694966][ T8575] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 128.714226][ T8575] bond2 (unregistering): Released all slaves [ 128.960055][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.731'. [ 128.981560][ T8597] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 129.007450][ T8597] netlink: 228 bytes leftover after parsing attributes in process `syz.2.730'. [ 129.420186][ T8629] netlink: 'syz.1.740': attribute type 32 has an invalid length. [ 129.441997][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 129.471992][ T8626] netlink: 104 bytes leftover after parsing attributes in process `syz.2.739'. [ 129.491334][ T8627] netlink: 104 bytes leftover after parsing attributes in process `syz.2.739'. [ 129.514392][ T8629] bond5: option coupled_control: invalid value (52) [ 129.547773][ T8629] bond5 (unregistering): Released all slaves [ 129.873934][ T8654] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.917344][ T8658] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.747'. [ 130.512445][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 130.521408][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 131.444426][ T8702] openvswitch: netlink: Key 12 has unexpected len 49 expected 2 [ 132.822456][ T8654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.843986][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.183946][ T8722] __nla_validate_parse: 3 callbacks suppressed [ 133.183975][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.765'. [ 133.219379][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.784591][ T8749] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.772'. [ 133.845288][ T8749] ip6gre1: entered promiscuous mode [ 133.859716][ T8749] ip6gre1: entered allmulticast mode [ 133.866820][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.874227][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.110062][ T8769] syzkaller0: entered promiscuous mode [ 134.110713][ T8771] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 134.124283][ T8769] syzkaller0: entered allmulticast mode [ 134.155730][ T8771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 134.210685][ T8771] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 134.290733][ T8778] netlink: 'syz.2.783': attribute type 2 has an invalid length. [ 134.347901][ T8780] tipc: Started in network mode [ 134.359891][ T8780] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 134.374152][ T8780] tipc: Enabled bearer , priority 2 [ 134.485951][ T8789] netlink: 9 bytes leftover after parsing attributes in process `syz.1.787'. [ 134.497166][ T8789] gretap0: entered promiscuous mode [ 134.515385][ T8789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.650710][ T8793] netlink: 68 bytes leftover after parsing attributes in process `syz.2.789'. [ 134.720985][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 134.765866][ T8799] bond1 (unregistering): Released all slaves [ 134.812304][ T8807] tipc: Enabled bearer , priority 0 [ 134.837977][ T8809] tipc: Enabling of bearer rejected, already enabled [ 134.886859][ T8811] netlink: 768 bytes leftover after parsing attributes in process `syz.1.791'. [ 134.971981][ T8803] syzkaller0: entered promiscuous mode [ 134.977676][ T8803] syzkaller0: entered allmulticast mode [ 134.983745][ T8803] tipc: Resetting bearer [ 135.092308][ T8807] tipc: Resetting bearer [ 135.234104][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 135.292871][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 136.369441][ T8807] tipc: Disabling bearer [ 136.385510][ T8838] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 136.413852][ T8849] vlan2: entered allmulticast mode [ 136.429156][ T8849] bridge4: entered allmulticast mode [ 136.481331][ T8851] bridge4: port 1(veth7) entered blocking state [ 136.490465][ T8851] bridge4: port 1(veth7) entered disabled state [ 136.496968][ T8851] veth7: entered allmulticast mode [ 136.505048][ T8851] veth7: entered promiscuous mode [ 136.515733][ T5923] tipc: Node number set to 10463914 [ 136.532119][ T5825] tipc: Node number set to 2128143667 [ 136.666730][ T8880] netlink: 147240 bytes leftover after parsing attributes in process `syz.1.807'. [ 136.712338][ T8889] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.809'. [ 136.788347][ T8893] lo: entered promiscuous mode [ 136.793349][ T8893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.003019][ T8911] syz.2.815 uses old SIOCAX25GETINFO [ 137.017708][ T8911] netlink: 'syz.2.815': attribute type 5 has an invalid length. [ 137.042261][ T8911] geneve2: entered promiscuous mode [ 137.062033][ T8911] geneve2: entered allmulticast mode [ 137.084735][ T8914] syzkaller0: entered promiscuous mode [ 137.096604][ T8914] syzkaller0: entered allmulticast mode [ 137.119570][ T8914] lo speed is unknown, defaulting to 1000 [ 137.127250][ T8916] xt_hashlimit: size too large, truncated to 1048576 [ 137.254637][ T8922] bridge0: port 3(ipvlan2) entered blocking state [ 137.266735][ T8922] bridge0: port 3(ipvlan2) entered disabled state [ 137.275356][ T8922] ipvlan2: entered allmulticast mode [ 137.281272][ T8922] bridge0: entered allmulticast mode [ 137.294028][ T8922] ipvlan2: left allmulticast mode [ 137.303708][ T8922] bridge0: left allmulticast mode [ 137.338649][ T8923] 8021q: VLANs not supported on lo [ 137.344326][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.366640][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.983041][ T8973] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 137.991670][ T8973] netlink: zone id is out of range [ 137.998817][ T8973] netlink: zone id is out of range [ 138.003960][ T8973] netlink: zone id is out of range [ 138.048512][ T8973] netlink: zone id is out of range [ 138.053677][ T8973] netlink: zone id is out of range [ 138.069557][ T8981] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 138.105398][ T8973] netlink: zone id is out of range [ 138.111358][ T8973] netlink: zone id is out of range [ 138.116675][ T8973] netlink: set zone limit has 4 unknown bytes [ 138.408507][ T8997] Bluetooth: MGMT ver 1.23 [ 138.418298][ T8997] __nla_validate_parse: 13 callbacks suppressed [ 138.418314][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 138.452385][ T8990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.842'. [ 138.472126][ T8992] syz.0.845 (8992) used greatest stack depth: 15520 bytes left [ 138.793971][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.852'. [ 138.890294][ T9030] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 138.898092][ T9030] netlink: 'syz.1.855': attribute type 2 has an invalid length. [ 138.908895][ T9030] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 138.918059][ T9030] netlink: 'syz.1.855': attribute type 3 has an invalid length. [ 138.925726][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 138.968204][ T9048] netlink: 'syz.3.858': attribute type 5 has an invalid length. [ 139.158934][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'. [ 139.167970][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'. [ 139.542995][ T9026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.695085][ T9027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.714642][ T9069] netlink: 256 bytes leftover after parsing attributes in process `syz.2.864'. [ 141.819071][ T9106] netlink: 'syz.0.866': attribute type 62 has an invalid length. [ 141.888543][ T9112] delete_channel: no stack [ 141.923753][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 141.948888][ T9117] syz_tun: entered allmulticast mode [ 141.972446][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 141.991767][ T9117] dvmrp8: entered allmulticast mode [ 142.009925][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 142.012210][ T9111] : entered promiscuous mode [ 142.051094][ T9119] netlink: Unknown conntrack attr (0) [ 142.056920][ T9117] dvmrp8: left allmulticast mode [ 142.110547][ T9116] syz_tun: left allmulticast mode [ 142.861318][ T9195] syzkaller0: entered promiscuous mode [ 142.867125][ T9195] syzkaller0: entered allmulticast mode [ 145.660311][ T9168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.836929][ T9216] netlink: 'syz.3.898': attribute type 2 has an invalid length. [ 145.841256][ T9211] ip6gre1: entered promiscuous mode [ 145.850927][ T9211] ip6gre1: entered allmulticast mode [ 145.865863][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.885416][ T9218] __nla_validate_parse: 6 callbacks suppressed [ 145.885434][ T9218] netlink: 512 bytes leftover after parsing attributes in process `syz.2.895'. [ 145.943508][ T9225] netlink: 'syz.0.900': attribute type 12 has an invalid length. [ 145.951668][ T9225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.900'. [ 146.000876][ T9224] netlink: 'syz.0.900': attribute type 12 has an invalid length. [ 146.024231][ T9224] netlink: 132 bytes leftover after parsing attributes in process `syz.0.900'. [ 146.057056][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.067445][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.084675][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.115265][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.157533][ T5826] Bluetooth: hci4: link tx timeout [ 146.163879][ T5826] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.360807][ T9243] syzkaller0: entered promiscuous mode [ 146.366368][ T9243] syzkaller0: entered allmulticast mode [ 146.441650][ T9250] syzkaller0: entered promiscuous mode [ 146.447682][ T9250] syzkaller0: entered allmulticast mode [ 146.763204][ T9268] netlink: 'syz.2.917': attribute type 17 has an invalid length. [ 146.771239][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 146.782016][ T9268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 146.844660][ T9268] gretap0: entered promiscuous mode [ 146.887872][ T9268] gretap0: left promiscuous mode [ 147.033612][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.065539][ T9293] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 147.073832][ T9293] netlink: 'syz.2.926': attribute type 2 has an invalid length. [ 147.259801][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 147.269004][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 147.478282][ T9330] netlink: 128 bytes leftover after parsing attributes in process `syz.2.935'. [ 147.490519][ T9330] netlink: 128 bytes leftover after parsing attributes in process `syz.2.935'. [ 147.507592][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.937'. [ 148.202542][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 148.905636][ T9418] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 149.335018][ T9450] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 149.436299][ T9450] bond1: entered promiscuous mode [ 149.445880][ T9450] bond1: entered allmulticast mode [ 149.451514][ T9450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.461650][ T9447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.798749][ T9482] xfrm0: entered promiscuous mode [ 149.804436][ T9482] xfrm0: entered allmulticast mode [ 149.829763][ T9480] syzkaller0: entered promiscuous mode [ 149.840742][ T9480] syzkaller0: entered allmulticast mode [ 149.863835][ T9480] tipc: Started in network mode [ 149.881936][ T9480] tipc: Node identity ee0bb72851b9, cluster identity 4711 [ 149.908913][ T9480] tipc: Enabled bearer , priority 0 [ 149.958787][ T9478] tipc: Resetting bearer [ 149.976626][ T9478] tipc: Disabling bearer [ 150.027929][ T9492] team0 (unregistering): Port device team_slave_0 removed [ 150.096937][ T9492] team0 (unregistering): Port device team_slave_1 removed [ 150.476463][ T9520] batman_adv: batadv0: Adding interface: dummy0 [ 150.491298][ T9520] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.526026][ T9522] netlink: 'syz.3.983': attribute type 2 has an invalid length. [ 150.546164][ T9520] batman_adv: batadv0: Interface activated: dummy0 [ 150.608277][ T9526] batadv0: mtu less than device minimum [ 150.615509][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.627443][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.639036][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.650757][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.662482][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.674134][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.685820][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.697560][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.709276][ T9526] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.792262][ T9529] gtp0: entered promiscuous mode [ 150.964817][ T9548] __nla_validate_parse: 9 callbacks suppressed [ 150.964834][ T9548] netlink: 64 bytes leftover after parsing attributes in process `syz.2.988'. [ 151.130097][ T9556] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 151.191154][ T9560] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 151.220951][ T9566] netlink: 'syz.1.992': attribute type 1 has an invalid length. [ 151.237697][ T9566] netlink: 96 bytes leftover after parsing attributes in process `syz.1.992'. [ 151.258026][ T9566] netlink: 1 bytes leftover after parsing attributes in process `syz.1.992'. [ 151.287157][ T9566] netlink: 'syz.1.992': attribute type 1 has an invalid length. [ 151.337995][ T9566] netlink: 618 bytes leftover after parsing attributes in process `syz.1.992'. [ 151.793928][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 151.822025][ T9613] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 151.831353][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1005'. [ 151.903093][ T9611] geneve2: entered promiscuous mode [ 151.908593][ T9611] geneve2: entered allmulticast mode [ 151.936490][ T9613] bond1: (slave gretap1): making interface the new active one [ 151.951741][ T9613] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 151.962213][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 151.964580][ T7960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.011541][ T7960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.028158][ T9627] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1008'. [ 152.044780][ T9613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.087523][ T7960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.099284][ T7960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.273831][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1013'. [ 152.362321][ T9656] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1016'. [ 152.411912][ T9657] vlan2: entered allmulticast mode [ 152.492396][ T9663] rdma_rxe: rxe_newlink: failed to add lo [ 152.541969][ T9663] bond6: option min_links: invalid value (18446744073709551614) [ 152.549832][ T9663] bond6: option min_links: allowed values 0 - 2147483647 [ 152.559008][ T9663] bond6 (unregistering): Released all slaves [ 152.810564][ T9682] netlink: 'syz.1.1022': attribute type 2 has an invalid length. [ 153.142232][ T9706] sctp: [Deprecated]: syz.4.1027 (pid 9706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.142232][ T9706] Use struct sctp_sack_info instead [ 153.163305][ T9709] netlink: 'syz.1.1028': attribute type 27 has an invalid length. [ 153.206314][ T9708] sctp: [Deprecated]: syz.4.1027 (pid 9708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.206314][ T9708] Use struct sctp_sack_info instead [ 153.460645][ T9727] syzkaller0: entered promiscuous mode [ 153.487452][ T9727] syzkaller0: entered allmulticast mode [ 153.550802][ T9727] tipc: Started in network mode [ 153.555825][ T9727] tipc: Node identity 76ae6813697d, cluster identity 4711 [ 153.584094][ T9727] tipc: Enabled bearer , priority 0 [ 153.615085][ T9737] tap0: tun_chr_ioctl cmd 1074025676 [ 153.634153][ T9737] tap0: owner set to 0 [ 153.733886][ T9748] tipc: Resetting bearer [ 153.753092][ T9750] @0: renamed from bond_slave_1 (while UP) [ 153.810760][ T9725] tipc: Resetting bearer [ 153.895664][ T9725] tipc: Disabling bearer [ 153.973866][ T9766] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 154.123840][ T9766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.189269][ T9783] IPVS: ip_vs_add_dest(): server weight less than zero [ 154.206537][ T9] IPVS: starting estimator thread 0... [ 154.307515][ T9785] IPVS: using max 34 ests per chain, 81600 per kthread [ 154.602739][ T9789] syzkaller0: entered promiscuous mode [ 154.609013][ T9789] syzkaller0: entered allmulticast mode [ 154.692378][ T9817] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 155.880696][ T9819] veth0: entered promiscuous mode [ 155.886417][ T9822] veth0: left promiscuous mode [ 156.239857][ T9857] __nla_validate_parse: 3 callbacks suppressed [ 156.239874][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1061'. [ 156.382191][ T9866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1066'. [ 156.527087][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 156.648698][ T9880] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1073'. [ 156.823913][ T9898] netlink: 'syz.1.1078': attribute type 32 has an invalid length. [ 156.853356][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 156.939812][ T9898] bond6: Setting coupled_control to off (0) [ 156.962258][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 157.048069][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 157.065920][ T9927] net_ratelimit: 21 callbacks suppressed [ 157.065938][ T9927] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 157.079458][ T9928] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 157.101575][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1083'. [ 157.134428][ T9928] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 157.298991][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'. [ 157.375246][ T9948] netlink: 'syz.3.1090': attribute type 21 has an invalid length. [ 157.384893][ T9945] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1089'. [ 157.428337][ T9954] netlink: 'syz.3.1090': attribute type 21 has an invalid length. [ 157.436286][ T9954] netlink: 'syz.3.1090': attribute type 5 has an invalid length. [ 157.471050][ T9948] netlink: 'syz.3.1090': attribute type 5 has an invalid length. [ 157.554450][ T9958] bridge0: port 3(wlan0) entered blocking state [ 157.566823][ T9958] bridge0: port 3(wlan0) entered disabled state [ 157.574638][ T9958] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 157.631491][ T9967] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 158.001818][ T9985] syzkaller0: entered promiscuous mode [ 158.012913][ T9991] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 158.027585][ T9985] syzkaller0: entered allmulticast mode [ 158.041040][ T9988] SET target dimension over the limit! [ 158.259351][T10009] sctp: [Deprecated]: syz.3.1107 (pid 10009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.259351][T10009] Use struct sctp_sack_info instead [ 158.294396][T10009] netlink: 'syz.3.1107': attribute type 1 has an invalid length. [ 158.313733][T10007] netlink: 'syz.1.1108': attribute type 1 has an invalid length. [ 158.433321][T10009] bond2: entered promiscuous mode [ 158.471425][T10009] bond2: entered allmulticast mode [ 158.477097][T10009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.589127][T10017] gretap1: entered promiscuous mode [ 158.617464][T10020] erspan2: entered allmulticast mode [ 158.626748][T10020] bond2: (slave erspan2): making interface the new active one [ 158.635574][T10020] erspan2: entered promiscuous mode [ 158.643455][T10020] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 158.687070][T10023] vlan3: entered allmulticast mode [ 158.705543][T10023] bond7: entered allmulticast mode [ 158.732847][T10029] macvlan2: entered promiscuous mode [ 158.738776][T10029] macvlan2: entered allmulticast mode [ 158.745598][T10029] bond7: entered promiscuous mode [ 158.754429][T10029] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.764369][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 158.781331][T10029] bond7: left promiscuous mode [ 158.898948][ T5485] veth0_macvtap: left promiscuous mode [ 159.772795][T10105] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 159.863012][T10124] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 159.920090][T10118] lo speed is unknown, defaulting to 1000 [ 159.934761][T10118] ip6gretap0 speed is unknown, defaulting to 1000 [ 161.134867][T10202] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 161.243978][T10212] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 161.317011][T10221] __nla_validate_parse: 18 callbacks suppressed [ 161.317030][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 161.340709][T10212] bond3: entered promiscuous mode [ 161.346574][T10212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.355198][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 161.369285][T10223] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1159'. [ 161.379726][T10223] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1159'. [ 161.398153][T10226] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1159'. [ 161.407972][T10226] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1159'. [ 161.418555][T10216] netlink: 'syz.0.1158': attribute type 4 has an invalid length. [ 161.679955][T10247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.691952][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1164'. [ 161.702079][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1164'. [ 161.733005][T10248] syzkaller0: entered promiscuous mode [ 161.740958][T10248] syzkaller0: entered allmulticast mode [ 161.796155][ T795] IPVS: starting estimator thread 0... [ 161.897926][T10259] IPVS: using max 34 ests per chain, 81600 per kthread [ 161.987122][T10271] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 162.052931][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 162.112654][T10276] bond4: (slave bridge1): Enslaving as a backup interface with an up link [ 162.233011][T10286] sctp: [Deprecated]: syz.3.1176 (pid 10286) Use of int in max_burst socket option. [ 162.233011][T10286] Use struct sctp_assoc_value instead [ 162.285626][T10291] lo speed is unknown, defaulting to 1000 [ 162.318973][T10291] ip6gretap0 speed is unknown, defaulting to 1000 [ 162.422991][T10302] netlink: 'syz.3.1183': attribute type 3 has an invalid length. [ 162.431829][T10302] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1183'. [ 162.569554][T10306] netlink: 'syz.3.1184': attribute type 1 has an invalid length. [ 162.596261][T10308] gretap0: entered promiscuous mode [ 162.636340][T10308] gretap0: left promiscuous mode [ 162.690917][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.741493][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.792292][T10308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.810043][ T795] lo speed is unknown, defaulting to 1000 [ 162.837859][ T795] syz0: Port: 1 Link ACTIVE [ 162.866074][ T5923] ip6gretap0 speed is unknown, defaulting to 1000 [ 162.877314][ T5923] syz2: Port: 1 Link ACTIVE [ 162.964077][T10318] syzkaller0: entered promiscuous mode [ 162.973665][T10318] syzkaller0: entered allmulticast mode [ 164.208093][T10346] netlink: 'syz.0.1195': attribute type 4 has an invalid length. [ 164.686984][T10381] macvlan0: entered promiscuous mode [ 164.703020][T10377] syzkaller0: entered promiscuous mode [ 164.709059][T10377] syzkaller0: entered allmulticast mode [ 164.716583][T10377] tipc: Enabled bearer , priority 0 [ 164.885877][T10396] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 165.278273][T10426] netlink: 'syz.1.1218': attribute type 8 has an invalid length. [ 165.446882][T10374] tipc: Resetting bearer [ 165.485430][T10374] tipc: Disabling bearer [ 165.505570][T10445] erspan0: entered allmulticast mode [ 165.514065][T10445] netlink: 'syz.3.1225': attribute type 2 has an invalid length. [ 165.522875][T10445] netlink: 'syz.3.1225': attribute type 2 has an invalid length. [ 165.605876][T10455] tipc: Enabling of bearer rejected, failed to enable media [ 165.651699][T10459] x9: renamed from bridge_slave_0 (while UP) [ 165.770699][T10468] netlink: 'syz.3.1230': attribute type 64 has an invalid length. [ 165.857903][ T148] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 166.027965][T10482] team0: Port device dummy0 removed [ 166.284691][T10499] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 166.317235][T10499] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 166.448094][T10517] __nla_validate_parse: 14 callbacks suppressed [ 166.448115][T10517] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1244'. [ 166.493653][T10516] syzkaller0: entered promiscuous mode [ 166.508091][T10516] syzkaller0: entered allmulticast mode [ 166.724221][T10543] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 166.732202][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 167.008795][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1259'. [ 167.132833][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.153808][T10579] can: request_module (can-proto-0) failed. [ 167.179287][T10584] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1266'. [ 167.211371][T10584] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1266'. [ 167.230183][T10584] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1266'. [ 167.259087][T10590] delete_channel: no stack [ 167.284789][T10587] 8021q: VLANs not supported on ip6tnl0 [ 167.464594][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 167.487398][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1270'. [ 167.544427][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'. [ 167.561686][T10611] netlink: 'syz.0.1274': attribute type 16 has an invalid length. [ 167.585025][T10611] netlink: 'syz.0.1274': attribute type 17 has an invalid length. [ 167.650492][T10611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.678678][T10616] syzkaller0: entered promiscuous mode [ 167.684364][T10616] syzkaller0: entered allmulticast mode [ 167.718350][T10621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 167.790428][T10631] netlink: 'syz.0.1280': attribute type 83 has an invalid length. [ 168.235384][T10665] bond3: entered promiscuous mode [ 168.242456][T10665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.411222][T10683] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 168.613386][ T796] IPVS: starting estimator thread 0... [ 168.620248][T10692] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.631541][T10698] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.709095][T10699] IPVS: using max 37 ests per chain, 88800 per kthread [ 168.721834][T10701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.841354][T10701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.911584][T10701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.994083][T10701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.999061][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 169.220333][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.284612][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.300500][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.327330][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.018464][T10785] validate_nla: 2 callbacks suppressed [ 170.018484][T10785] netlink: 'syz.0.1326': attribute type 29 has an invalid length. [ 170.087877][T10785] netlink: 'syz.0.1326': attribute type 29 has an invalid length. [ 170.112462][T10790] xt_l2tp: missing protocol rule (udp|l2tpip) [ 170.132126][T10792] netlink: 'syz.1.1330': attribute type 13 has an invalid length. [ 170.160313][T10794] nft_compat: unsupported protocol 0 [ 170.180630][T10792] syz_tun: refused to change device tx_queue_len [ 170.263508][T10803] Cannot find map_set index 65533 as target [ 170.268517][T10804] netlink: 'syz.1.1334': attribute type 11 has an invalid length. [ 170.808743][T10842] syzkaller0: entered promiscuous mode [ 170.849516][T10842] syzkaller0: entered allmulticast mode [ 171.290070][T10857] batman_adv: batadv0: Interface deactivated: dummy0 [ 171.519035][T10857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.548014][T10857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.923775][T10894] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 171.963905][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.991914][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.007410][T10897] __nla_validate_parse: 18 callbacks suppressed [ 172.007427][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 172.043419][T10894] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 172.059210][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 172.102874][T10903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.222498][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.232197][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 172.245224][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.267833][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 172.324802][T10921] netlink: 'syz.2.1360': attribute type 10 has an invalid length. [ 172.333230][T10921] bridge_slave_1: left allmulticast mode [ 172.339061][T10921] bridge_slave_1: left promiscuous mode [ 172.344787][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.424400][T10921] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.577004][T10937] xt_hashlimit: size too large, truncated to 1048576 [ 172.663523][T10938] tipc: Failed to obtain node identity [ 172.698647][T10952] openvswitch: netlink: Multiple metadata blocks provided [ 172.723902][T10938] tipc: Enabling of bearer rejected, failed to enable media [ 172.950199][T10964] x_tables: duplicate underflow at hook 2 [ 172.960687][T10961] openvswitch: netlink: IPv4 tunnel dst address is zero [ 173.107113][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 173.306305][T10979] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 173.328842][T10939] lec:lec_atm_close: lec0: Shut down! [ 173.384316][T10939] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.603449][T11000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1377'. [ 173.744518][T11007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.884913][T11014] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 174.456249][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 174.500388][T11050] openvswitch: netlink: Flow actions attr not present in new flow. [ 174.534312][T11054] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1391'. [ 174.745072][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 174.775443][T11074] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 174.797500][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1397'. [ 174.845662][T11080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 174.852887][T11079] xfrm2: entered promiscuous mode [ 174.875286][T11079] xfrm2: entered allmulticast mode [ 174.915899][T11080] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 174.970163][T11086] nft_compat: unsupported protocol 0 [ 175.526104][T11127] syzkaller0: entered promiscuous mode [ 175.542990][T11127] syzkaller0: entered allmulticast mode [ 175.672849][T11136] gre1: entered promiscuous mode [ 175.830708][T11144] netlink: 'syz.1.1412': attribute type 39 has an invalid length. [ 175.835377][T11143] netlink: 'syz.3.1413': attribute type 9 has an invalid length. [ 176.123279][T11157] syzkaller0: entered promiscuous mode [ 176.131645][T11157] syzkaller0: entered allmulticast mode [ 176.204574][T11161] netlink: 'syz.0.1416': attribute type 4 has an invalid length. [ 176.602132][T11188] syzkaller0: entered promiscuous mode [ 176.617308][T11188] syzkaller0: entered allmulticast mode [ 176.833773][T11196] syzkaller0: entered promiscuous mode [ 176.842377][T11196] syzkaller0: entered allmulticast mode [ 178.272924][ T5485] lec:lec_start_xmit: lec0:No lecd attached [ 178.295114][T11228] gre2: entered promiscuous mode [ 178.307324][T11228] gre2: entered allmulticast mode [ 178.444434][T11254] __nla_validate_parse: 12 callbacks suppressed [ 178.444453][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 178.591442][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.601635][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.613767][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.650529][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.680799][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.717607][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.735163][T11277] tipc: New replicast peer: 255.255.255.255 [ 178.741702][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.745824][T11277] tipc: Enabled bearer , priority 10 [ 178.761422][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.787937][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.817946][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.846907][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.862160][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.875309][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.897563][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.917069][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.937663][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.947092][T11271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.978356][T11295] netlink: 'syz.1.1445': attribute type 6 has an invalid length. [ 179.072789][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 179.174581][T11309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1450'. [ 179.184826][T11310] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1450'. [ 179.295398][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 179.393854][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 179.430597][T11331] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1454'. [ 179.852774][T11366] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1465'. [ 179.876780][T11366] netlink: 'syz.0.1465': attribute type 9 has an invalid length. [ 179.880693][T10888] tipc: Node number set to 3216160552 [ 180.052663][T11382] .: renamed from bridge_slave_1 (while UP) [ 180.098456][T11386] xt_hashlimit: size too large, truncated to 1048576 [ 180.163106][T11398] netlink: 'syz.2.1472': attribute type 3 has an invalid length. [ 180.292969][T11410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'. [ 180.313164][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'. [ 180.562392][T11431] Bluetooth: MGMT ver 1.23 [ 180.566902][T11431] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 180.716006][T11439] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 180.753976][T11439] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 180.830968][T11445] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 180.839291][T11445] bridge0: port 3(wlan0) entered disabled state [ 180.851997][T11445] bridge_slave_0: left promiscuous mode [ 180.860976][T11445] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.456226][T11492] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 181.565242][T11500] gtp0: entered promiscuous mode [ 181.578580][T11500] gtp0: entered allmulticast mode [ 181.771284][T11526] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 181.779481][T11526] netlink: 'syz.0.1510': attribute type 3 has an invalid length. [ 181.787410][T11526] NCSI netlink: No device for ifindex 813332851 [ 181.841687][T11528] xt_hashlimit: size too large, truncated to 1048576 [ 182.164120][T11551] netlink: 'syz.3.1517': attribute type 39 has an invalid length. [ 182.423892][T11573] delete_channel: no stack [ 182.461882][T11576] x9: left allmulticast mode [ 182.475689][T11576] x9: left promiscuous mode [ 182.488923][T11576] bridge0: port 1(1x9) entered disabled state [ 182.521105][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.533912][T11576] bond0: (slave bond_slave_0): Releasing backup interface [ 182.546945][T11576] bond0: (slave c@0): Releasing backup interface [ 182.575891][T11576] team0: Port device team_slave_0 removed [ 182.601333][T11576] team0: Port device team_slave_1 removed [ 182.653055][T11578] netlink: 'syz.1.1526': attribute type 13 has an invalid length. [ 182.662511][T11585] netlink: 'syz.1.1526': attribute type 13 has an invalid length. [ 183.026406][T11610] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 183.271134][T11635] netlink: 'syz.1.1543': attribute type 4 has an invalid length. [ 183.280315][T11635] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 183.289403][T11635] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 183.728297][T11670] __nla_validate_parse: 19 callbacks suppressed [ 183.728316][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 183.877332][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 183.885806][ C1] lec:lec_tx_timeout: lec0 [ 183.890507][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 183.902692][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 183.961459][T11683] tipc: Enabling of bearer rejected, already enabled [ 184.161606][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1564'. [ 184.167697][T11700] tipc: Enabled bearer , priority 0 [ 184.234724][T11700] syzkaller0: entered promiscuous mode [ 184.241288][T11700] syzkaller0: entered allmulticast mode [ 184.249547][T11700] tipc: Resetting bearer [ 184.754138][ T36] tipc: Resetting bearer [ 184.810763][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 184.921088][T11699] tipc: Resetting bearer [ 186.246753][T11699] tipc: Disabling bearer [ 186.265831][T10884] tipc: Node number set to 533948435 [ 186.467430][T11761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1580'. [ 186.560054][T11774] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 186.684172][T11787] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 186.699295][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.713970][T11778] batman_adv: batadv0: Interface activated: dummy0 [ 186.728466][T11778] net_ratelimit: 51 callbacks suppressed [ 186.728483][T11778] batadv0: mtu less than device minimum [ 186.742561][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.754141][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.765913][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.777678][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.789372][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.801062][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.812737][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.824372][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.836204][T11778] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.880935][T11784] xt_HMARK: proto mask must be zero with L3 mode [ 187.013159][T11788] bridge2: entered promiscuous mode [ 187.052869][T11788] bridge2: entered allmulticast mode [ 187.177517][T11815] can: request_module (can-proto-0) failed. [ 187.235161][T11828] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.342154][T11835] netlink: 'syz.2.1598': attribute type 8 has an invalid length. [ 187.350432][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 187.453651][T11838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1600'. [ 188.416647][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 188.565868][T11869] "syz.2.1606" (11869) uses obsolete ecb(arc4) skcipher [ 188.897232][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 188.905331][ C1] lec:lec_tx_timeout: lec0 [ 188.910420][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 189.422627][T11889] "syz.2.1607" (11889) uses obsolete ecb(arc4) skcipher [ 189.431275][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 189.493657][T11891] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1607'. [ 190.078327][T11808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.243798][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1608'. [ 190.400325][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 190.512078][T11913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.558297][T11924] tipc: Enabled bearer , priority 0 [ 190.582664][T11925] syzkaller0: entered promiscuous mode [ 190.608950][T11925] syzkaller0: entered allmulticast mode [ 190.701738][T11925] tipc: Resetting bearer [ 190.717854][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1621'. [ 190.753177][T11925] tipc: Disabling bearer [ 190.911358][T11950] xt_TCPMSS: Only works on TCP SYN packets [ 190.929645][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 191.165076][T11979] netlink: 'syz.1.1631': attribute type 9 has an invalid length. [ 191.167098][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1632'. [ 191.238910][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 191.245002][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 191.251335][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 191.634148][T12006] netlink: 'syz.1.1640': attribute type 21 has an invalid length. [ 191.637820][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 191.651275][T12006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1640'. [ 191.660373][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1639'. [ 191.684732][T11998] netlink: 'syz.4.1638': attribute type 29 has an invalid length. [ 191.755093][T11999] netlink: 'syz.4.1638': attribute type 29 has an invalid length. [ 191.781012][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.793588][T11998] netlink: 'syz.4.1638': attribute type 29 has an invalid length. [ 191.813336][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.836918][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.846020][T11999] netlink: 'syz.4.1638': attribute type 29 has an invalid length. [ 191.861535][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.882333][T12015] team0: Device ip6gre1 is of different type [ 191.911238][T11998] netlink: 'syz.4.1638': attribute type 29 has an invalid length. [ 191.921733][T11999] netlink: 'syz.4.1638': attribute type 29 has an invalid length. [ 191.930261][T11998] netlink: 'syz.4.1638': attribute type 29 has an invalid length. [ 192.026134][T12019] net_ratelimit: 13 callbacks suppressed [ 192.026153][T12019] openvswitch: netlink: Flow actions attr not present in new flow. [ 192.246624][T12034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.319021][T12038] macvtap1: entered promiscuous mode [ 192.324996][T12038] vlan0: entered promiscuous mode [ 192.331933][T12038] macvtap1: entered allmulticast mode [ 192.338208][T12038] vlan0: entered allmulticast mode [ 192.343528][T12038] veth0_vlan: entered allmulticast mode [ 192.361923][T12034] vlan4: entered promiscuous mode [ 192.378529][T12034] bond5: entered promiscuous mode [ 192.387727][T12034] vlan4: entered allmulticast mode [ 192.397956][T12034] bond5: entered allmulticast mode [ 192.555611][T12060] tipc: Enabled bearer , priority 0 [ 192.604584][T12055] ip6gretap0 speed is unknown, defaulting to 1000 [ 193.062931][T12097] ip6gretap0 speed is unknown, defaulting to 1000 [ 193.290071][T12108] validate_nla: 31 callbacks suppressed [ 193.290090][T12108] netlink: 'syz.1.1670': attribute type 3 has an invalid length. [ 193.298002][T12114] netlink: zone id is out of range [ 193.308865][T12114] netlink: zone id is out of range [ 193.313987][T12114] netlink: zone id is out of range [ 193.319331][T12114] netlink: zone id is out of range [ 193.334387][T12114] netlink: zone id is out of range [ 193.339882][T12114] netlink: zone id is out of range [ 193.340701][T12108] netlink: 'syz.1.1670': attribute type 3 has an invalid length. [ 193.345105][T12114] netlink: zone id is out of range [ 193.364189][T12114] netlink: zone id is out of range [ 193.370120][T12114] netlink: zone id is out of range [ 193.503131][T12129] sctp: [Deprecated]: syz.2.1676 (pid 12129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.503131][T12129] Use struct sctp_sack_info instead [ 193.520699][T12129] sctp: [Deprecated]: syz.2.1676 (pid 12129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.520699][T12129] Use struct sctp_sack_info instead [ 193.917289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 193.925408][ C1] lec:lec_tx_timeout: lec0 [ 193.930349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.146111][T12180] netlink: 'syz.4.1688': attribute type 23 has an invalid length. [ 194.284001][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477865][T12200] __nla_validate_parse: 50 callbacks suppressed [ 194.477887][T12200] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1695'. [ 194.580478][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 194.639985][T12223] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1703'. [ 194.658760][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 194.747030][T12230] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 1, id = 0 [ 194.766334][T12228] dvmrp0: entered allmulticast mode [ 194.815239][T12237] tipc: Failed to remove unknown binding: 66,1,1/533948435:4019938672/4019938674 [ 194.828041][T12239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1707'. [ 194.869227][T12237] tipc: Failed to remove unknown binding: 66,1,1/533948435:4019938672/4019938674 [ 194.893506][T12239] erspan1: entered allmulticast mode [ 194.957952][T12244] netlink: 'syz.1.1708': attribute type 16 has an invalid length. [ 194.966663][T12244] netlink: 'syz.1.1708': attribute type 17 has an invalid length. [ 194.998269][T12244] gretap0: left promiscuous mode [ 195.166717][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 195.238663][T12262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1713'. [ 195.360172][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 195.585436][T12279] netlink: 'syz.0.1719': attribute type 1 has an invalid length. [ 195.643926][T12279] bond4: entered promiscuous mode [ 195.664174][T12279] bond4: entered allmulticast mode [ 195.680145][T12279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.726187][T12283] erspan1: entered allmulticast mode [ 195.753080][T12283] bond4: (slave erspan1): making interface the new active one [ 195.778690][T12283] erspan1: entered promiscuous mode [ 195.790353][T12283] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 196.369496][T12326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1728'. [ 196.407771][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1730'. [ 196.658987][T12340] syzkaller1: entered promiscuous mode [ 196.668576][T12340] syzkaller1: entered allmulticast mode [ 196.717607][T12340] syzkaller1: left promiscuous mode [ 196.723384][T12340] syzkaller1: left allmulticast mode [ 196.921808][T12368] vlan4: entered allmulticast mode [ 196.927153][T12368] erspan0: entered allmulticast mode [ 196.936976][T12368] bridge0: port 3(vlan4) entered blocking state [ 196.943793][T12368] bridge0: port 3(vlan4) entered disabled state [ 196.952502][T12368] vlan4: entered promiscuous mode [ 196.981969][T12368] erspan0: entered promiscuous mode [ 197.377539][T12403] tipc: Enabled bearer , priority 10 [ 197.568787][T12416] syzkaller1: entered promiscuous mode [ 197.578682][T12416] syzkaller1: entered allmulticast mode [ 197.678751][T12423] dvmrp1: entered allmulticast mode [ 198.004929][T12454] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 198.013245][T12454] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 198.022101][T12454] netlink: 'syz.4.1765': attribute type 8 has an invalid length. [ 198.816817][T12514] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 198.841890][T12514] bond4 (unregistering): Released all slaves [ 198.848000][T12517] net_ratelimit: 138 callbacks suppressed [ 198.848017][T12517] openvswitch: netlink: Key type 220 is out of range max 32 [ 198.937339][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 198.945427][ C1] lec:lec_tx_timeout: lec0 [ 198.950508][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.106707][T12531] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.338277][T12551] syzkaller0: entered promiscuous mode [ 199.344840][T12551] syzkaller0: entered allmulticast mode [ 199.500026][T12560] __nla_validate_parse: 20 callbacks suppressed [ 199.500045][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 199.509909][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 199.516416][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 199.678657][T12570] netlink: 'syz.0.1802': attribute type 2 has an invalid length. [ 199.690448][T12570] xt_TCPMSS: Only works on TCP SYN packets [ 199.832080][T12582] netlink: 'syz.1.1806': attribute type 15 has an invalid length. [ 199.864717][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 199.882711][ T49] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 2816 - 0 [ 199.882830][T12582] netlink: 'syz.1.1806': attribute type 15 has an invalid length. [ 199.898610][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.917112][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 199.917107][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.917146][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 199.939744][T12587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.129239][T12594] geneve2: entered promiscuous mode [ 200.134479][T12594] geneve2: entered allmulticast mode [ 200.140937][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 200.186102][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 200.198665][T12594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 200.209871][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1814'. [ 200.319872][T12616] syzkaller0: entered promiscuous mode [ 200.325376][T12616] syzkaller0: entered allmulticast mode [ 200.340383][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 200.429799][T12629] syzkaller1: entered promiscuous mode [ 200.435700][T12629] syzkaller1: entered allmulticast mode [ 200.594324][ T30] audit: type=1107 audit(1771176060.120:2): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 200.622602][ T30] audit: type=1107 audit(1771176060.130:3): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 201.155738][T12675] bridge6: entered promiscuous mode [ 201.171350][T12675] bridge6: entered allmulticast mode [ 201.276105][T12681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.361361][T12681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.379628][T12681] team0: Device macvlan2 is already an upper device of the team interface [ 201.792524][T12720] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 201.792530][T12718] mac80211_hwsim hwsim4 wlan1: Caught tx_queue_len zero misconfig [ 201.812721][T12720] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 202.431354][T12772] tipc: Enabling of bearer rejected, failed to enable media [ 202.495312][T12776] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 202.547075][T12778] netlink: 'syz.1.1869': attribute type 10 has an invalid length. [ 202.570250][T12776] bond3: (slave veth9): Enslaving as an active interface with a down link [ 202.579908][T12782] xt_hashlimit: size too large, truncated to 1048576 [ 202.589580][T12778] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.614078][T12778] bridge_slave_1: left allmulticast mode [ 202.629955][T12778] bridge_slave_1: left promiscuous mode [ 202.644208][T12778] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.684534][T12778] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 202.773262][T12790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.939503][T12790] dvmrp1: entered allmulticast mode [ 203.009137][T12806] nbd1: detected capacity change from 0 to 127 [ 203.050207][ T51] block nbd1: Receive control failed (result -104) [ 203.185469][T12816] syzkaller0: entered promiscuous mode [ 203.191103][T12816] syzkaller0: entered allmulticast mode [ 203.369349][T12837] syzkaller0: entered promiscuous mode [ 203.374932][T12837] syzkaller0: entered allmulticast mode [ 203.436729][T12837] tipc: Enabled bearer , priority 0 [ 203.453748][T12836] tipc: Resetting bearer [ 203.475442][T12836] tipc: Disabling bearer [ 203.602436][T12848] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 203.641902][T12852] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 203.701745][T12859] Cannot find add_set index 65532 as target [ 203.740799][T12852] bond4: (slave gretap1): making interface the new active one [ 203.759035][T12852] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 203.957610][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 203.965645][ C1] lec:lec_tx_timeout: lec0 [ 203.970362][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 203.981797][T12873] bond5: entered promiscuous mode [ 203.999916][T12873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.086783][T12883] netlink: 'syz.3.1899': attribute type 23 has an invalid length. [ 204.165798][T12879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.190603][T12879] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 204.203182][T12879] bond5: (slave sit1): Error -95 calling set_mac_address [ 204.391624][T12907] IPv6: addrconf: prefix option has invalid lifetime [ 204.749037][T12918] __nla_validate_parse: 14 callbacks suppressed [ 204.749053][T12918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1910'. [ 204.763029][T12921] sctp: [Deprecated]: syz.3.1911 (pid 12921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.763029][T12921] Use struct sctp_sack_info instead [ 204.803338][T12918] veth0_to_team: entered promiscuous mode [ 204.967317][T12918] veth0_to_team: left promiscuous mode [ 205.025056][T12934] lo speed is unknown, defaulting to 1000 [ 205.039834][T12934] lo speed is unknown, defaulting to 1000 [ 205.039858][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 205.065117][T12934] lo speed is unknown, defaulting to 1000 [ 205.070716][T12941] openvswitch: netlink: EtherType 50a is less than min 600 [ 205.111279][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'. [ 205.120340][T12941] bridge_slave_1: left allmulticast mode [ 205.125996][T12941] bridge_slave_1: left promiscuous mode [ 205.132359][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.156362][T12934] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 205.208461][T12941] bridge_slave_0: left allmulticast mode [ 205.214530][T12941] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.234344][T12952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1915'. [ 205.274677][T12934] lo speed is unknown, defaulting to 1000 [ 205.297037][T12934] lo speed is unknown, defaulting to 1000 [ 205.340424][T12934] lo speed is unknown, defaulting to 1000 [ 205.372261][T12934] lo speed is unknown, defaulting to 1000 [ 205.392369][T12934] lo speed is unknown, defaulting to 1000 [ 205.455507][T12955] ip6gretap0 speed is unknown, defaulting to 1000 [ 205.500521][T12955] lo speed is unknown, defaulting to 1000 [ 205.541001][T12981] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1922'. [ 205.575290][T12978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.734196][T12992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1925'. [ 205.958179][T13006] netlink: 'syz.0.1927': attribute type 1 has an invalid length. [ 206.044792][T13006] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.112213][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1930'. [ 206.129666][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1929'. [ 206.583069][T13048] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 206.590212][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 206.672918][T13043] team0: Port device team_slave_0 removed [ 206.725905][T13053] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1941'. [ 206.791350][T13058] x_tables: duplicate underflow at hook 1 [ 207.035379][T13083] openvswitch: netlink: Missing valid actions attribute. [ 207.055465][T13083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.544839][T13124] syzkaller0: entered promiscuous mode [ 207.550780][T13124] syzkaller0: entered allmulticast mode [ 208.420117][T13177] syzkaller0: entered promiscuous mode [ 208.435077][T13177] syzkaller0: entered allmulticast mode [ 208.457900][T13177] netlink: 'syz.0.1974': attribute type 3 has an invalid length. [ 208.696436][T13185] netlink: 'syz.3.1979': attribute type 8 has an invalid length. [ 208.795254][T13192] can: request_module (can-proto-0) failed. [ 208.977226][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 208.985306][ C1] lec:lec_tx_timeout: lec0 [ 208.990371][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.040952][T13210] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 209.219799][T13224] netlink: 'syz.1.1991': attribute type 10 has an invalid length. [ 209.976614][T13279] syzkaller0: entered promiscuous mode [ 209.995685][T13279] syzkaller0: entered allmulticast mode [ 210.230728][T13293] __nla_validate_parse: 9 callbacks suppressed [ 210.230744][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'. [ 210.288048][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'. [ 210.330374][T13292] bond0: entered promiscuous mode [ 210.340798][T13292] bond_slave_0: entered promiscuous mode [ 210.348722][T13292] bond_slave_1: entered promiscuous mode [ 210.354578][T13292] .: entered promiscuous mode [ 210.364743][T13292] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 210.394983][T13304] xt_hashlimit: size too large, truncated to 1048576 [ 210.408653][T13292] hsr1: entered promiscuous mode [ 210.452756][T13300] : renamed from wg2 [ 210.830583][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 210.858725][T13314] xt_CT: No such helper "syz1" [ 210.964780][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 210.980768][T13333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 211.005564][T13336] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 211.129694][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 211.183008][T13343] vxcan2: entered allmulticast mode [ 211.234547][T13347] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2028'. [ 211.255265][T13350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2027'. [ 211.278850][T13347] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2028'. [ 211.332201][T13354] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2029'. [ 211.410515][T13360] netlink: 'syz.1.2027': attribute type 16 has an invalid length. [ 211.430982][T13360] netlink: 'syz.1.2027': attribute type 17 has an invalid length. [ 211.560090][T13369] netlink: 'syz.2.2034': attribute type 7 has an invalid length. [ 211.586086][T13369] netlink: 'syz.2.2034': attribute type 8 has an invalid length. [ 212.457581][T13360] vlan0: left allmulticast mode [ 212.462488][T13360] veth0_vlan: left allmulticast mode [ 212.468754][T13360] vlan0: left promiscuous mode [ 212.539076][T12967] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 2816 - 0 [ 212.560604][T12967] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.597138][T12967] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 212.637028][T12967] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.665281][T12967] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 212.695843][T12967] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.738393][T12967] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 212.786530][T12967] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.805890][T13418] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 212.902849][ T30] audit: type=1800 audit(1771176072.430:4): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2043" name="memory.events" dev="tmpfs" ino=2007 res=0 errno=0 [ 212.913840][T13404] syzkaller0: entered promiscuous mode [ 212.931500][T13423] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 212.933649][T13404] syzkaller0: entered allmulticast mode [ 212.976158][ T30] audit: type=1804 audit(1771176072.490:5): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2043" name="/newroot/389/memory.events" dev="tmpfs" ino=2007 res=1 errno=0 [ 213.066821][T13418] bond6: entered promiscuous mode [ 213.072307][T13418] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.084499][T13424] erspan0: entered promiscuous mode [ 213.091027][T13424] erspan0: left promiscuous mode [ 213.103119][T13437] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 213.116737][T13428] bond6: (slave gretap3): making interface the new active one [ 213.124700][T13428] gretap3: entered promiscuous mode [ 213.131806][T13428] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 213.152950][T13432] macvlan2: entered promiscuous mode [ 213.159499][T13432] macvlan2: entered allmulticast mode [ 213.166664][T13432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.271172][T13437] bond9: entered promiscuous mode [ 213.286113][T13437] 8021q: adding VLAN 0 to HW filter on device bond9 [ 213.338004][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.998392][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.006400][ C1] lec:lec_tx_timeout: lec0 [ 214.011205][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.680530][T13444] bond9: (slave bridge8): making interface the new active one [ 214.688364][T13444] bridge8: entered promiscuous mode [ 214.694345][T13444] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 214.704260][T13439] syzkaller0: entered promiscuous mode [ 214.710123][T13439] syzkaller0: entered allmulticast mode [ 214.781311][T13459] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 214.832191][T13463] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 214.992048][T13477] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 215.008825][T13478] erspan1: entered allmulticast mode [ 215.018430][T13482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.043486][T13477] bond6: entered promiscuous mode [ 215.050454][T13477] bond6: entered allmulticast mode [ 215.055958][T13477] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.065769][T13477] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 215.096679][T13477] bond7: entered promiscuous mode [ 215.102162][T13477] bond7: entered allmulticast mode [ 215.118134][T13477] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.125349][T13477] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 215.207961][T13477] bond8: entered promiscuous mode [ 215.213107][T13477] bond8: entered allmulticast mode [ 215.238472][T13477] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.245758][T13477] netlink: 'syz.4.2058': attribute type 1 has an invalid length. [ 215.282873][T13477] bond9: entered promiscuous mode [ 215.295756][T13477] bond9: entered allmulticast mode [ 215.302509][T13477] 8021q: adding VLAN 0 to HW filter on device bond9 [ 215.324557][T13505] __nla_validate_parse: 13 callbacks suppressed [ 215.324575][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2066'. [ 215.350097][T13503] pimreg: entered allmulticast mode [ 215.385022][T13477] bond10: entered promiscuous mode [ 215.390449][T13477] bond10: entered allmulticast mode [ 215.396136][T13477] 8021q: adding VLAN 0 to HW filter on device bond10 [ 215.434080][T13477] bond11: entered promiscuous mode [ 215.439421][T13477] bond11: entered allmulticast mode [ 215.445198][T13477] 8021q: adding VLAN 0 to HW filter on device bond11 [ 215.526789][T13477] bond12: entered promiscuous mode [ 215.533315][T13477] bond12: entered allmulticast mode [ 215.540558][T13477] 8021q: adding VLAN 0 to HW filter on device bond12 [ 215.572299][T13477] bond13: entered promiscuous mode [ 215.577581][T13477] bond13: entered allmulticast mode [ 215.583307][T13477] 8021q: adding VLAN 0 to HW filter on device bond13 [ 215.664257][T13477] bond14: entered promiscuous mode [ 215.671055][T13477] bond14: entered allmulticast mode [ 215.676802][T13477] 8021q: adding VLAN 0 to HW filter on device bond14 [ 215.699570][T13530] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 215.708031][T13477] bond15: entered promiscuous mode [ 215.708053][T13477] bond15: entered allmulticast mode [ 215.708355][T13477] 8021q: adding VLAN 0 to HW filter on device bond15 [ 215.746913][T13477] bond16: entered promiscuous mode [ 215.752429][T13477] bond16: entered allmulticast mode [ 215.758586][T13477] 8021q: adding VLAN 0 to HW filter on device bond16 [ 215.775509][T13533] pim6reg: entered allmulticast mode [ 215.800127][T13534] pim6reg: left allmulticast mode [ 215.838463][T13477] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 215.890573][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2074'. [ 215.917279][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2074'. [ 215.926277][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 215.936294][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2074'. [ 215.945241][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2074'. [ 215.959198][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 215.980107][T13545] syzkaller0: entered promiscuous mode [ 215.985620][T13545] syzkaller0: entered allmulticast mode [ 215.993628][T13549] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 216.003649][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 216.014053][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 216.166662][T13559] syzkaller0: entered promiscuous mode [ 216.170130][T13562] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001 [ 216.198112][T13559] syzkaller0: entered allmulticast mode [ 216.338595][T13574] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2085'. [ 216.544381][T13586] validate_nla: 9 callbacks suppressed [ 216.544392][T13586] netlink: 'syz.4.2090': attribute type 3 has an invalid length. [ 216.830635][T13615] xt_CONNSECMARK: invalid mode: 0 [ 216.866816][T13614] syzkaller0: entered promiscuous mode [ 216.877408][T13614] syzkaller0: entered allmulticast mode [ 217.397736][T13648] geneve1: Caught tx_queue_len zero misconfig [ 217.438093][T13653] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 218.336362][T13729] sctp: [Deprecated]: syz.4.2137 (pid 13729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.336362][T13729] Use struct sctp_sack_info instead [ 218.541207][T13740] syzkaller0: entered promiscuous mode [ 218.551453][T13740] syzkaller0: entered allmulticast mode [ 218.758446][T13755] netlink: 'syz.3.2147': attribute type 61 has an invalid length. [ 219.017470][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 219.025566][ C1] lec:lec_tx_timeout: lec0 [ 219.030498][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 219.308205][T13794] can: request_module (can-proto-3) failed. [ 219.359011][T13801] bond10: entered promiscuous mode [ 219.364198][T13801] bond10: entered allmulticast mode [ 219.393000][T13801] 8021q: adding VLAN 0 to HW filter on device bond10 [ 219.446041][T13806] macvlan3: entered promiscuous mode [ 219.452102][T13806] macvlan3: entered allmulticast mode [ 219.459484][T13806] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 219.484103][T13814] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 219.771262][T13837] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 220.193169][T13879] xt_hashlimit: overflow, try lower: 3/0 [ 220.271675][T13885] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 220.356042][T13890] __nla_validate_parse: 20 callbacks suppressed [ 220.356061][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2189'. [ 220.511366][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2191'. [ 220.531930][T13907] pimreg: left allmulticast mode [ 220.590783][T13909] bond17: option mode: invalid value (133) [ 220.606124][T13909] bond17 (unregistering): Released all slaves [ 220.817584][T13922] syzkaller0: entered promiscuous mode [ 220.823108][T13922] syzkaller0: entered allmulticast mode [ 220.837124][T13927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.859139][T13922] netlink: 'syz.3.2196': attribute type 64 has an invalid length. [ 221.050174][T13936] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 221.312832][T13955] syzkaller0: entered promiscuous mode [ 221.319724][T13955] syzkaller0: entered allmulticast mode [ 221.336974][T13955] tipc: Started in network mode [ 221.348686][T13955] tipc: Node identity 7e94cc6de4b, cluster identity 4711 [ 221.356309][T13955] tipc: Enabled bearer , priority 0 [ 221.454983][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'. [ 221.761010][T13979] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2216'. [ 221.877674][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 221.883965][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 222.126818][T14000] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 222.142092][T13953] tipc: Resetting bearer [ 222.159538][T13953] tipc: Disabling bearer [ 222.235049][T14002] C: renamed from lo (while UP) [ 222.242316][T14002] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 222.653929][T14027] netlink: 'syz.4.2226': attribute type 5 has an invalid length. [ 222.741845][T13995] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.923768][T14064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2237'. [ 224.037756][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.045765][ C1] lec:lec_tx_timeout: lec0 [ 224.050603][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.400946][T14011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.553308][T14086] netlink: 'syz.1.2243': attribute type 3 has an invalid length. [ 225.772621][T14103] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2249'. [ 225.804571][T14103] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2249'. [ 226.100939][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2259'. [ 226.135546][T14136] veth0_to_team: entered promiscuous mode [ 226.147291][T14136] veth0_to_team: left promiscuous mode [ 226.196764][T14139] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2260'. [ 226.219857][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'. [ 226.258579][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 226.281712][T14146] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2262'. [ 226.294225][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'. [ 226.355581][T14153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2264'. [ 226.492751][T14164] vlan5: entered promiscuous mode [ 226.498010][T14164] bridge0: entered promiscuous mode [ 226.596033][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 227.278573][T14197] : entered promiscuous mode [ 227.764712][T14244] netlink: 'syz.1.2289': attribute type 9 has an invalid length. [ 227.772920][T14244] netlink: 'syz.1.2289': attribute type 11 has an invalid length. [ 227.783170][T14244] netlink: 'syz.1.2289': attribute type 12 has an invalid length. [ 227.943065][T14260] syzkaller0: entered promiscuous mode [ 227.952531][T14260] syzkaller0: entered allmulticast mode [ 228.109748][T14260] tipc: Enabled bearer , priority 0 [ 228.133013][T14259] tipc: Resetting bearer [ 228.160496][T14259] tipc: Disabling bearer [ 228.197926][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 228.225378][T14277] syzkaller0: entered promiscuous mode [ 228.243713][T14277] syzkaller0: entered allmulticast mode [ 228.292197][T14277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.401187][T14288] netlink: 'syz.3.2305': attribute type 16 has an invalid length. [ 228.424770][T14288] netlink: 'syz.3.2305': attribute type 17 has an invalid length. [ 229.057462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.065504][ C1] lec:lec_tx_timeout: lec0 [ 229.070200][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.538802][T12971] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.565835][T12971] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.597709][T12971] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.632287][T12971] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.652586][T14310] syzkaller0: entered promiscuous mode [ 229.661440][T14310] syzkaller0: entered allmulticast mode [ 229.710405][T12971] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.759244][T12971] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.777430][T12971] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.786368][T12971] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.974316][T14337] syzkaller1: entered promiscuous mode [ 230.000228][T14337] syzkaller1: entered allmulticast mode [ 230.869417][T14423] veth9: entered allmulticast mode [ 231.063142][T14434] __nla_validate_parse: 16 callbacks suppressed [ 231.063165][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2339'. [ 231.246033][T14434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2339'. [ 231.328629][T14455] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2345'. [ 231.354028][T14441] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2343'. [ 231.570584][T14475] netlink: 'syz.2.2350': attribute type 1 has an invalid length. [ 231.595233][T14475] netlink: 476 bytes leftover after parsing attributes in process `syz.2.2350'. [ 231.606374][T14475] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2350'. [ 231.846192][T14496] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 231.854125][T14486] can: request_module (can-proto-5) failed. [ 231.919505][T14497] syzkaller0: entered promiscuous mode [ 231.925103][T14497] syzkaller0: entered allmulticast mode [ 231.931144][T14496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2356'. [ 232.029977][T14505] netlink: 'syz.0.2358': attribute type 29 has an invalid length. [ 232.053756][T14506] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20001 [ 232.061766][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 232.073055][T14505] netlink: 'syz.0.2358': attribute type 29 has an invalid length. [ 232.090862][T14498] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20001 [ 232.108344][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2359'. [ 232.287455][T14508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2359'. [ 232.360835][T14529] Cannot find set identified by id 3 to match [ 232.633348][T14547] tipc: Enabled bearer , priority 0 [ 232.656695][T14553] netlink: 'syz.1.2369': attribute type 8 has an invalid length. [ 232.678635][T14547] syzkaller0: entered promiscuous mode [ 232.684145][T14547] syzkaller0: entered allmulticast mode [ 232.754663][T14547] tipc: Resetting bearer [ 232.862322][T14547] tipc: Resetting bearer [ 232.934746][T14547] tipc: Disabling bearer [ 232.964366][T14571] netlink: 'syz.0.2375': attribute type 1 has an invalid length. [ 232.976504][T14571] netlink: 'syz.0.2375': attribute type 1 has an invalid length. [ 232.987009][T14571] netlink: 'syz.0.2375': attribute type 8 has an invalid length. [ 233.268026][T14587] openvswitch: netlink: IP tunnel dst address not specified [ 233.688188][T14612] gretap2: entered promiscuous mode [ 233.928961][T14633] delete_channel: no stack [ 234.172158][T14657] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 235.072092][T14720] netlink: 'syz.0.2411': attribute type 4 has an invalid length. [ 235.121449][T14723] netlink: 'syz.4.2412': attribute type 19 has an invalid length. [ 235.237529][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6170 ms [ 235.245616][ C1] lec:lec_tx_timeout: lec0 [ 235.250467][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.318130][T14733] netlink: 'syz.0.2417': attribute type 21 has an invalid length. [ 236.021195][T14768] sock: sock_timestamping_bind_phc: sock not bind to device [ 236.205505][T14794] syzkaller0: entered promiscuous mode [ 236.227447][T14794] syzkaller0: entered allmulticast mode [ 236.293671][T14805] __nla_validate_parse: 19 callbacks suppressed [ 236.293691][T14805] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2436'. [ 236.359783][T14804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2435'. [ 236.367830][T14810] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 236.393420][T14805] sctp: [Deprecated]: syz.0.2436 (pid 14805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.393420][T14805] Use struct sctp_sack_info instead [ 236.422973][T14811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.457677][T14811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.497348][T14811] batman_adv: batadv0: Interface deactivated: dummy0 [ 236.510752][T14811] batman_adv: batadv0: Removing interface: dummy0 [ 236.601270][T14829] netlink: 'syz.0.2443': attribute type 33 has an invalid length. [ 236.609543][T14829] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2443'. [ 236.711286][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 236.860370][T14846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2447'. [ 236.898134][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 236.907509][T14846] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003 [ 237.301602][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 237.472645][T14890] sctp: [Deprecated]: syz.2.2460 (pid 14890) Use of int in maxseg socket option. [ 237.472645][T14890] Use struct sctp_assoc_value instead [ 237.585803][T14897] IPVS: Unknown mcast interface: vcan0 [ 237.917501][T14933] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 237.984877][T14938] IPVS: set_ctl: invalid protocol: 257 0.0.0.1:20000 [ 238.134926][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 238.455708][T14977] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 238.550953][T14982] bond17: (slave geneve2): making interface the new active one [ 238.575036][T14984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2482'. [ 238.580133][T14982] bond17: (slave geneve2): Enslaving as an active interface with an up link [ 238.610577][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 238.619032][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 238.629343][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 238.645213][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 238.700506][T14990] netlink: 'syz.1.2483': attribute type 1 has an invalid length. [ 238.776805][T14998] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 238.826553][T14991] bond11 (unregistering): Released all slaves [ 238.962085][T14990] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 239.511079][T15043] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2498'. [ 239.577557][T15043] netlink: 'syz.2.2498': attribute type 10 has an invalid length. [ 239.979947][T15074] syzkaller0: entered promiscuous mode [ 239.991144][T15074] syzkaller0: entered allmulticast mode [ 240.354223][T15100] syz_tun: left allmulticast mode [ 240.361445][T15100] dvmrp1: left allmulticast mode [ 240.366580][T15100] dvmrp6: left allmulticast mode [ 240.764012][T15147] tipc: Resetting bearer [ 240.813806][T15150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.909981][ T5912] lo speed is unknown, defaulting to 1000 [ 240.997195][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 241.005264][ C1] lec:lec_tx_timeout: lec0 [ 241.010885][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 241.143022][T15163] x_tables: duplicate underflow at hook 1 [ 241.369801][T15186] __nla_validate_parse: 5 callbacks suppressed [ 241.369819][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 241.814775][T15228] IPVS: stopping backup sync thread 12230 ... [ 241.846768][T15235] netlink: zone id is out of range [ 241.859518][T15235] netlink: zone id is out of range [ 241.881002][T15235] netlink: zone id is out of range [ 241.892357][T15235] netlink: zone id is out of range [ 241.898569][T15235] netlink: zone id is out of range [ 241.909908][T15235] netlink: zone id is out of range [ 241.930344][T15235] netlink: zone id is out of range [ 241.965963][T15235] netlink: zone id is out of range [ 241.989250][T15235] netlink: zone id is out of range [ 242.824952][T15302] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2555'. [ 242.843076][T15302] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2555'. [ 243.040828][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2557'. [ 243.302206][T15337] ip6gretap0 speed is unknown, defaulting to 1000 [ 243.321823][T15337] lo speed is unknown, defaulting to 1000 [ 243.605408][T15356] sctp: [Deprecated]: syz.3.2567 (pid 15356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.605408][T15356] Use struct sctp_sack_info instead [ 244.216559][ T51] block nbd2: Receive control failed (result -32) [ 244.712866][T15429] netlink: 'syz.3.2585': attribute type 1 has an invalid length. [ 244.778733][T15432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2585'. [ 244.869495][T15429] bond9 (unregistering): Released all slaves [ 244.923891][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2586'. [ 245.818604][T15487] netlink: 'syz.2.2601': attribute type 10 has an invalid length. [ 245.834043][T15487] team0: Device ipvlan1 failed to register rx_handler [ 245.968071][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2600'. [ 245.980012][T15493] ip6gretap0 speed is unknown, defaulting to 1000 [ 245.999734][T15493] lo speed is unknown, defaulting to 1000 [ 246.017197][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 246.025270][ C1] lec:lec_tx_timeout: lec0 [ 246.030572][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.101622][T15504] net_ratelimit: 82 callbacks suppressed [ 246.101638][T15504] openvswitch: netlink: IP tunnel dst address not specified [ 246.173778][T15503] netlink: 'syz.1.2603': attribute type 1 has an invalid length. [ 246.195161][T15503] xt_TCPMSS: Only works on TCP SYN packets [ 246.288251][T15514] netlink: 'syz.2.2607': attribute type 1 has an invalid length. [ 246.296196][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2607'. [ 246.412584][T15521] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 246.417636][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2610'. [ 246.476925][T15523] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.532857][T15526] vlan6: entered allmulticast mode [ 246.538509][T15526] geneve1: entered allmulticast mode [ 246.612430][T15539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2616'. [ 246.640854][T15542] sctp: [Deprecated]: syz.4.2617 (pid 15542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.640854][T15542] Use struct sctp_sack_info instead [ 246.698616][T15539] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 247.243934][T15573] tipc: Enabled bearer , priority 0 [ 247.323077][T15573] syzkaller0: entered promiscuous mode [ 247.339130][T15573] syzkaller0: entered allmulticast mode [ 247.345644][T15573] tipc: Resetting bearer [ 247.367755][T15572] tipc: Resetting bearer [ 247.399204][T15590] netlink: 'syz.0.2630': attribute type 17 has an invalid length. [ 247.407072][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 247.440792][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2630'. [ 247.476035][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 247.565194][T15596] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2633'. [ 248.733751][T15620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2639'. [ 248.847262][T15572] tipc: Disabling bearer [ 248.860923][T15590] erspan0: entered promiscuous mode [ 248.868791][T15590] erspan0: left promiscuous mode [ 249.002861][T15629] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.037036][T15633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2643'. [ 249.103066][T15639] tipc: Enabling of bearer rejected, already enabled [ 249.111985][T15640] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 249.124796][T15640] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 249.143045][T15643] netlink: 'syz.4.2644': attribute type 28 has an invalid length. [ 249.162298][T15639] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 249.175885][T15639] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 249.194200][T15643] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2644'. [ 249.206385][T15649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2647'. [ 249.255497][T15649] netlink: 'syz.0.2647': attribute type 11 has an invalid length. [ 249.358223][T15657] syzkaller1: entered promiscuous mode [ 249.369530][T15657] syzkaller1: entered allmulticast mode [ 249.456339][T15667] IPVS: Unknown mcast interface: bridge_slave_0 [ 249.607953][T15681] x_tables: unsorted underflow at hook 1 [ 249.664409][T15685] bond18 (unregistering): Released all slaves [ 249.695612][T15692] x_tables: unsorted underflow at hook 1 [ 251.035179][T15787] wg1: entered promiscuous mode [ 251.047445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 251.048440][T15787] wg1: entered allmulticast mode [ 251.055514][ C1] lec:lec_tx_timeout: lec0 [ 251.066067][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.499255][T15821] validate_nla: 2 callbacks suppressed [ 251.499273][T15821] netlink: 'syz.1.2705': attribute type 23 has an invalid length. [ 251.766848][T15849] __nla_validate_parse: 12 callbacks suppressed [ 251.766866][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2712'. [ 251.774416][T15846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2713'. [ 251.817420][T15855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2713'. [ 251.833364][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 251.978368][T15861] netlink: 'syz.4.2719': attribute type 4 has an invalid length. [ 251.997968][T15861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2719'. [ 252.050976][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2720'. [ 252.075449][T15868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2720'. [ 252.139050][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 252.149340][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2717'. [ 252.290766][T15812] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.301556][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'. [ 252.305803][T15812] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.406180][T15896] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 252.439056][T15896] bond10 (unregistering): Released all slaves [ 252.516100][T15897] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 252.541172][T15897] bond10 (unregistering): Released all slaves [ 252.643454][T15917] netlink: 'syz.0.2730': attribute type 4 has an invalid length. [ 252.817314][T15925] netlink: 'syz.0.2735': attribute type 1 has an invalid length. [ 252.871561][T15941] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 252.876696][T15925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.937811][T15925] syzkaller0: entered promiscuous mode [ 252.943316][T15925] syzkaller0: entered allmulticast mode [ 252.964181][T15939] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.972851][T15945] netlink: 'syz.1.2740': attribute type 11 has an invalid length. [ 253.014590][T15925] bond6: (slave geneve3): making interface the new active one [ 253.025563][T15925] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 253.065488][T15945] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 253.496910][T15985] syzkaller0: entered promiscuous mode [ 253.503127][T15985] syzkaller0: entered allmulticast mode [ 253.910989][T16018] netlink: 'syz.3.2757': attribute type 142 has an invalid length. [ 253.958149][T16023] netlink: 'syz.2.2758': attribute type 2 has an invalid length. [ 254.445984][T16053] syzkaller0: entered allmulticast mode [ 254.454134][T16056] netlink: 'syz.3.2771': attribute type 11 has an invalid length. [ 254.462638][T16056] netlink: 'syz.3.2771': attribute type 11 has an invalid length. [ 254.546807][T16058] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 254.652760][T16058] team1: entered promiscuous mode [ 254.664888][T16058] team1: entered allmulticast mode [ 254.697847][T16068] tap0: tun_chr_ioctl cmd 1074025676 [ 254.704607][T16068] tap0: owner set to 0 [ 254.809651][T16078] netlink: 'syz.1.2777': attribute type 1 has an invalid length. [ 254.969147][T16088] set match dimension is over the limit! [ 255.478077][T16128] openvswitch: netlink: Message has 6 unknown bytes. [ 255.575687][T16134] x_tables: duplicate underflow at hook 2 [ 255.842330][T16149] ip6gre2: entered promiscuous mode [ 256.259518][T16184] syz.0.2805: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 256.278625][T16184] CPU: 1 UID: 0 PID: 16184 Comm: syz.0.2805 Not tainted syzkaller #0 PREEMPT(full) [ 256.278674][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.278693][T16184] Call Trace: [ 256.278701][T16184] [ 256.278710][T16184] dump_stack_lvl+0xe8/0x150 [ 256.278745][T16184] warn_alloc+0x249/0x340 [ 256.278771][T16184] ? stack_trace_save+0xa9/0x100 [ 256.278794][T16184] ? __pfx_warn_alloc+0x10/0x10 [ 256.278810][T16184] ? kasan_save_track+0x4f/0x80 [ 256.278823][T16184] ? kasan_save_track+0x3e/0x80 [ 256.278833][T16184] ? __kasan_kmalloc+0x93/0xb0 [ 256.278845][T16184] ? __kmalloc_cache_noprof+0x31c/0x660 [ 256.278858][T16184] ? xskq_create+0x56/0x170 [ 256.278870][T16184] ? xsk_setsockopt+0x54c/0x990 [ 256.278879][T16184] ? do_sock_setsockopt+0x17c/0x1b0 [ 256.278889][T16184] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 256.278900][T16184] ? do_syscall_64+0x14d/0xf80 [ 256.278915][T16184] __vmalloc_node_range_noprof+0x132/0x1730 [ 256.278944][T16184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.278960][T16184] ? __kasan_kmalloc+0x93/0xb0 [ 256.278975][T16184] vmalloc_user_noprof+0xad/0xe0 [ 256.278992][T16184] ? xskq_create+0xbf/0x170 [ 256.279003][T16184] xskq_create+0xbf/0x170 [ 256.279016][T16184] xsk_init_queue+0xad/0x110 [ 256.279028][T16184] xsk_setsockopt+0x54c/0x990 [ 256.279040][T16184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.279050][T16184] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.279066][T16184] ? aa_sock_opt_perm+0xff/0x1a0 [ 256.279082][T16184] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 256.279095][T16184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.279106][T16184] do_sock_setsockopt+0x17c/0x1b0 [ 256.279121][T16184] __x64_sys_setsockopt+0x13d/0x1b0 [ 256.279135][T16184] do_syscall_64+0x14d/0xf80 [ 256.279147][T16184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.279157][T16184] ? trace_irq_disable+0x37/0x100 [ 256.279168][T16184] ? clear_bhb_loop+0x40/0x90 [ 256.279180][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.279190][T16184] RIP: 0033:0x7fdbf9b9bf79 [ 256.279200][T16184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.279209][T16184] RSP: 002b:00007fdbfaa6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.279222][T16184] RAX: ffffffffffffffda RBX: 00007fdbf9e15fa0 RCX: 00007fdbf9b9bf79 [ 256.279229][T16184] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 256.279243][T16184] RBP: 00007fdbf9c327e0 R08: 0000000000000004 R09: 0000000000000000 [ 256.279249][T16184] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.279256][T16184] R13: 00007fdbf9e16038 R14: 00007fdbf9e15fa0 R15: 00007fff2c3c8798 [ 256.279272][T16184] [ 256.279282][T16184] Mem-Info: [ 256.637311][T16184] active_anon:5835 inactive_anon:6 isolated_anon:0 [ 256.637311][T16184] active_file:2502 inactive_file:40199 isolated_file:0 [ 256.637311][T16184] unevictable:768 dirty:117 writeback:0 [ 256.637311][T16184] slab_reclaimable:12521 slab_unreclaimable:105220 [ 256.637311][T16184] mapped:29227 shmem:1368 pagetables:1307 [ 256.637311][T16184] sec_pagetables:0 bounce:0 [ 256.637311][T16184] kernel_misc_reclaimable:0 [ 256.637311][T16184] free:1320623 free_pcp:8792 free_cma:0 [ 256.709268][T16184] Node 0 active_anon:23340kB inactive_anon:24kB active_file:10008kB inactive_file:160596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116908kB dirty:468kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14380kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.711645][T16197] netlink: 'syz.1.2809': attribute type 11 has an invalid length. [ 256.742042][T16184] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.742151][T16184] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 256.742211][T16184] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 256.742262][T16184] Node 0 DMA32 free:1326624kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23340kB inactive_anon:24kB active_file:10008kB inactive_file:160596kB unevictable:1536kB writepending:468kB zspages:0kB present:3129332kB managed:2554008kB mlocked:0kB bounce:0kB free_pcp:32316kB local_pcp:20008kB free_cma:0kB [ 256.742335][T16184] lowmem_reserve[]: 0 0 0 0 0 [ 256.742373][T16184] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 256.742423][T16184] lowmem_reserve[]: [ 256.777842][T16197] __nla_validate_parse: 17 callbacks suppressed [ 256.777864][T16197] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.2809'. [ 256.785949][T16184] 0 [ 256.849689][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 256.849731][ C1] lec:lec_tx_timeout: lec0 [ 256.884865][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 256.941047][T16184] 0 0 0 0 [ 256.944167][T16184] Node 1 Normal free:3940252kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3272kB local_pcp:0kB free_cma:0kB [ 256.988654][T16184] lowmem_reserve[]: 0 0 0 0 0 [ 256.993427][T16184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.006959][T16184] Node 0 DMA32: 5768*4kB (UME) 3780*8kB (UM) 1618*16kB (UME) 297*32kB (UM) 75*64kB (UM) 106*128kB (UM) 175*256kB (UM) 116*512kB (UM) 87*1024kB (U) 33*2048kB (UE) 234*4096kB (UM) = 1326400kB [ 257.025939][T16184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 257.037996][T16184] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 6*16kB (UME) 5*32kB (UME) 4*64kB (ME) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 960*4096kB (M) = 3940252kB [ 257.056012][T16184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.070461][T16184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.079940][T16184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.089559][T16184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.100347][T16184] 44065 total pagecache pages [ 257.105395][T16184] 0 pages in swap cache [ 257.109820][T16184] Free swap = 124996kB [ 257.114126][T16184] Total swap = 124996kB [ 257.141213][T16184] 2097051 pages RAM [ 257.150224][T16184] 0 pages HighMem/MovableOnly [ 257.161923][T16184] 426703 pages reserved [ 257.174478][T16184] 0 pages cma reserved [ 257.339870][T16229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2817'. [ 257.448158][T16234] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 257.488391][T16241] mac80211_hwsim hwsim10 : renamed from wlan1 [ 257.562996][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 258.077845][T16301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.279438][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 258.297610][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.315156][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 258.324948][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.335068][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 258.357970][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.374019][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 258.384981][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.394618][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 258.405409][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.415801][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 258.424916][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.434450][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 258.444562][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.454143][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.463864][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.476263][T16310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.700882][T16330] netlink: 'syz.1.2848': attribute type 1 has an invalid length. [ 258.722556][T16335] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 258.748558][T16328] bond10: entered promiscuous mode [ 258.754105][T16328] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.799703][T16330] bond11: entered promiscuous mode [ 258.815631][T16330] 8021q: adding VLAN 0 to HW filter on device bond11 [ 258.903490][T16337] bond11: (slave bridge11): making interface the new active one [ 258.935012][T16337] bridge11: entered promiscuous mode [ 258.949249][T16337] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 259.076905][T16355] netlink: 'syz.2.2851': attribute type 8 has an invalid length. [ 259.157583][T16355] netlink: 'syz.2.2851': attribute type 2 has an invalid length. [ 259.191225][T16355] 9: entered promiscuous mode [ 259.571245][T16381] bond19: entered promiscuous mode [ 259.591839][T16381] bond19: entered allmulticast mode [ 259.609434][T16381] 8021q: adding VLAN 0 to HW filter on device bond19 [ 259.633840][T16396] netlink: 'syz.2.2861': attribute type 3 has an invalid length. [ 259.705981][T16392] ip6gretap0 speed is unknown, defaulting to 1000 [ 259.714716][T16392] lo speed is unknown, defaulting to 1000 [ 259.874076][T16410] bond11: Invalid ad_actor_system MAC address. [ 259.881408][T16410] bond11: option ad_actor_system: invalid value (1) [ 259.882443][T16417] netlink: 'syz.4.2866': attribute type 2 has an invalid length. [ 259.906713][T16410] bond11 (unregistering): Released all slaves [ 259.963527][T16421] netlink: 'syz.4.2866': attribute type 10 has an invalid length. [ 260.006383][T16423] netlink: 'syz.0.2869': attribute type 11 has an invalid length. [ 260.012615][T16421] bridge_slave_1: left allmulticast mode [ 260.029100][T16421] bridge_slave_1: left promiscuous mode [ 260.035096][T16421] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.048327][T16421] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 260.669069][T16480] bond5: entered allmulticast mode [ 260.683864][T16480] dvmrp8: entered allmulticast mode [ 260.690334][T16480] dvmrp8: left allmulticast mode [ 260.749157][T16480] bond5: left allmulticast mode [ 260.796176][T16488] Cannot find map_set index 65533 as target [ 260.921278][T16496] macvlan2: entered promiscuous mode [ 260.927090][T16496] macvlan2: entered allmulticast mode [ 260.933693][T16496] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 261.887218][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 261.895273][ C1] lec:lec_tx_timeout: lec0 [ 261.900223][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.170898][T16443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.179994][T16446] __nla_validate_parse: 71 callbacks suppressed [ 263.180014][T16446] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2877'. [ 263.326164][T16511] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 263.374186][T16511] bond20: entered promiscuous mode [ 263.379488][T16511] bond20: entered allmulticast mode [ 263.385219][T16511] 8021q: adding VLAN 0 to HW filter on device bond20 [ 263.393295][T16513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2890'. [ 263.419198][T16511] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2890'. [ 263.439853][T16519] sctp: [Deprecated]: syz.1.2891 (pid 16519) Use of int in maxseg socket option. [ 263.439853][T16519] Use struct sctp_assoc_value instead [ 263.721175][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.733780][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.735293][T16533] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2897'. [ 263.752325][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.761015][T16537] "syz.4.2898" (16537) uses obsolete ecb(arc4) skcipher [ 263.817593][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.835083][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.949298][T16534] ip6gretap0 speed is unknown, defaulting to 1000 [ 263.971897][T16534] lo speed is unknown, defaulting to 1000 [ 264.361008][T16534] chnl_net:caif_netlink_parms(): no params data found [ 264.394290][T16572] net_ratelimit: 55 callbacks suppressed [ 264.394303][T16572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.514219][T16578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.530114][T16534] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.537626][T16534] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.544897][T16534] bridge_slave_0: entered allmulticast mode [ 264.552744][T16534] bridge_slave_0: entered promiscuous mode [ 264.562314][T16581] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2910'. [ 264.563002][T16534] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.578750][T16534] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.586002][T16534] bridge_slave_1: entered allmulticast mode [ 264.593945][T16534] bridge_slave_1: entered promiscuous mode [ 264.634921][T16534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.635949][T16580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2910'. [ 264.648919][T16534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.706960][T16534] team0: Port device team_slave_0 added [ 264.733821][T16534] team0: Port device team_slave_1 added [ 264.789235][T16534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.796336][T16534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.831843][T16534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.843742][T16593] netlink: 'syz.3.2914': attribute type 10 has an invalid length. [ 264.854685][T16593] bond0: (slave ): Opening slave failed [ 264.864454][T16534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.879167][T16534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.941401][T16534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.954998][T16601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.021049][T16534] hsr_slave_0: entered promiscuous mode [ 265.028246][T16534] hsr_slave_1: entered promiscuous mode [ 265.034816][T16534] debugfs: 'hsr0' already exists in 'hsr' [ 265.041667][T16534] Cannot create hsr debugfs directory [ 265.228459][T16615] delete_channel: no stack [ 265.256121][T16612] ------------[ cut here ]------------ [ 265.262035][T16612] msk->pm.local_addr_used == 0 [ 265.262050][T16612] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#1: syz.0.2923/16612 [ 265.278119][T16612] Modules linked in: [ 265.282351][T16612] CPU: 1 UID: 0 PID: 16612 Comm: syz.0.2923 Not tainted syzkaller #0 PREEMPT(full) [ 265.291789][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.301916][T16612] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 265.308488][T16612] Code: 01 00 00 49 89 c6 e8 7e bb 36 f6 e9 28 fb ff ff e8 74 bb 36 f6 48 89 df be 03 00 00 00 e8 e7 5c 17 f9 eb a4 e8 60 bb 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 265.328163][T16612] RSP: 0000:ffffc9001a4d7160 EFLAGS: 00010293 [ 265.334247][T16612] RAX: ffffffff8b8d7f70 RBX: 0000000000000000 RCX: ffff8880772c1e40 [ 265.342292][T16612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.347838][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'. [ 265.350308][T16612] RBP: ffffc9001a4d73b0 R08: ffff88802a56b107 R09: 1ffff110054ad620 [ 265.367205][T16612] R10: dffffc0000000000 R11: ffffed10054ad621 R12: 1ffff110054ad61f [ 265.375186][T16612] R13: ffff88807b366780 R14: ffff88802a56a640 R15: ffff88802a56b0f8 [ 265.383205][T16612] FS: 00007fdbfaa6a6c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 265.392162][T16612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.398778][T16612] CR2: 00007f2f9b38ed58 CR3: 0000000031136000 CR4: 00000000003526f0 [ 265.406765][T16612] Call Trace: [ 265.410114][T16612] [ 265.413075][T16612] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 265.419766][T16612] ? rcu_is_watching+0x15/0xb0 [ 265.424589][T16612] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 265.431001][T16612] genl_family_rcv_msg_doit+0x22a/0x330 [ 265.436566][T16612] ? __asan_memcpy+0x40/0x70 [ 265.441233][T16612] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 265.447361][T16612] ? bpf_lsm_capable+0x9/0x20 [ 265.452042][T16612] ? security_capable+0x7e/0x2c0 [ 265.456986][T16612] genl_rcv_msg+0x61c/0x7a0 [ 265.461569][T16612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.466617][T16612] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 265.476078][T16612] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.481521][T16612] netlink_rcv_skb+0x232/0x4b0 [ 265.486312][T16612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.491418][T16612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.496713][T16612] ? genl_rcv+0x19/0x40 [ 265.500967][T16612] ? down_read+0x272/0x2e0 [ 265.505410][T16612] ? genl_rcv+0xd/0x40 [ 265.509560][T16612] genl_rcv+0x28/0x40 [ 265.513564][T16612] netlink_unicast+0x80f/0x9b0 [ 265.518427][T16612] ? __pfx_netlink_unicast+0x10/0x10 [ 265.523740][T16612] ? netlink_sendmsg+0x650/0xb40 [ 265.528892][T16612] ? skb_put+0x11b/0x210 [ 265.533211][T16612] netlink_sendmsg+0x813/0xb40 [ 265.538240][T16612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.543896][T16612] ? aa_sock_msg_perm+0xf1/0x1b0 [ 265.549026][T16612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.554856][T16612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.560487][T16612] ____sys_sendmsg+0xa68/0xad0 [ 265.565270][T16612] ? __might_fault+0xaf/0x130 [ 265.570019][T16612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.575325][T16612] ? import_iovec+0x73/0xa0 [ 265.579872][T16612] ___sys_sendmsg+0x2a5/0x360 [ 265.584562][T16612] ? __lock_acquire+0x6b5/0x2cf0 [ 265.589559][T16612] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.594770][T16612] ? futex_wait+0x29a/0x380 [ 265.599333][T16612] ? __fget_files+0x2a/0x420 [ 265.603931][T16612] ? __fget_files+0x3a0/0x420 [ 265.608647][T16612] __x64_sys_sendmsg+0x1bd/0x2a0 [ 265.613595][T16612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.619114][T16612] ? rcu_is_watching+0x15/0xb0 [ 265.623896][T16612] do_syscall_64+0x14d/0xf80 [ 265.628529][T16612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.634569][T16630] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2927'. [ 265.643555][T16612] ? trace_irq_disable+0x37/0x100 [ 265.643588][T16612] ? clear_bhb_loop+0x40/0x90 [ 265.643611][T16612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.643629][T16612] RIP: 0033:0x7fdbf9b9bf79 [ 265.643647][T16612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.643661][T16612] RSP: 002b:00007fdbfaa6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.643681][T16612] RAX: ffffffffffffffda RBX: 00007fdbf9e15fa0 RCX: 00007fdbf9b9bf79 [ 265.643693][T16612] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 265.643704][T16612] RBP: 00007fdbf9c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 265.643715][T16612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.643726][T16612] R13: 00007fdbf9e16038 R14: 00007fdbf9e15fa0 R15: 00007fff2c3c8798 [ 265.643754][T16612] [ 265.643781][T16612] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 265.643794][T16612] CPU: 1 UID: 0 PID: 16612 Comm: syz.0.2923 Not tainted syzkaller #0 PREEMPT(full) [ 265.643813][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.643824][T16612] Call Trace: [ 265.643832][T16612] [ 265.643839][T16612] vpanic+0x1e0/0x670 [ 265.643865][T16612] panic+0xc5/0xd0 [ 265.643885][T16612] ? __pfx_panic+0x10/0x10 [ 265.643920][T16612] __warn+0x315/0x4a0 [ 265.643939][T16612] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 265.643963][T16612] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 265.643985][T16612] __report_bug+0x29a/0x540 [ 265.644010][T16612] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 265.644032][T16612] ? __pfx___report_bug+0x10/0x10 [ 265.644050][T16612] ? __lock_acquire+0x6b5/0x2cf0 [ 265.644076][T16612] ? __lock_sock_fast+0x45/0xe0 [ 265.644097][T16612] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 265.644117][T16612] report_bug+0x16a/0x220 [ 265.644137][T16612] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 265.644155][T16612] ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430 [ 265.644174][T16612] handle_bug+0x98/0x200 [ 265.644197][T16612] exc_invalid_op+0x1a/0x50 [ 265.644219][T16612] asm_exc_invalid_op+0x1a/0x20 [ 265.644235][T16612] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 265.644256][T16612] Code: 01 00 00 49 89 c6 e8 7e bb 36 f6 e9 28 fb ff ff e8 74 bb 36 f6 48 89 df be 03 00 00 00 e8 e7 5c 17 f9 eb a4 e8 60 bb 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 265.644270][T16612] RSP: 0000:ffffc9001a4d7160 EFLAGS: 00010293 [ 265.644286][T16612] RAX: ffffffff8b8d7f70 RBX: 0000000000000000 RCX: ffff8880772c1e40 [ 265.644299][T16612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.644308][T16612] RBP: ffffc9001a4d73b0 R08: ffff88802a56b107 R09: 1ffff110054ad620 [ 265.644321][T16612] R10: dffffc0000000000 R11: ffffed10054ad621 R12: 1ffff110054ad61f [ 265.644343][T16612] R13: ffff88807b366780 R14: ffff88802a56a640 R15: ffff88802a56b0f8 [ 265.644363][T16612] ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430 [ 265.644400][T16612] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 265.644440][T16612] ? rcu_is_watching+0x15/0xb0 [ 265.644471][T16612] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 265.644500][T16612] genl_family_rcv_msg_doit+0x22a/0x330 [ 265.644521][T16612] ? __asan_memcpy+0x40/0x70 [ 265.644543][T16612] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 265.644576][T16612] ? bpf_lsm_capable+0x9/0x20 [ 265.644593][T16612] ? security_capable+0x7e/0x2c0 [ 265.644621][T16612] genl_rcv_msg+0x61c/0x7a0 [ 265.644647][T16612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.644667][T16612] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 265.644692][T16612] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.644722][T16612] netlink_rcv_skb+0x232/0x4b0 [ 265.644740][T16612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.644762][T16612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.644777][T16612] ? genl_rcv+0x19/0x40 [ 265.644811][T16612] ? down_read+0x272/0x2e0 [ 265.644831][T16612] ? genl_rcv+0xd/0x40 [ 265.644857][T16612] genl_rcv+0x28/0x40 [ 265.644875][T16612] netlink_unicast+0x80f/0x9b0 [ 265.644907][T16612] ? __pfx_netlink_unicast+0x10/0x10 [ 265.644931][T16612] ? netlink_sendmsg+0x650/0xb40 [ 265.644947][T16612] ? skb_put+0x11b/0x210 [ 265.644969][T16612] netlink_sendmsg+0x813/0xb40 [ 265.644996][T16612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.645017][T16612] ? aa_sock_msg_perm+0xf1/0x1b0 [ 265.645040][T16612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.645062][T16612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.645079][T16612] ____sys_sendmsg+0xa68/0xad0 [ 265.645099][T16612] ? __might_fault+0xaf/0x130 [ 265.645125][T16612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.645153][T16612] ? import_iovec+0x73/0xa0 [ 265.645175][T16612] ___sys_sendmsg+0x2a5/0x360 [ 265.645194][T16612] ? __lock_acquire+0x6b5/0x2cf0 [ 265.645216][T16612] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.645243][T16612] ? futex_wait+0x29a/0x380 [ 265.645287][T16612] ? __fget_files+0x2a/0x420 [ 265.645304][T16612] ? __fget_files+0x3a0/0x420 [ 265.645330][T16612] __x64_sys_sendmsg+0x1bd/0x2a0 [ 265.645358][T16612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.645388][T16612] ? rcu_is_watching+0x15/0xb0 [ 265.645418][T16612] do_syscall_64+0x14d/0xf80 [ 265.645437][T16612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.645454][T16612] ? trace_irq_disable+0x37/0x100 [ 265.645472][T16612] ? clear_bhb_loop+0x40/0x90 [ 265.645492][T16612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.645508][T16612] RIP: 0033:0x7fdbf9b9bf79 [ 265.645522][T16612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.645535][T16612] RSP: 002b:00007fdbfaa6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.645553][T16612] RAX: ffffffffffffffda RBX: 00007fdbf9e15fa0 RCX: 00007fdbf9b9bf79 [ 265.645565][T16612] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 265.645576][T16612] RBP: 00007fdbf9c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 265.645587][T16612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.645598][T16612] R13: 00007fdbf9e16038 R14: 00007fdbf9e15fa0 R15: 00007fff2c3c8798 [ 265.645626][T16612] [ 265.649124][T16612] Kernel Offset: disabled