last executing test programs: 3.642528281s ago: executing program 1 (id=2163): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000060000000000000700000000020000000000001201000000002e5f00000030dc30"], 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x0, 0x2, 0x8, 0xc}], 0x10, 0xf1b}, 0x94) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000780)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000800)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r2, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000840)={0x3b}, 0x8) accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000880), &(0x7f00000008c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000004c0)='pim6reg1\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x38, 0x26, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0x2}, {0x10, 0x5}, {0xa, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000002000000"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x6, &(0x7f0000000440)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r5 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5) writev(r5, &(0x7f00000026c0)=[{&(0x7f00000003c0)="efce26262f9664e339bcfe37d927424bbfc67f97fa792b31ce79d882", 0x1c}, {&(0x7f0000001240)="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", 0xf64}], 0x2) 2.940604921s ago: executing program 0 (id=2171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000540)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, r4}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x10000, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}]}, 0x104}}, 0x20000800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r5, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) 2.870585739s ago: executing program 0 (id=2174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000a00000000000061104b000000000095000000010000009023af8a7b67168794f24b11c1735436c3f418c5a06e876cbd0abb0c7e0f21772807987f21959c641a11cdf542ab9c19a0fe07613f292c6e381efc52a81b2aec25474578e38b1cdcac2b5e9a0c00cd"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.54696278s ago: executing program 0 (id=2175): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000e9ff00"/28], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'pim6reg\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1a, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc782}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4f1a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000440)='syzkaller\x00', 0xfffffffd, 0x2e, &(0x7f0000000480)=""/46, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x4, 0x10000, 0xb0d5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r0, r0, r0], &(0x7f0000000580)=[{0x4, 0x2, 0x4, 0x8}, {0x5, 0x2, 0x6}, {0x4, 0x1, 0x0, 0x9}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f00000001c0)='GPL\x00', 0x9}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000280)=0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000880)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000ac0)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x10, &(0x7f0000000b40)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000b80)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000bc0)={r6, 0x9}, 0x8) syz_emit_ethernet(0xa2, &(0x7f0000000a40)=ANY=[@ANYBLOB="ffffffffffff8878708baa0286dd60000000006c3a00fe8000000000000000000000000000bbff0200000000000000000000000000018f009078f8ff000106080003ff01000000000000000000000000000100000000000000000000ffffac14140a200100"/111], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000680)={0x1, [0x0]}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000700)={r7, 0x2}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 2.546082833s ago: executing program 1 (id=2176): r0 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0, 0x202}], 0x1, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x1411, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c00000040000901feffffff0000000004710000040042800c000180060006000800"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.286533728s ago: executing program 1 (id=2180): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', 0x1000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r4, 0x1, 0x70bd26, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000980)={0x9, 'vlan1\x00', {0x6719}, 0x5}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000680)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_mptcp_MPTCP_INFO(r7, 0x11c, 0x1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x60) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r9) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x20, r10, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000030a05040000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000002280004800800014000000000080002400000000a140003006e657464657673696d30000000000000140000001100010000000000000800000500000a"], 0x84}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "43bf5b", 0x0, 0x67, 0x1, @mcast1, @loopback}}}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) 2.263200269s ago: executing program 3 (id=2181): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r0}, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a010000050000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000500000008000b40000000002800048024000180090001007866726d00000000140002800800024000000000080001400000000d0900010073797a30000000c5362a98001100010000000000000000000000000a"], 0xc4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0xf8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000480)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="010530000a0028000600000060"], 0x64) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) r5 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x10, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000ec0)='GPL\x00'}, 0x80) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000fcff000000000000000000000000000000000020000000"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000450902000003000085200000ab4c0300b7020000000000007b9af0ff000000008d09000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000f00)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x3, 0x2, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000000)=0xffff0001, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000540)={'veth0_vlan\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 2.177743426s ago: executing program 4 (id=2182): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe0300010000000008000400010000000600150007000000280016800800010002000000140005"], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000180), 0x4000000000001f2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x20008880) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x20000400) unshare(0x24020400) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) 2.061514188s ago: executing program 4 (id=2184): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x800000, 0x22ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x1, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25df9bfe, 0x80020000}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.951581833s ago: executing program 2 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@ipv4_deladdr={0x6c, 0x15, 0x8, 0x70bd2b, 0x25dfdbfb, {0x2, 0x5d676a4a301f453d, 0x2, 0x0, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x9e}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0xf01c, 0xfffffe01, 0x7}}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x7}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x6c}}, 0x0) 1.908600873s ago: executing program 3 (id=2186): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4080) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4008804) (async) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x6c, r2, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x84, r2, 0x5, 0xffffffff, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x84}}, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x1f90, 0x0, @local}, 0x1c) 1.87121183s ago: executing program 4 (id=2187): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @nat_keepalive={0x8, 0x22, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}], 0x18, 0x48d5}, 0x8050) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @nat_keepalive={0x8, 0x22, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}], 0x18, 0x48d5}, 0x8050) (async) 1.71555566s ago: executing program 3 (id=2188): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001540)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001680)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x13, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)=ANY=[@ANYBLOB="1ff73331", @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000001a40)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001480)={0x0, 0x300000, 0x1800, 0x9, 0x3}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b80)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x19, 0x3, &(0x7f0000001cc0)=ANY=[@ANYBLOB="18000000010000000000000000fa590181b47f51"], &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001c00)={r5, r4, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001c40)='veth1_to_bridge\x00', 0x10) (async) getsockopt$sock_buf(r6, 0x1, 0x19, 0x0, &(0x7f0000001c80)) (async, rerun: 32) connect$vsock_stream(r3, &(0x7f0000001500)={0x28, 0x0, 0x0, @local, 0x648308dd25ed8ce0}, 0x10) (rerun: 32) 1.696351055s ago: executing program 4 (id=2189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000002080)={'xfrm0\x00', {0x2, 0x0, @empty}}) sendto$inet(r2, &(0x7f0000000100)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000240)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)='y', 0x1}], 0x2a}}], 0x1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x40044) recvmmsg(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000cc0)=""/197, 0xc5}, {&(0x7f0000000dc0)=""/139, 0x8b}, {&(0x7f0000000e80)=""/209, 0xd1}, {&(0x7f0000000f80)=""/56, 0x2a}, {&(0x7f0000000fc0)=""/167, 0xa7}, {&(0x7f0000001080)=""/4082, 0xff2}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3aa0}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x120, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x58, 0x0, &(0x7f0000000940)="c1bcb080cd21d308098ee68888a8", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000200)='4', 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000980)={'wg2\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x23, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffff0000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800002cfe00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d80000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000559002000000000085000000c3000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x8c, &(0x7f0000000600)=""/140, 0x41100, 0x22, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x9, 0x40, 0x6}, 0x10, 0x1a49f, r5, 0x0, 0x0, &(0x7f0000000980), 0x10, 0x80000000}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) 1.688434243s ago: executing program 2 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x0) 1.528801582s ago: executing program 4 (id=2191): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0x4}}, 0xe8) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast1, 0x4e1f, 0x0, 'sed\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.52764544s ago: executing program 0 (id=2192): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000500)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x303601addd1ebebe, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x23}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="00032cbd7000fcdbdf251a0000000c000600030000000300000008000300", @ANYRES32=r4, @ANYBLOB="0c00060000000000ffffffe508000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="0c000600030000000300000044002e80050005000100000008000600000000000c000400000000000000000006000200010000000c0004000202aaaaaaaaaaaa06000100050000000600030003000000"], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x20048005) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0xa5e9089bcea36a05}, 0xe817188763e757d8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r7) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x20, r8, 0xbfbafbd3ccd06c09, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x14000820}, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) 1.526911317s ago: executing program 2 (id=2193): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000440)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000540)=0x57bb, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0x0, 0x0, 0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0x0, 0x0, 0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000580)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000580)=r2, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000640)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000640)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000680)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000006c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000700)=0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000040)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) (async) sendto$inet6(r5, &(0x7f0000000040)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0xa00000000000000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "00000000000000000000000000e5ff00", "dbdc27ff", "16de86d67a9426bd"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "00000000000000000000000000e5ff00", "dbdc27ff", "16de86d67a9426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000800)=0x8, 0x4) 1.52544092s ago: executing program 3 (id=2194): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$kcm(0xa, 0x2, 0x73) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xd}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000071c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x400d0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x68}}, 0x10) (async, rerun: 64) accept$alg(0xffffffffffffffff, 0x0, 0x0) 1.295170692s ago: executing program 2 (id=2195): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f00000012c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a0001032dbd7000fcff000008"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) connect$inet(r0, &(0x7f0000001300)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000001340)=[{&(0x7f0000001380)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) 1.26418547s ago: executing program 1 (id=2196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_cgroup={{0x1}, {0x3d, 0x2, [@TCA_CGROUP_EMATCHES={0x3c}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.088074399s ago: executing program 3 (id=2197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x10, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020003000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0fffff3c70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 988.347259ms ago: executing program 0 (id=2198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x1, 0xffffffff, 0x6}, {0x5, 0xa, 0x6d1d}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) 987.270255ms ago: executing program 2 (id=2199): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x610) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) (async) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x3f94, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000004100010026bd700000000000030100000f00000012000100002802e08a1f50744e342fa3ad60000004000280100003800c0008001c"], 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000004100010026bd700000000000030100000f00000012000100002802e08a1f50744e342fa3ad60000004000280100003800c0008001c"], 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@can={{0x3, 0x0, 0x1}, 0x45, 0x2, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) (async) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@can={{0x3, 0x0, 0x1}, 0x45, 0x2, 0x0, 0x0, "f9fbffffffffffff"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40012182) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 927.38ms ago: executing program 1 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000ba008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000010c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000001180)="b800000500000000", &(0x7f00000011c0)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001200)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000001240)={0x6}, 0x10) write(r4, &(0x7f0000001280)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000012c0)={@tcp6=r4, r1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000002f00fddb"], 0x14}, 0x1, 0x0, 0x0, 0x802}, 0x4000080) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f00000013c0)=0x40000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd72, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 918.5336ms ago: executing program 0 (id=2201): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8, 0x400000000000}, {0xffffffffffffffff, 0x1, 0x800, 0x1}, {0x0, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) poll(&(0x7f0000000080)=[{r0}, {}], 0x2, 0xf45) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x7, 0x20, 0x8, 0x5}}) r3 = socket(0x27, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{&(0x7f0000000340)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="9c", 0x1}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000940)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000980)=@assoc_value={0x0}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={r4, 0x3}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="005341c6ce92303666b7cce84f07701a", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000069e83fcd6100000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0x47, 0x0, &(0x7f0000000d80)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1e, 0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r5], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000d40)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="e97a305de91976f60803596728e1e37bbb538d0e85d1d6e2d860f321b56e4190c8810b1f6e8a1864bbd5f9cbbd399536f042760f3b1ab005830042fcdaf10d99eb536aee7e4b79864aaa7a902801bac4ac584de080d7008f68ecaf614e43e1d4284582272c5a045ff78054287eb89a71793c98f0ffe4f4885e0af241bb0b525635c981da4d4be00eb7a1b04aafd0b317c740cfd91cd58ef2a4268a53412afcde354ae6f1b548ab1fc3b1de98ea91f55498921b43cf06fbcfd8d2ad72fbea008dbe2d969e638a93f12bddfd6f7d224d2b562ecd7d5b15584e64feb6", 0xdb}, {&(0x7f0000000280)="6063a67de20542af34d1dc041b3f078a1c91eb9dba6d3311b48364444347731f799412a8955065bf06cd92538da9d0b9e23ce01a4d9840839cedfb9fa0b862a974cca9aae98f268c17183ccfa39b2ac503e338f68aba677e81f60d30af34f075fa2fec2428bc247dd60a543ad35aab7c81a7d30a615908ac6c37a554766f28c214bb577b0b86d1da866843d3d5e8fb07352375229582475aa33f80d4c346e7c2106e822e4e72b92e138cdfb52ab04c", 0xaf}, {&(0x7f0000000340)}, {&(0x7f0000000380)="a881671496798c297ef719009d7b7b47ec3f874896aa5f07b18d2c100ad45bda2a747da3cc5ba0d5bfa3179e0d2738e00f4e3a3842304c0a84accc37281696f34e8a0f42f27866abd1bf147a9621564e49d2d37c429d41c2c211adb8bd82a7b646cd710edf75b1849572cbb6f93eee3aa47c70e1c62521e1d171c644d7c1a1f29a174cb027b06fcd016349be5798041c53280eae491e44b21a17ce388f8deccd6339b642d61b7ec8e8f3c189ec372ed61133093875c657364d82dcd43febeebbecc01c93339e005555cc80586b2104674a737ea2753affbb9f500b3ecf", 0xdd}, {&(0x7f0000000840)="9058a7bc5fc837f58b573c98fea48141040d01000000000000007cf900b0f93e898d6a34978d21b104a259293043b2b45cf4faed5e41f41d527fb2ddacf6c95cc7c44016b0825ac055f56f00394f5782068579dc9a4dafc954783d88184ac028dff443c3974c238ec590ff236df19770409a6a1ef99328b15ba2732b42d6f12f6a1e60c52168279503ed98d4e0c5767e9a97138927b67d598ae2c6f5ceed815565d5475cad676046dc77f754c6e1db47", 0xb0}, {&(0x7f0000000540)="0868986b8e7891d190544a6f26681f4e8b5a3209aa7840ba99d293dcbc7154020457405625ab3ddb04aedf4a23b074148665827768805d1247d58c95c97732de0d6ff20f136e871fda37becf720f537489f19b0a23e78c9cba099ea96cfb71e7e8803f20acc6e925872ba9260fafbd38856e9da8ce0f6c9d14dbb71e48c5d8e879f874b01d70c0f82f6bd320515a20d1f42e3ca8828f56cc8fc3ae90f67aace524d8b56207637589d2617b5d812401fd3aa40cbc08603293b3b8644515936e352801502da14ba95a835843bc5d2b92765be4daca6029b85c6e11f5b01688ab0b469833e20e08cfa24c77d4da56d4", 0xee}, {&(0x7f0000000640)="cf40f2a8af009786bda7a875a211a7be1ddd6ff167f6708070d8222ffd176049e2930ce83145ec726613ed86c47547866b6981", 0x33}], 0x7, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}}}], 0x20}, 0x40000) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$pptp(r8, &(0x7f0000000040)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 737.98792ms ago: executing program 3 (id=2202): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000700)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1a, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000880)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000500)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x400c4c5}, 0x0) socket(0x1d, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x80800) shutdown(r4, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000380), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000e202000000850000002b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000400)=0x8) 295.742493ms ago: executing program 4 (id=2203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fdffffff3900000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000005600000119000d80180003801400030001000200e1fd0000030003003ef3090000000500020009002e0e04000000070001003b000000010064000000b4d1f5f63f5558b2fc4b27d32e1729753abeb2a189cb"], 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, r3, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x31a0, 0x40}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x13}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 22.046447ms ago: executing program 1 (id=2204): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffdf0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600010a00000000c00e00000000000080d2a62e912bcff784a501afd1ec309c39cc35d7a7d4d3d9d88d9dadb5cb1e14359c2610b30fdc246fe33a330ce80b5def7e1edee8669bddde30cdf0e5dec9f3f1cb7b2c"], 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x30, 0x2) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000208"], 0xe) recvfrom$inet(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=2205): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private=0xa010100, @in=@broadcast, 0x4e23, 0x5, 0x4e20, 0x1000, 0xa, 0x40, 0x20, 0x5c, 0x0, 0xee01}, {0x1, 0x5c1a, 0x1, 0xb2ca, 0x2a66, 0x2, 0x8, 0xff}, {0x28, 0x927, 0x40}, 0x5, 0x6e6bb2, 0x2, 0x0, 0x2}, {{@in6=@private0, 0x4d6, 0x33}, 0x0, @in6=@mcast2, 0x3503, 0x3, 0x3, 0x5, 0x88, 0x9, 0x7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00'}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x5f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): e [ 88.043056][ T6337] bridge0: port 3(gretap0) entered blocking state [ 88.043201][ T6337] bridge0: port 3(gretap0) entered forwarding state [ 88.546846][ T6370] ip_tables: iptables: counters copy to user failed while replacing table [ 90.917965][ T6324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.166343][ T6411] __nla_validate_parse: 4 callbacks suppressed [ 91.166363][ T6411] netlink: 72 bytes leftover after parsing attributes in process `syz.2.146'. [ 91.334551][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.153'. [ 91.424165][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.156'. [ 91.595285][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 91.628974][ T6455] hsr_slave_1 (unregistering): left promiscuous mode [ 91.745709][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'. [ 94.121320][ T6406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.395143][ T6499] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 94.535354][ T6506] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.547173][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.171'. [ 94.547196][ T6511] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.640286][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 94.856377][ T6529] netlink: 84 bytes leftover after parsing attributes in process `syz.4.174'. [ 94.857645][ T6528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.928192][ T6529] veth2: entered allmulticast mode [ 95.148286][ T5294] veth0_vlan: left promiscuous mode [ 95.175838][ T5751] veth0_vlan: entered promiscuous mode [ 95.388342][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 95.484992][ T567] IPVS: starting estimator thread 0... [ 95.568629][ T6559] IPVS: using max 40 ests per chain, 96000 per kthread [ 95.654197][ T6566] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 95.655629][ T6568] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 95.768740][ T6566] syzkaller1: entered allmulticast mode [ 95.785304][ T6573] netlink: 84 bytes leftover after parsing attributes in process `syz.2.184'. [ 95.843262][ T14] IPVS: starting estimator thread 0... [ 95.855485][ T6573] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 95.937671][ T6577] IPVS: using max 39 ests per chain, 93600 per kthread [ 96.012470][ T6580] netlink: 'syz.1.186': attribute type 1 has an invalid length. [ 96.012491][ T6580] netlink: 'syz.1.186': attribute type 2 has an invalid length. [ 96.541913][ T6619] __nla_validate_parse: 1 callbacks suppressed [ 96.541938][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.196'. [ 96.569370][ T6619] netlink: 'syz.3.196': attribute type 11 has an invalid length. [ 96.575984][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 96.596927][ T6619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.634652][ T6619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.755276][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 96.760389][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 96.923528][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 96.937686][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 97.675609][ T6689] netlink: 'syz.1.208': attribute type 4 has an invalid length. [ 97.687776][ T6689] openvswitch: netlink: Duplicate or invalid key (type 0). [ 97.687811][ T6689] openvswitch: netlink: Actions may not be safe on all matching packets [ 97.773526][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 97.773546][ T6702] netlink: 176 bytes leftover after parsing attributes in process `syz.0.212'. [ 97.773599][ T6702] netlink: 'syz.0.212': attribute type 5 has an invalid length. [ 97.783204][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 97.783223][ T6704] netlink: 176 bytes leftover after parsing attributes in process `syz.0.212'. [ 97.783272][ T6704] netlink: 'syz.0.212': attribute type 5 has an invalid length. [ 98.254098][ T6735] Bluetooth: hci0: unsupported parameter 5135 [ 98.254118][ T6735] Bluetooth: hci0: unsupported parameter 8192 [ 98.254133][ T6735] Bluetooth: hci0: unsupported parameter 5135 [ 98.254143][ T6735] Bluetooth: hci0: unsupported parameter 8192 [ 98.262850][ T6738] netlink: 'syz.4.220': attribute type 2 has an invalid length. [ 98.262885][ T6738] nbd: couldn't find a device at index -2147221500 [ 98.277093][ T6739] tipc: Enabled bearer , priority 9 [ 98.424407][ T6749] 8021q: VLANs not supported on ip6_vti0 [ 98.710662][ T6767] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.773246][ T6771] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.831632][ T6778] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 99.281830][ T6817] netlink: 'syz.3.243': attribute type 2 has an invalid length. [ 99.451932][ T6831] Cannot find set identified by id 0 to match [ 99.645987][ T6839] ip6gre1: entered allmulticast mode [ 99.650429][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.775639][ T6847] netlink: 'syz.3.251': attribute type 4 has an invalid length. [ 100.152430][ T6862] gretap0: left allmulticast mode [ 100.152456][ T6862] gretap0: left promiscuous mode [ 100.152782][ T6862] bridge0: port 3(gretap0) entered disabled state [ 100.181793][ T6862] bridge_slave_1: left allmulticast mode [ 100.181819][ T6862] bridge_slave_1: left promiscuous mode [ 100.182047][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.218674][ T6862] bridge_slave_0: left allmulticast mode [ 100.222127][ T6862] bridge_slave_0: left promiscuous mode [ 100.222352][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.641263][ T6883] tipc: Enabling of bearer rejected, failed to enable media [ 100.672170][ T6886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.725773][ T6886] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 100.756468][ T6886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.852408][ T6894] Bluetooth: hci0: unsupported parameter 5135 [ 100.852431][ T6894] Bluetooth: hci0: unsupported parameter 8192 [ 100.852443][ T6894] Bluetooth: hci0: unsupported parameter 5135 [ 100.852453][ T6894] Bluetooth: hci0: unsupported parameter 8192 [ 100.982486][ T6900] sit0: entered promiscuous mode [ 101.631735][ T6934] __nla_validate_parse: 18 callbacks suppressed [ 101.631755][ T6934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'. [ 101.632286][ T6934] netlink: 140 bytes leftover after parsing attributes in process `syz.0.279'. [ 102.094591][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 102.118181][ T6959] xfrm1: entered promiscuous mode [ 102.120896][ T6959] xfrm1: entered allmulticast mode [ 102.147703][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 102.194616][ T6963] netlink: 300 bytes leftover after parsing attributes in process `syz.0.291'. [ 102.198297][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 102.321903][ T6975] xt_MASQUERADE: bad rangesize 2147483646 [ 102.323762][ T6974] netlink: 72 bytes leftover after parsing attributes in process `syz.4.295'. [ 102.347981][ T6974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.295'. [ 102.378371][ T6979] validate_nla: 6 callbacks suppressed [ 102.378391][ T6979] netlink: 'syz.0.297': attribute type 5 has an invalid length. [ 102.659434][ T6995] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 102.698402][ T6995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.715610][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 102.746410][ T7002] Cannot find add_set index 4 as target [ 103.115427][ T7022] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 103.166145][ T7022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.177684][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 103.243288][ T7021] bond1: (slave geneve2): making interface the new active one [ 103.255432][ T7021] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 103.292715][ T7021] tc_dump_action: action bad kind [ 103.293014][ T7036] tc_dump_action: action bad kind [ 103.375279][ T7045] syzkaller0: entered promiscuous mode [ 103.375303][ T7045] syzkaller0: entered allmulticast mode [ 103.396833][ T14] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.396881][ T14] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.396911][ T14] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.396939][ T14] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.726384][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 103.985859][ T7078] netlink: 'syz.4.323': attribute type 12 has an invalid length. [ 106.062998][ T7022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.444295][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.501257][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 107.260865][ T7147] __nla_validate_parse: 3 callbacks suppressed [ 107.260884][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.0.342'. [ 107.791269][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 107.856723][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 107.881216][ T7173] syzkaller1: entered promiscuous mode [ 107.881236][ T7173] syzkaller1: entered allmulticast mode [ 108.152597][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 108.288489][ T7210] syzkaller1: entered promiscuous mode [ 108.288512][ T7210] syzkaller1: entered allmulticast mode [ 108.437318][ T7231] netlink: 'syz.0.360': attribute type 4 has an invalid length. [ 108.695611][ T7247] Cannot find set identified by id 0 to match [ 108.704931][ T7252] Cannot find set identified by id 0 to match [ 108.971841][ T7259] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 109.305728][ T7290] tipc: Enabling of bearer rejected, failed to enable media [ 109.338307][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 109.479640][ T31] audit: type=1107 audit(1794581843.786:2): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='賸5烑寱%柰U鼳伱速犽0仚l卼枯/ 6驃▕鐩' [ 109.507142][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 109.615886][ T7303] wg0 speed is unknown, defaulting to 1000 [ 109.625354][ T7303] wg0 speed is unknown, defaulting to 1000 [ 109.635204][ T7303] wg0 speed is unknown, defaulting to 1000 [ 109.946893][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 109.951921][ T7329] IPv6: addrconf: prefix option has invalid lifetime [ 109.982783][ T7327] x_tables: unsorted underflow at hook 4 [ 110.029737][ T30] wg0 speed is unknown, defaulting to 1000 [ 110.029802][ T7303] infiniband syz0: set active [ 110.029817][ T7303] infiniband syz0: added wg0 [ 110.077806][ T7303] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 110.077844][ T7303] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 110.077880][ T7303] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 110.135003][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056742000: rx timeout, send abort [ 110.152405][ T7340] : renamed from bond0 (while UP) [ 110.166027][ T7303] RDS/IB: syz0: added [ 110.166081][ T7303] smc: adding ib device syz0 with port count 1 [ 110.166098][ T7303] smc: ib device syz0 port 1 has no pnetid [ 110.169788][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 110.169819][ T7340] netlink: 'syz.1.380': attribute type 30 has an invalid length. [ 110.169832][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 110.172779][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 110.174125][ T7340] netlink: 'syz.1.380': attribute type 30 has an invalid length. [ 110.176651][ T25] wg0 speed is unknown, defaulting to 1000 [ 110.239945][ T7303] wg0 speed is unknown, defaulting to 1000 [ 110.512358][ T7303] wg0 speed is unknown, defaulting to 1000 [ 110.564515][ T7357] bridge_slave_0: default FDB implementation only supports local addresses [ 110.635288][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb04400: rx timeout, send abort [ 110.635361][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056742000: abort rx timeout. Force session deactivation [ 110.900705][ T7373] netlink: 'syz.4.387': attribute type 28 has an invalid length. [ 110.900727][ T7373] netlink: 'syz.4.387': attribute type 3 has an invalid length. [ 110.929473][ T7264] IPVS: starting estimator thread 0... [ 111.030832][ T7377] IPVS: using max 38 ests per chain, 91200 per kthread [ 111.135337][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bb04400: abort rx timeout. Force session deactivation [ 111.319731][ T7303] wg0 speed is unknown, defaulting to 1000 [ 111.684911][ T7400] syzkaller0: entered promiscuous mode [ 111.684937][ T7400] syzkaller0: entered allmulticast mode [ 111.726420][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.138955][ T7303] wg0 speed is unknown, defaulting to 1000 [ 112.140380][ T7411] ip_tables: iptables: counters copy to user failed while replacing table [ 112.161333][ T7411] syzkaller1: entered promiscuous mode [ 112.161352][ T7411] syzkaller1: entered allmulticast mode [ 112.533804][ T7430] TCP: TCP_TX_DELAY enabled [ 112.864099][ T7439] tipc: Enabling of bearer rejected, media not registered [ 112.918464][ T7448] openvswitch: netlink: Duplicate key (type 16). [ 112.924629][ T7303] wg0 speed is unknown, defaulting to 1000 [ 113.182194][ T7453] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 113.511169][ T7468] __nla_validate_parse: 3 callbacks suppressed [ 113.511191][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 113.908240][ T7494] netlink: 'syz.2.415': attribute type 8 has an invalid length. [ 114.274135][ T7513] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.537336][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 114.538064][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 115.358082][ T7581] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 115.358104][ T7581] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 115.447870][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'. [ 115.452389][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'. [ 115.580834][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 115.628538][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.442'. [ 115.628561][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.442'. [ 116.061146][ T7622] netlink: 'syz.0.449': attribute type 9 has an invalid length. [ 116.295292][ T7646] netlink: 'syz.2.456': attribute type 6 has an invalid length. [ 116.440916][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 116.440952][ T7654] netlink: 'syz.3.458': attribute type 25 has an invalid length. [ 116.440966][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 116.482740][ T7654] netlink: 'syz.3.458': attribute type 25 has an invalid length. [ 116.488747][ T64] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.490895][ T7275] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.491163][ T7275] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.491195][ T7275] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.433234][ T7707] netlink: 'syz.3.472': attribute type 1 has an invalid length. [ 117.459983][ T7718] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 117.485289][ T7718] team0: Port device dummy0 added [ 117.803478][ T7736] tunl0: entered promiscuous mode [ 117.809271][ T7736] netlink: 'syz.1.479': attribute type 4 has an invalid length. [ 117.895226][ T7740] ip6t_frag: unknown flags 6 [ 118.122214][ T7751] xt_hashlimit: size too large, truncated to 1048576 [ 118.122395][ T7751] xt_hashlimit: max too large, truncated to 1048576 [ 118.122486][ T7751] xt_hashlimit: invalid rate [ 118.266666][ T7763] ipt_rpfilter: unknown options [ 118.423991][ T7777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.553388][ T7790] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.566508][ T7790] __nla_validate_parse: 10 callbacks suppressed [ 118.566641][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 118.673333][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 118.743123][ T7793] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 118.754644][ T7793] bond1 (unregistering): Released all slaves [ 118.863436][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'. [ 118.881203][ T7810] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 119.381426][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.392783][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.565915][ T7828] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 119.576447][ T7264] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.576487][ T7264] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.576516][ T7264] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.576543][ T7264] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.172476][ T7757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.259372][ T7857] bond0: entered allmulticast mode [ 121.313600][ T7860] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 121.338223][ T7860] validate_nla: 3 callbacks suppressed [ 121.338240][ T7860] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 121.345369][ T7866] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 121.345827][ T7860] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 121.421615][ T7863] netlink: 5 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.423843][ T7871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.424052][ T7871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.424294][ T7871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.424464][ T7871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.424615][ T7871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.424777][ T7871] netlink: 5 bytes leftover after parsing attributes in process `syz.3.504'. [ 121.574713][ T7883] netlink: 'syz.2.512': attribute type 58 has an invalid length. [ 121.585020][ T7885] netlink: 'syz.2.512': attribute type 58 has an invalid length. [ 121.642699][ T7895] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 121.645369][ T7896] x_tables: duplicate underflow at hook 3 [ 121.645696][ T7898] x_tables: duplicate underflow at hook 3 [ 121.786046][ T7895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.788164][ T7900] veth1_to_bond: entered allmulticast mode [ 121.789052][ T7897] veth1_to_bond: left allmulticast mode [ 121.840256][ T7904] bond2: (slave geneve3): making interface the new active one [ 121.841907][ T7904] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 121.925273][ T7915] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 122.036050][ T7922] netlink: 'syz.1.521': attribute type 2 has an invalid length. [ 122.369120][ T7954] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 122.454650][ T7952] bond3: option all_slaves_active: invalid value (179) [ 122.465582][ T7952] bond3 (unregistering): Released all slaves [ 122.551947][ T7959] bond2: Unable to set up delay as MII monitoring is disabled [ 122.553856][ T7959] bond2 (unregistering): Released all slaves [ 122.610612][ T7960] team0 (unregistering): Port device team_slave_0 removed [ 122.630347][ T7960] team0 (unregistering): Port device team_slave_1 removed [ 122.647344][ T7960] team0 (unregistering): Port device dummy0 removed [ 122.787328][ T7973] syzkaller0: left promiscuous mode [ 122.787349][ T7973] syzkaller0: left allmulticast mode [ 122.798543][ T7972] Bluetooth: hci0: unsupported parameter 5134 [ 122.798563][ T7972] Bluetooth: hci0: unsupported parameter 8192 [ 122.798574][ T7972] Bluetooth: hci0: unsupported parameter 5134 [ 122.798584][ T7972] Bluetooth: hci0: unsupported parameter 8192 [ 122.853012][ T7980] Bluetooth: hci0: unsupported parameter 5134 [ 122.853034][ T7980] Bluetooth: hci0: unsupported parameter 8192 [ 122.853044][ T7980] Bluetooth: hci0: unsupported parameter 5134 [ 122.853052][ T7980] Bluetooth: hci0: unsupported parameter 8192 [ 123.083637][ T7998] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 123.218075][ T8008] x_tables: duplicate underflow at hook 4 [ 123.293435][ T8022] xt_MASQUERADE: bad MAP_IPS. [ 123.331865][ T8019] Bluetooth: MGMT ver 1.23 [ 123.853863][ T8069] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 123.858994][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.861030][ T8069] : (slave team0): Enslaving as an active interface with an up link [ 124.014519][ T8080] __nla_validate_parse: 48 callbacks suppressed [ 124.014539][ T8080] netlink: 52 bytes leftover after parsing attributes in process `syz.3.562'. [ 124.133893][ T8087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.242359][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 124.323834][ T8090] hsr_slave_1 (unregistering): left promiscuous mode [ 124.352157][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 124.421991][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 124.523229][ T8108] 7O: renamed from dummy0 (while UP) [ 124.590905][ T8110] x_tables: duplicate underflow at hook 2 [ 124.603043][ T8110] netlink: 6 bytes leftover after parsing attributes in process `syz.4.573'. [ 124.607569][ T8110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.637740][ T8115] x_tables: duplicate underflow at hook 2 [ 124.639699][ T8119] netlink: 6 bytes leftover after parsing attributes in process `syz.4.573'. [ 124.649464][ T8119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.708913][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 124.730943][ T8123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.872914][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 124.957845][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 125.152027][ T8147] : (slave team0): Releasing backup interface [ 125.161781][ T8147] team0: Cannot enslave team device to itself [ 125.175659][ T8144] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.175955][ T8144] team0: Cannot enslave team device to itself [ 125.176114][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 125.946777][ T8202] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.127444][ T8210] tipc: Enabling of bearer rejected, media not registered [ 126.175546][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.176964][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.205888][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.206015][ T8219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.207120][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.207242][ T8219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.242538][ T8219] bridge0: entered promiscuous mode [ 126.242563][ T8219] bridge0: entered allmulticast mode [ 126.394024][ T8233] validate_nla: 2 callbacks suppressed [ 126.394044][ T8233] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 126.443531][ T8233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.974545][ T8273] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 127.015462][ T8273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.016161][ T8275] tipc: Enabling of bearer rejected, failed to enable media [ 127.040377][ T8275] netlink: 'syz.4.622': attribute type 5 has an invalid length. [ 127.040396][ T8275] netlink: 'syz.4.622': attribute type 9 has an invalid length. [ 127.197973][ T8287] syzkaller0: mtu less than device minimum [ 127.726385][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.868738][ T8334] bond1: option lp_interval: invalid value (0) [ 127.868761][ T8334] bond1: option lp_interval: allowed values 1 - 2147483647 [ 127.870537][ T8334] bond1 (unregistering): Released all slaves [ 128.144653][ T8353] netlink: 'syz.1.646': attribute type 4 has an invalid length. [ 128.383784][ T8371] xt_l2tp: v2 doesn't support IP mode [ 128.385744][ T8372] xt_l2tp: v2 doesn't support IP mode [ 129.073241][ T8405] xt_hl: Unknown Hop Limit match mode: 206 [ 129.288520][ T8429] __nla_validate_parse: 24 callbacks suppressed [ 129.288540][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 129.381774][ T8432] ip_tables: iptables: counters copy to user failed while replacing table [ 129.494272][ T8440] C: renamed from lo [ 129.681921][ T8440] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 130.064369][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 130.100207][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 130.740487][ T8457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.741409][ T8468] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.969937][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 131.025767][ T8530] raw_sendmsg: syz.4.681 forgot to set AF_INET. Fix it! [ 131.079383][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.683'. [ 131.132229][ T8536] netlink: 'syz.0.684': attribute type 10 has an invalid length. [ 131.144872][ T8536] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.164927][ T8536] netlink: 'syz.0.684': attribute type 10 has an invalid length. [ 131.165043][ T8536] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 131.613076][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 131.968085][ T4950] Bluetooth: hci0: command 0x0401 tx timeout [ 132.847484][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.886388][ T7270] wlan1: Trigger new scan to find an IBSS to join [ 133.903685][ T8524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.046797][ T4950] Bluetooth: hci0: command 0x0401 tx timeout [ 134.165675][ T8597] IPVS: ip_vs_add_dest(): server weight less than zero [ 134.334435][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 134.334471][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 134.531437][ T8625] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.112529][ T8659] sctp: [Deprecated]: syz.2.715 (pid 8659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.112529][ T8659] Use struct sctp_sack_info instead [ 135.161385][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 135.173033][ T8666] netlink: 'syz.4.716': attribute type 142 has an invalid length. [ 135.195565][ T8666] syzkaller1: entered promiscuous mode [ 135.195586][ T8666] syzkaller1: entered allmulticast mode [ 135.465700][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 135.813194][ T8719] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 135.861507][ T8721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.897062][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.729'. [ 135.910045][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 135.930180][ T8723] netlink: 'syz.4.729': attribute type 7 has an invalid length. [ 136.321066][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 136.321087][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 136.686094][ T8762] netlink: 64 bytes leftover after parsing attributes in process `syz.2.741'. [ 136.734816][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.751537][ T8762] bridge_slave_0 (unregistering): left allmulticast mode [ 136.751562][ T8762] bridge_slave_0 (unregistering): left promiscuous mode [ 136.751652][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.810097][ T7270] IPVS: starting estimator thread 0... [ 136.815016][ T8769] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 136.897035][ T8770] IPVS: using max 32 ests per chain, 76800 per kthread [ 136.927384][ T7268] wlan1: Trigger new scan to find an IBSS to join [ 137.203722][ T8797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 137.456356][ T8813] syz_tun: entered allmulticast mode [ 137.490425][ T8810] syz_tun: left allmulticast mode [ 137.745196][ T8841] vlan1: entered allmulticast mode [ 137.745216][ T8841] veth0_vlan: entered allmulticast mode [ 138.675268][ T8864] ip_tables: iptables: counters copy to user failed while replacing table [ 138.702306][ T8865] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 138.745650][ T8865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.762549][ T8865] bond3: (slave geneve2): making interface the new active one [ 138.774591][ T8865] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 139.052034][ T8887] Driver unsupported XDP return value 0 on prog (id 250) dev N/A, expect packet loss! [ 139.425547][ T8900] __nla_validate_parse: 4 callbacks suppressed [ 139.425564][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 139.466596][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.779'. [ 139.488325][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.779'. [ 139.688400][ T4950] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 139.795828][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 139.859966][ T8919] x_tables: duplicate underflow at hook 1 [ 139.892394][ T7268] wlan1: Trigger new scan to find an IBSS to join [ 140.543126][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 140.570181][ T8957] IPVS: ip_vs_add_dest(): server weight less than zero [ 140.662323][ T8967] netlink: 'syz.4.798': attribute type 10 has an invalid length. [ 140.662344][ T8967] netlink: 55 bytes leftover after parsing attributes in process `syz.4.798'. [ 140.791775][ T8970] sctp: [Deprecated]: syz.2.797 (pid 8970) Use of int in max_burst socket option. [ 140.791775][ T8970] Use struct sctp_assoc_value instead [ 140.815346][ T7275] wlan1: Creating new IBSS network, BSSID 9a:b4:ff:6e:5e:80 [ 140.928452][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 140.967485][ T8984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.972187][ T8985] macvlan2: entered promiscuous mode [ 140.972201][ T8985] macvlan2: entered allmulticast mode [ 140.972951][ T8985] bond4: entered promiscuous mode [ 140.973089][ T8985] bond4: entered allmulticast mode [ 140.973655][ T8985] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.975180][ T8985] bond4: left allmulticast mode [ 140.975204][ T8985] bond4: left promiscuous mode [ 141.060340][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 141.097567][ T8989] netlink: 92 bytes leftover after parsing attributes in process `syz.1.803'. [ 141.342452][ T9000] ip6t_hbh: too many supported opts specified [ 141.345290][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.807'. [ 141.678721][ T9022] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 141.702647][ T9022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.727441][ T9022] bond1: (slave geneve2): making interface the new active one [ 141.728724][ T9022] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 141.885050][ T9029] syzkaller0: entered promiscuous mode [ 141.885073][ T9029] syzkaller0: entered allmulticast mode [ 141.995216][ T7275] : (slave bond_slave_0): link status definitely down, disabling slave [ 142.641592][ T9062] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 142.671831][ T9065] tls_set_device_offload: netdev not found [ 142.711768][ T9062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.736159][ T9066] bond4: (slave geneve2): making interface the new active one [ 142.743974][ T9066] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 143.216278][ T9072] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 143.634114][ T9114] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 143.702770][ T9114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.957448][ T9131] syzkaller0: entered promiscuous mode [ 143.957470][ T9131] syzkaller0: entered allmulticast mode [ 144.003545][ T9132] sctp: [Deprecated]: syz.0.844 (pid 9132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.003545][ T9132] Use struct sctp_sack_info instead [ 144.273370][ T9149] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 144.273392][ T9149] netlink: 'syz.1.851': attribute type 2 has an invalid length. [ 144.297975][ T9151] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 144.297995][ T9151] netlink: 'syz.1.851': attribute type 2 has an invalid length. [ 144.356544][ T9145] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 144.356575][ T9145] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 144.465457][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.479957][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.524134][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.683844][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.701841][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.722152][ T9123] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 144.733214][ T9127] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 144.864565][ T9182] __nla_validate_parse: 8 callbacks suppressed [ 144.864585][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 144.932861][ T9170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.461618][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.461734][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.461862][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.461962][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.462080][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.462177][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.462278][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.462377][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.462475][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.701535][ T9224] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 145.862178][ T9228] tipc: Enabling of bearer rejected, media not registered [ 145.879815][ T9234] validate_nla: 2 callbacks suppressed [ 145.879833][ T9234] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 146.013978][ T9234] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.331316][ T9261] netlink: 'syz.3.878': attribute type 2 has an invalid length. [ 146.391338][ T9261] !;: entered promiscuous mode [ 146.600079][ T9269] bridge0: entered promiscuous mode [ 146.600165][ T9269] bridge0: entered allmulticast mode [ 146.960114][ T9290] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 147.026461][ T9290] bond3: entered promiscuous mode [ 147.026867][ T9290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.030486][ T9295] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 147.299408][ T9318] dvmrp1: entered allmulticast mode [ 147.656488][ T9342] xt_hl: Unknown Hop Limit match mode: 206 [ 147.751336][ T9354] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 147.918836][ T9363] syzkaller0: entered promiscuous mode [ 147.918859][ T9363] syzkaller0: entered allmulticast mode [ 147.958403][ T7266] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.958462][ T7268] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.958494][ T7268] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.958523][ T7268] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.150568][ T9379] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 148.225654][ T9385] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 148.346706][ T9389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.348719][ T9389] bond4: (slave bond5): making interface the new active one [ 148.349240][ T9389] bond4: (slave bond5): Enslaving as an active interface with an up link [ 148.399510][ T9395] vlan1: left allmulticast mode [ 148.399531][ T9395] veth0_vlan: left allmulticast mode [ 148.540237][ T9362] syzkaller0: entered promiscuous mode [ 148.540255][ T9362] syzkaller0: entered allmulticast mode [ 148.685578][ T9407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.777956][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.777981][ T9413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.779814][ T9413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.779833][ T9413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.025155][ T9419] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 149.342289][ T9446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.484304][ T9461] netlink: 'syz.4.926': attribute type 10 has an invalid length. [ 149.500432][ T9461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.513844][ T9461] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.806837][ T5635] Bluetooth: hci0: command 0x0401 tx timeout [ 149.809421][ T4950] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 150.120463][ T9503] netlink: 'syz.3.933': attribute type 12 has an invalid length. [ 150.460025][ T4950] Bluetooth: hci4: command 0x0405 tx timeout [ 150.772981][ T9537] __nla_validate_parse: 39 callbacks suppressed [ 150.772999][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'. [ 150.894656][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 151.015767][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 151.444396][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 151.462668][ T9586] xfrm1: entered promiscuous mode [ 151.462689][ T9586] xfrm1: entered allmulticast mode [ 151.585518][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 151.678681][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 151.723860][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 151.723884][ T9590] nbd: device at index 64 is going down [ 151.724012][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 151.724026][ T9590] nbd: device at index 64 is going down [ 151.724129][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 151.724141][ T9590] nbd: device at index 64 is going down [ 151.724243][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 151.724254][ T9590] nbd: device at index 64 is going down [ 151.724390][ T9590] nbd: device at index 64 is going down [ 151.724507][ T9590] nbd: device at index 64 is going down [ 151.724621][ T9590] nbd: device at index 64 is going down [ 151.724736][ T9590] nbd: device at index 64 is going down [ 151.724850][ T9590] nbd: device at index 64 is going down [ 151.724962][ T9590] nbd: device at index 64 is going down [ 151.725138][ T9590] nbd: device at index 64 is going down [ 151.725256][ T9590] nbd: device at index 64 is going down [ 151.725389][ T9590] nbd: device at index 64 is going down [ 151.725507][ T9590] nbd: device at index 64 is going down [ 151.725634][ T9590] nbd: device at index 64 is going down [ 151.725757][ T9590] nbd: device at index 64 is going down [ 151.725878][ T9590] nbd: device at index 64 is going down [ 151.726006][ T9590] nbd: device at index 64 is going down [ 151.726133][ T9590] nbd: device at index 64 is going down [ 151.744186][ T9590] nbd: device at index 64 is going down [ 151.744339][ T9590] nbd: device at index 64 is going down [ 151.744473][ T9590] nbd: device at index 64 is going down [ 151.750032][ T9590] nbd: device at index 64 is going down [ 151.750293][ T9590] nbd: device at index 64 is going down [ 151.750431][ T9590] nbd: device at index 64 is going down [ 151.750554][ T9590] nbd: device at index 64 is going down [ 151.750716][ T9590] nbd: device at index 64 is going down [ 151.750839][ T9590] nbd: device at index 64 is going down [ 151.756515][ T9590] nbd: device at index 64 is going down [ 151.756730][ T9590] nbd: device at index 64 is going down [ 151.756855][ T9590] nbd: device at index 64 is going down [ 151.756976][ T9590] nbd: device at index 64 is going down [ 151.757104][ T9590] nbd: device at index 64 is going down [ 151.757223][ T9590] nbd: device at index 64 is going down [ 151.757344][ T9590] nbd: device at index 64 is going down [ 151.757466][ T9590] nbd: device at index 64 is going down [ 151.760234][ T9590] nbd: device at index 64 is going down [ 151.760362][ T9590] nbd: device at index 64 is going down [ 151.760485][ T9590] nbd: device at index 64 is going down [ 151.772431][ T9590] nbd: device at index 64 is going down [ 151.772564][ T9590] nbd: device at index 64 is going down [ 151.772696][ T9590] nbd: device at index 64 is going down [ 151.772838][ T9590] nbd: device at index 64 is going down [ 151.773049][ T9590] nbd: device at index 64 is going down [ 151.774412][ T9590] nbd: device at index 64 is going down [ 151.774539][ T9590] nbd: device at index 64 is going down [ 151.776085][ T9590] nbd: device at index 64 is going down [ 151.780194][ T9590] nbd: device at index 64 is going down [ 151.794937][ T9590] nbd: device at index 64 is going down [ 151.795070][ T9590] nbd: device at index 64 is going down [ 151.795192][ T9590] nbd: device at index 64 is going down [ 151.795320][ T9590] nbd: device at index 64 is going down [ 151.795439][ T9590] nbd: device at index 64 is going down [ 151.795559][ T9590] nbd: device at index 64 is going down [ 151.795686][ T9590] nbd: device at index 64 is going down [ 151.796456][ T9590] nbd: device at index 64 is going down [ 151.796596][ T9590] nbd: device at index 64 is going down [ 151.796724][ T9590] nbd: device at index 64 is going down [ 151.816438][ T9590] nbd: device at index 64 is going down [ 151.816593][ T9590] nbd: device at index 64 is going down [ 151.816724][ T9590] nbd: device at index 64 is going down [ 151.816844][ T9590] nbd: device at index 64 is going down [ 151.816964][ T9590] nbd: device at index 64 is going down [ 151.817112][ T9590] nbd: device at index 64 is going down [ 152.090156][ T9612] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 152.155349][ T9266] udevd[9266]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.201646][ T9266] udevd[9266]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 152.633445][ T9640] ip_tables: iptables: counters copy to user failed while replacing table [ 152.905020][ T9659] netlink: 'syz.1.976': attribute type 102 has an invalid length. [ 153.075954][ T9671] hsr_slave_1 (unregistering): left promiscuous mode [ 153.228979][ T9688] block nbd1: NBD_DISCONNECT [ 153.332318][ T9693] netlink: 'syz.1.985': attribute type 2 has an invalid length. [ 153.442704][ T9701] netlink: 'syz.4.987': attribute type 28 has an invalid length. [ 153.442724][ T9701] netlink: 'syz.4.987': attribute type 3 has an invalid length. [ 153.782109][ T9724] v: renamed from vlan1 (while UP) [ 153.799458][ T9724] veth0_vlan: left promiscuous mode [ 154.263027][ T9741] netlink: 'syz.2.1001': attribute type 13 has an invalid length. [ 154.293298][ T9758] IPVS: ip_vs_add_dest(): server weight less than zero [ 154.668442][ T9781] netlink: 'syz.4.1016': attribute type 4 has an invalid length. [ 154.674915][ T9782] netlink: 'syz.4.1016': attribute type 4 has an invalid length. [ 154.800465][ T9791] netlink: 'syz.4.1019': attribute type 10 has an invalid length. [ 154.801088][ T9791] 8021q: VLANs not supported on lo [ 155.975485][ T9862] netlink: 'syz.0.1035': attribute type 9 has an invalid length. [ 156.044544][ T9864] __nla_validate_parse: 75 callbacks suppressed [ 156.044562][ T9864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'. [ 156.451887][ T9891] block nbd0: not configured, cannot reconfigure [ 156.821576][ T9919] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 156.841610][ T9924] ip_tables: iptables: counters copy to user failed while replacing table [ 156.861364][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 156.888160][ T9922] ip_tables: iptables: counters copy to user failed while replacing table [ 156.895084][ T9921] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 156.905555][ T5629] Bluetooth: hci0: unexpected event 0x13 length: 321 > 255 [ 156.917778][ T9921] bond2 (unregistering): Released all slaves [ 157.384398][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'. [ 157.612094][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 157.728092][ T9990] netlink: 'syz.3.1075': attribute type 10 has an invalid length. [ 157.749620][ T9990] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.749646][ T9990] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 157.749783][ T9990] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 157.940838][ T9997] netlink: 'syz.1.1079': attribute type 3 has an invalid length. [ 157.977157][T10000] netlink: 'syz.3.1080': attribute type 62 has an invalid length. [ 158.001432][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 158.034693][T10002] netlink: 'syz.3.1080': attribute type 62 has an invalid length. [ 158.051304][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 158.130676][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 158.300474][T10023] wireguard0: entered promiscuous mode [ 158.322032][T10027] syzkaller1: entered promiscuous mode [ 158.322053][T10027] syzkaller1: entered allmulticast mode [ 158.353622][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 158.356342][ T9976] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 158.462018][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'. [ 158.462050][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'. [ 158.575197][T10033] syzkaller1: entered promiscuous mode [ 158.575217][T10033] syzkaller1: entered allmulticast mode [ 158.792300][T10054] sit0: entered promiscuous mode [ 158.801945][T10054] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 159.008811][T10059] x_tables: unsorted underflow at hook 4 [ 159.128299][T10063] netlink: 'syz.0.1097': attribute type 4 has an invalid length. [ 160.611082][T10048] NFSD: Failed to start, no listeners configured. [ 161.662771][T10041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.863905][T10079] __nla_validate_parse: 2 callbacks suppressed [ 161.863927][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 161.884754][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1101'. [ 161.888936][T10080] IPv6: NLM_F_REPLACE set, but no existing node found! [ 161.895789][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 161.895984][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 161.896173][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 161.900276][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 161.900462][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 161.900648][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 161.900825][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 161.903658][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 162.054780][T10079] sctp: [Deprecated]: syz.0.1103 (pid 10079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.054780][T10079] Use struct sctp_sack_info instead [ 162.292178][T10103] tipc: Enabling of bearer rejected, failed to enable media [ 162.440068][T10114] Bluetooth: MGMT ver 1.23 [ 162.440101][T10114] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 162.731274][T10136] netlink: 'syz.4.1121': attribute type 2 has an invalid length. [ 163.055865][T10123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.208529][T10159] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 163.272601][T10159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.303287][T10167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.377652][T10158] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 163.377687][T10158] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 163.377723][T10158] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 163.609882][ T7273] smbdirect: ib_dev[syz2] removed [ 163.837598][T10190] bridge29: entered promiscuous mode [ 163.837662][T10190] bridge29: entered allmulticast mode [ 166.917886][T10236] __nla_validate_parse: 68 callbacks suppressed [ 166.917906][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1149'. [ 166.993876][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 166.999780][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 167.209697][T10254] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 167.227974][T10254] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.327934][T10259] sctp: [Deprecated]: syz.0.1162 (pid 10259) Use of int in maxseg socket option. [ 167.327934][T10259] Use struct sctp_assoc_value instead [ 167.851165][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 167.871275][T10261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.913061][T10265] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1164'. [ 167.924903][T10269] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1164'. [ 168.099143][T10276] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 168.100133][T10276] bond3 (unregistering): Released all slaves [ 168.204939][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1170'. [ 168.513992][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 168.528539][T10304] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 168.528551][T10304] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 168.573868][T10306] GUP no longer grows the stack in syz.2.1176 (10306): 200000003000-20000000a000 (200000001000) [ 168.573921][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.2.1176 Not tainted syzkaller #0 PREEMPT(full) [ 168.573934][T10306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 168.573945][T10306] Call Trace: [ 168.573950][T10306] [ 168.573955][T10306] dump_stack_lvl+0xe8/0x150 [ 168.573988][T10306] __get_user_pages+0x1b01/0x1ea0 [ 168.574021][T10306] __gup_longterm_locked+0xe24/0x16f0 [ 168.574077][T10306] gup_fast_fallback+0x3a4/0x27f0 [ 168.574134][T10306] ? __pfx_gup_fast_fallback+0x10/0x10 [ 168.574152][T10306] ? is_valid_gup_args+0x11f/0x200 [ 168.574169][T10306] ? get_user_pages_fast+0x4d/0xb0 [ 168.574185][T10306] __iov_iter_get_pages_alloc+0x378/0xa40 [ 168.574202][T10306] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 168.574217][T10306] ? __fget_files+0x2a/0x420 [ 168.574231][T10306] iov_iter_get_pages2+0x5e/0xa0 [ 168.574246][T10306] __se_sys_vmsplice+0x812/0x1670 [ 168.574271][T10306] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 168.574285][T10306] ? __pfx_futex_wait+0x10/0x10 [ 168.574336][T10306] do_syscall_64+0x16a/0x530 [ 168.574351][T10306] ? trace_irq_disable+0x3b/0x140 [ 168.574365][T10306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.574375][T10306] ? clear_bhb_loop+0x70/0xc0 [ 168.574389][T10306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.574399][T10306] RIP: 0033:0x7f50183a94d9 [ 168.574413][T10306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.574422][T10306] RSP: 002b:00007f50192eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 168.574437][T10306] RAX: ffffffffffffffda RBX: 00007f5018625fa0 RCX: 00007f50183a94d9 [ 168.574444][T10306] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000008 [ 168.574451][T10306] RBP: 00007f501843804e R08: 0000000000000000 R09: 0000000000000000 [ 168.574457][T10306] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 168.574463][T10306] R13: 00007f5018626038 R14: 00007f5018625fa0 R15: 00007ffc7c6618e8 [ 168.574480][T10306] [ 169.724054][T10219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.886849][T10309] xt_hashlimit: size too large, truncated to 1048576 [ 169.895216][T10310] xt_hashlimit: size too large, truncated to 1048576 [ 169.930338][T10313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1178'. [ 169.969165][T10319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.145343][T10332] ip_tables: iptables: counters copy to user failed while replacing table [ 170.164499][T10332] syzkaller1: entered promiscuous mode [ 170.164521][T10332] syzkaller1: entered allmulticast mode [ 170.210425][T10343] netlink: 'syz.4.1188': attribute type 16 has an invalid length. [ 170.210446][T10343] netlink: 'syz.4.1188': attribute type 17 has an invalid length. [ 170.235899][T10343] sit0: left promiscuous mode [ 170.294822][T10343] veth1_macvtap: left promiscuous mode [ 170.299078][T10343] veth0_macvtap: left promiscuous mode [ 170.300261][T10343] veth0_macvtap: entered promiscuous mode [ 170.302696][T10343] veth1_macvtap: entered promiscuous mode [ 170.324793][T10343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.330817][T10343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.335191][T10343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.352531][T10343] batman_adv: batadv0: Interface activated: ipvlan2 [ 170.352989][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 170.354059][T10343] netlink: 'syz.4.1188': attribute type 16 has an invalid length. [ 170.354074][T10343] netlink: 'syz.4.1188': attribute type 17 has an invalid length. [ 170.449717][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 170.449963][T10343] netlink: 'syz.4.1188': attribute type 16 has an invalid length. [ 170.449978][T10343] netlink: 'syz.4.1188': attribute type 17 has an invalid length. [ 170.537168][T10354] Bluetooth: hci0: unsupported parameter 5161 [ 170.537189][T10354] Bluetooth: hci0: unsupported parameter 8192 [ 170.537200][T10354] Bluetooth: hci0: unsupported parameter 5161 [ 170.537210][T10354] Bluetooth: hci0: unsupported parameter 8192 [ 170.575936][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 170.576192][T10343] netlink: 'syz.4.1188': attribute type 16 has an invalid length. [ 170.578314][T10343] netlink: 'syz.4.1188': attribute type 17 has an invalid length. [ 170.682174][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 170.785912][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 170.854733][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 170.874403][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 170.890868][T10343] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 171.213227][T10364] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.221396][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1194'. [ 171.233148][ T7273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.233459][ T7273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.246566][ T7273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.259466][ T7275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.529104][T10389] trusted_key: syz.0.1199 sent an empty control message without MSG_MORE. [ 172.809597][T10539] __nla_validate_parse: 34 callbacks suppressed [ 172.809616][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 173.021507][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 173.022440][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 173.150455][T10554] xt_l2tp: missing protocol rule (udp|l2tpip) [ 173.167896][ T7273] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 173.482173][T10567] : entered promiscuous mode [ 173.549175][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1216'. [ 173.942140][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1224'. [ 173.942173][T10595] validate_nla: 15 callbacks suppressed [ 173.942185][T10595] netlink: 'syz.4.1224': attribute type 7 has an invalid length. [ 173.942197][T10595] netlink: 'syz.4.1224': attribute type 8 has an invalid length. [ 173.942209][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1224'. [ 174.073548][T10605] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1222'. [ 174.145889][T10611] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1222'. [ 174.231788][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 174.285277][T10605] gretap0: entered promiscuous mode [ 174.292975][T10609] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 174.293322][T10611] 0{X功: renamed from gretap0 [ 174.337660][T10611] 0{X功: left promiscuous mode [ 174.337681][T10611] 0{X功: entered allmulticast mode [ 174.517876][T10623] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 174.601975][T10623] tunl0: left promiscuous mode [ 174.647949][T10631] xt_recent: Unsupported userspace flags (000000b1) [ 174.758666][T10641] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1232'. [ 174.823433][T10648] xt_policy: neither incoming nor outgoing policy selected [ 174.844525][T10627] bond0: entered promiscuous mode [ 174.848207][ T62] : (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 177.675885][T10648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.943239][T10779] __nla_validate_parse: 4 callbacks suppressed [ 177.943258][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1245'. [ 178.016872][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 178.140100][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 178.329817][ T151] IPVS: starting estimator thread 0... [ 178.363041][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 178.385019][T10810] netlink: 'syz.1.1252': attribute type 11 has an invalid length. [ 178.420125][T10809] net_ratelimit: 8 callbacks suppressed [ 178.420144][T10809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.427472][T10814] IPVS: using max 28 ests per chain, 67200 per kthread [ 178.536848][T10825] syzkaller0: left promiscuous mode [ 178.536868][T10825] syzkaller0: left allmulticast mode [ 178.587949][T10830] netlink: 'syz.2.1256': attribute type 5 has an invalid length. [ 178.588037][T10830] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1256'. [ 178.702929][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 178.702953][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 179.094618][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1267'. [ 179.140379][T10864] ip6gre2: entered promiscuous mode [ 179.140402][T10864] ip6gre2: entered allmulticast mode [ 179.144703][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1267'. [ 179.145138][T10864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1267'. [ 179.146998][T10866] netlink: 'syz.2.1264': attribute type 21 has an invalid length. [ 179.147017][T10866] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.199318][T10852] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 179.773288][T10881] xt_l2tp: missing protocol rule (udp|l2tpip) [ 179.881132][T10897] x_tables: duplicate underflow at hook 1 [ 180.119222][T10920] lo: entered promiscuous mode [ 180.120356][T10920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.257905][T10928] x_tables: duplicate underflow at hook 1 [ 180.484141][T10941] ip_tables: iptables: counters copy to user failed while replacing table [ 180.485842][T10942] ip_tables: iptables: counters copy to user failed while replacing table [ 180.589026][T10951] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 180.637952][T10951] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.784479][T10964] ip_tables: iptables: counters copy to user failed while replacing table [ 181.106596][T10979] lo: entered promiscuous mode [ 181.112723][T10979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.180153][ T5629] Bluetooth: hci4: link tx timeout [ 181.180171][ T5629] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.292108][ T4950] Bluetooth: hci4: link tx timeout [ 181.292133][ T4950] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.320064][ T4950] Bluetooth: hci4: link tx timeout [ 181.320081][ T4950] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.399548][T10998] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 181.416198][T10998] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 181.417228][T10999] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 181.482774][T11004] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 181.578676][T11004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.584670][ T4950] Bluetooth: hci4: link tx timeout [ 181.584686][ T4950] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.658830][ T4950] Bluetooth: hci4: link tx timeout [ 181.658847][ T4950] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.918523][T11027] syzkaller0: left promiscuous mode [ 181.918544][T11027] syzkaller0: left allmulticast mode [ 181.948275][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948296][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948308][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948318][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948329][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948340][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948351][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948362][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948373][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948384][T11027] tc action pedit unable to extract header offset for header type (0x5) [ 181.948405][T11027] 0: reclassify loop, rule prio 0, protocol 800 [ 182.152577][T11035] lo: entered promiscuous mode [ 182.162148][T11035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.609588][ T4950] Bluetooth: hci4: link tx timeout [ 182.609621][ T4950] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.611148][ T4950] Bluetooth: hci4: link tx timeout [ 182.611163][ T4950] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.691955][T11071] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.779472][ T4950] Bluetooth: hci4: link tx timeout [ 182.779490][ T4950] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.805385][T11075] lo: Caught tx_queue_len zero misconfig [ 183.061013][T11103] __nla_validate_parse: 77 callbacks suppressed [ 183.061032][T11103] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1321'. [ 183.102525][T11103] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1321'. [ 183.164888][T11117] netdevsim netdevsim1 : renamed from netdevsim0 [ 183.247696][ T4950] Bluetooth: hci4: command 0x0405 tx timeout [ 183.486714][T11066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.487346][T11085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.570797][ T5629] Bluetooth: hci3: command tx timeout [ 183.593172][T11139] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.679437][T11147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1330'. [ 183.679481][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 184.252809][T11174] 8021q: adding VLAN 0 to HW filter on device bond7 [ 184.269095][T11174] bond0: (slave bond7): Enslaving as an active interface with a down link [ 184.277240][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 184.375147][T11202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1337'. [ 184.409557][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 184.504171][T11209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1341'. [ 184.579892][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 184.588472][T11213] netlink: 'syz.0.1342': attribute type 4 has an invalid length. [ 184.773905][T11226] ieee802154 phy1 wpan1: encryption failed: -90 [ 184.907956][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'. [ 185.223876][T11259] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 185.312261][ T5294] veth0_macvtap: left promiscuous mode [ 185.799553][T11295] netlink: 'syz.0.1361': attribute type 11 has an invalid length. [ 185.802214][T11295] netlink: 'syz.0.1361': attribute type 2 has an invalid length. [ 185.802838][T11293] vlan0: entered promiscuous mode [ 185.803043][T11293] vlan0: entered allmulticast mode [ 187.604489][T11421] netlink: 'syz.4.1394': attribute type 11 has an invalid length. [ 187.795519][T11440] : renamed from bond0 [ 187.916077][T11449] sctp: [Deprecated]: syz.4.1401 (pid 11449) Use of int in maxseg socket option. [ 187.916077][T11449] Use struct sctp_assoc_value instead [ 188.151972][T11462] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 188.165675][T11462] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 188.290614][T11472] __nla_validate_parse: 76 callbacks suppressed [ 188.290634][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 188.517501][T11489] Cannot find add_set index 65532 as target [ 188.572645][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1415'. [ 189.246120][T11507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1417'. [ 189.432739][T11511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 189.852387][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 190.155431][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 190.504955][T11585] syzkaller1: entered promiscuous mode [ 190.504979][T11585] syzkaller1: entered allmulticast mode [ 190.623884][T11585] syzkaller1: left promiscuous mode [ 190.623908][T11585] syzkaller1: left allmulticast mode [ 190.840626][T11604] sctp: [Deprecated]: syz.4.1442 (pid 11604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.840626][T11604] Use struct sctp_sack_info instead [ 190.898474][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'. [ 191.052307][T11598] x_tables: ip_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 191.133925][T11616] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 191.236920][T11619] netlink: 'syz.0.1448': attribute type 11 has an invalid length. [ 191.236943][T11619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1448'. [ 191.266880][T11624] netlink: 'syz.2.1449': attribute type 8 has an invalid length. [ 191.439020][T11631] team0: Device xfrm0 is of different type [ 191.443941][T11632] tipc: Started in network mode [ 191.443971][T11632] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 191.444227][T11632] tipc: Enabled bearer , priority 0 [ 191.561550][T11646] 0: reclassify loop, rule prio 0, protocol 03 [ 191.569746][T11634] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1452'. [ 191.855100][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1459'. [ 191.952128][T11662] netlink: 'syz.4.1462': attribute type 1 has an invalid length. [ 192.315073][T11697] netlink: 'syz.0.1471': attribute type 5 has an invalid length. [ 192.568649][ T7842] tipc: Node number set to 11578026 [ 192.782236][T11725] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 192.782258][T11725] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1476'. [ 192.827876][T11725] ip_tables: iptables: counters copy to user failed while replacing table [ 192.842641][T11725] C: renamed from lo (while UP) [ 192.888191][T11725] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 193.668605][T11776] ebt_limit: overflow, try lower: 0/0 [ 193.998945][T11798] xt_policy: too many policy elements [ 194.193827][T11806] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 194.294956][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.353316][T11806] bond8: entered promiscuous mode [ 194.353727][T11806] 8021q: adding VLAN 0 to HW filter on device bond8 [ 194.453737][T11820] bond8: (slave bridge30): making interface the new active one [ 194.453760][T11820] bridge30: entered promiscuous mode [ 194.465921][T11820] bond8: (slave bridge30): Enslaving as an active interface with an up link [ 194.479974][T11806] __nla_validate_parse: 1 callbacks suppressed [ 194.479990][T11806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 194.647392][T11832] netlink: 'syz.2.1500': attribute type 21 has an invalid length. [ 194.647429][T11832] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.768127][T11845] ip_tables: iptables: counters copy to user failed while replacing table [ 194.985114][T11866] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1506'. [ 196.057775][T11876] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 196.057925][T11876] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 196.374934][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 196.374971][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 196.374994][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 197.618314][T11829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.921624][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 197.943777][T11910] netlink: 'syz.0.1512': attribute type 7 has an invalid length. [ 198.083208][T11910] netlink: 'syz.0.1512': attribute type 7 has an invalid length. [ 198.410546][T11942] bond0: (slave bond_slave_1): Releasing backup interface [ 198.494544][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 198.887471][T11954] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 198.895382][T11959] x_tables: duplicate underflow at hook 2 [ 199.446137][T12001] ip6gre2: entered allmulticast mode [ 199.500567][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 199.727005][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 199.768046][T12019] lo speed is unknown, defaulting to 1000 [ 199.768130][T12019] lo speed is unknown, defaulting to 1000 [ 199.787050][T12019] lo speed is unknown, defaulting to 1000 [ 199.799890][T12021] batadv_slave_0: Caught tx_queue_len zero misconfig [ 199.800800][T12019] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 199.800832][T12019] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 199.800869][T12019] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 199.805867][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 199.858659][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 199.961922][T12019] lo speed is unknown, defaulting to 1000 [ 199.964477][T12019] lo speed is unknown, defaulting to 1000 [ 199.982211][T12019] lo speed is unknown, defaulting to 1000 [ 199.985423][T12019] lo speed is unknown, defaulting to 1000 [ 199.999133][T12019] lo speed is unknown, defaulting to 1000 [ 200.078016][T12034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1537'. [ 200.236403][T12041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.561039][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 200.561152][T12061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.604521][T12061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.615790][T12071] netlink: 'syz.4.1548': attribute type 1 has an invalid length. [ 200.670475][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 200.709402][T12072] bond0: entered allmulticast mode [ 200.710787][T12072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.753877][T12071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.765097][T12082] netlink: 'syz.0.1547': attribute type 2 has an invalid length. [ 200.765115][T12082] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1547'. [ 200.791881][T12078] bond3: (slave geneve3): making interface the new active one [ 200.793395][T12078] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 200.795476][T12084] netlink: 'syz.3.1549': attribute type 10 has an invalid length. [ 200.853021][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 200.881815][T12084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.884086][ T7273] tipc: Resetting bearer [ 200.888620][T12088] block nbd0: server does not support multiple connections per device. [ 200.891696][T12088] block nbd0: shutting down sockets [ 200.898870][T12088] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1550'. [ 200.898892][T12088] nbd: illegal input index 65508 [ 200.907076][ T7273] tipc: Resetting bearer [ 201.534015][T12120] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 201.543965][T12128] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.671015][T12120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.695566][T12119] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.830885][T12143] netlink: 'syz.0.1555': attribute type 4 has an invalid length. [ 202.061001][ T5294] veth1_vlan: left promiscuous mode [ 204.520868][T12128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.875626][T12187] __nla_validate_parse: 5 callbacks suppressed [ 204.875645][T12187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1571'. [ 204.875930][T12186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1571'. [ 205.100139][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 205.282707][T12212] xt_nfacct: accounting object `' does not exist [ 205.315791][T12212] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1580'. [ 205.471011][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 205.532862][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 205.534470][T12223] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1581'. [ 205.534664][T12225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1581'. [ 205.547452][T12223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1581'. [ 205.555286][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1581'. [ 205.708001][T12228] bond9: entered promiscuous mode [ 205.759040][T12233] macvlan2: entered promiscuous mode [ 205.759062][T12233] macvlan2: entered allmulticast mode [ 205.767232][T12233] bond9: (slave macvlan2): Opening slave failed [ 205.854032][T12229] macvlan2: entered promiscuous mode [ 205.854052][T12229] macvlan2: entered allmulticast mode [ 205.856125][T12229] bond9: (slave macvlan2): Opening slave failed [ 206.495302][T12273] syzkaller1: entered promiscuous mode [ 206.495325][T12273] syzkaller1: entered allmulticast mode [ 206.577908][ T5629] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 206.577974][ T5629] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 206.712909][T12291] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.639473][T12327] syzkaller1: entered promiscuous mode [ 207.639488][T12327] syzkaller1: entered allmulticast mode [ 207.740799][T12329] TC_ACT_REPEAT abuse ? [ 207.844306][T12310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.888923][T12339] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.129733][T12352] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 208.130711][T12353] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 209.119538][T12430] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 209.945214][T12493] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 210.012295][T12493] 8021q: adding VLAN 0 to HW filter on device bond7 [ 210.044992][T12494] bond7: (slave veth0_to_bond): making interface the new active one [ 210.076734][T12507] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 210.077163][T12494] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.083810][T12507] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 210.119761][T12492] macvlan2: entered promiscuous mode [ 210.119783][T12492] macvlan2: entered allmulticast mode [ 210.122003][T12492] bond7: entered promiscuous mode [ 210.122116][T12492] veth0_to_bond: entered promiscuous mode [ 210.122476][T12492] bond7: entered allmulticast mode [ 210.122490][T12492] veth0_to_bond: entered allmulticast mode [ 210.123090][T12492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.125399][T12492] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 210.125614][T12492] bond7: left allmulticast mode [ 210.125629][T12492] veth0_to_bond: left allmulticast mode [ 210.125666][T12492] bond7: left promiscuous mode [ 210.125677][T12492] veth0_to_bond: left promiscuous mode [ 210.323218][T12519] __nla_validate_parse: 34 callbacks suppressed [ 210.323238][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1665'. [ 210.380425][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1665'. [ 210.418381][T12523] sctp: [Deprecated]: syz.3.1667 (pid 12523) Use of int in max_burst socket option. [ 210.418381][T12523] Use struct sctp_assoc_value instead [ 210.520912][T12530] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 210.521443][T12530] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 210.521460][T12530] syzkaller1: group set to 0 [ 210.604798][T12534] batman_adv: batadv0: Adding interface: syzkaller0 [ 210.604816][T12534] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.604842][T12534] batman_adv: batadv0: Interface activated: syzkaller0 [ 210.611437][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 210.611457][T12538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 210.618594][T12538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.622311][T12538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.623654][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 210.623672][T12538] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1669'. [ 210.623685][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 210.700343][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 210.700369][T12541] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1672'. [ 210.817050][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1674'. [ 210.820175][T12546] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.877234][T12550] sctp: [Deprecated]: syz.2.1675 (pid 12550) Use of int in max_burst socket option. [ 210.877234][T12550] Use struct sctp_assoc_value instead [ 211.055720][T12558] syz_tun: entered allmulticast mode [ 211.068834][T12558] dvmrp6: entered allmulticast mode [ 211.083889][T12557] syz_tun: left allmulticast mode [ 211.159794][T12562] sctp: [Deprecated]: syz.2.1679 (pid 12562) Use of int in max_burst socket option. [ 211.159794][T12562] Use struct sctp_assoc_value instead [ 211.212749][T12562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 211.213306][T12562] bridge0: port 1(bond10) entered blocking state [ 211.214920][T12562] bridge0: port 1(bond10) entered disabled state [ 211.215052][T12562] bond10: entered allmulticast mode [ 211.238400][T12562] bond10: entered promiscuous mode [ 211.240318][T12562] bridge0: port 1(bond10) entered blocking state [ 211.240478][T12562] bridge0: port 1(bond10) entered forwarding state [ 211.263144][ T7268] bridge0: port 1(bond10) entered disabled state [ 211.285024][T12566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.285048][T12566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.287135][T12566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.287155][T12566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.295147][T12566] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 211.295164][T12566] batman_adv: batadv0: Removing interface: ipvlan2 [ 211.361323][T12568] xt_hashlimit: max too large, truncated to 1048576 [ 211.362253][T12568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.582213][T12586] syzkaller0: entered promiscuous mode [ 211.582235][T12586] syzkaller0: entered allmulticast mode [ 211.669017][T12590] tipc: Failed to remove unknown binding: 66,0,2/11578026:3448811419/3448811420 [ 211.678445][T12590] tipc: Failed to remove unknown binding: 66,0,2/11578026:3448811419/3448811420 [ 212.270438][T12632] netlink: zone id is out of range [ 212.270455][T12632] netlink: set zone limit has 4 unknown bytes [ 212.419975][T12644] netlink: 'syz.0.1702': attribute type 3 has an invalid length. [ 212.420129][T12644] netlink: 'syz.0.1702': attribute type 3 has an invalid length. [ 212.525375][T12654] sock: sock_timestamping_bind_phc: sock not bind to device [ 212.977226][T12685] veth0: entered allmulticast mode [ 213.189717][T12701] syzkaller0: entered promiscuous mode [ 213.189841][T12701] syzkaller0: entered allmulticast mode [ 213.195128][T12701] 0: reclassify loop, rule prio 0, protocol 800 [ 213.195860][T12701] batadv_slave_1: entered allmulticast mode [ 213.204841][T12701] dvmrp6: entered allmulticast mode [ 213.207145][T12700] batadv_slave_1: left allmulticast mode [ 213.436950][T12708] nftables ruleset with unbound set [ 214.044004][T12714] IPv6: sit1: Disabled Multicast RS [ 214.273053][T12740] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 214.303840][T12738] x_tables: duplicate underflow at hook 1 [ 214.447619][T12747] ip_tables: iptables: counters copy to user failed while replacing table [ 214.454291][T12737] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 214.688072][T12757] ip_tables: iptables: counters copy to user failed while replacing table [ 215.172081][T12790] bond11 (unregistering): Released all slaves [ 215.385149][T12799] bond11 (unregistering): Released all slaves [ 215.455762][T12806] __nla_validate_parse: 28 callbacks suppressed [ 215.455780][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.473812][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.487170][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.511876][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.522896][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.533465][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.544116][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.566734][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.577159][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.580522][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1743'. [ 215.941948][T12838] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 216.022887][T12838] 8021q: adding VLAN 0 to HW filter on device bond10 [ 216.076065][T12857] team_slave_0: entered allmulticast mode [ 216.330067][T12863] netlink: 'syz.0.1757': attribute type 3 has an invalid length. [ 216.654381][T12878] vlan0: entered promiscuous mode [ 216.654403][T12878] hsr0: entered promiscuous mode [ 216.656172][T12878] vlan0: entered allmulticast mode [ 216.656190][T12878] hsr0: entered allmulticast mode [ 216.664915][T12878] hsr_slave_0: entered allmulticast mode [ 216.830160][T12887] vlan1: entered allmulticast mode [ 216.830182][T12887] bond0: entered allmulticast mode [ 216.972893][T12896] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 216.973650][T12895] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 217.012161][T12896] 8021q: adding VLAN 0 to HW filter on device bond11 [ 217.063517][T12900] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 217.102866][T12900] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.283322][T12913] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 217.384152][T12921] openvswitch: netlink: Flow key attr not present in new flow. [ 217.779092][T12954] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 217.779134][T12954] NCSI netlink: No device for ifindex 0 [ 218.058786][ T7831] hid-generic 0005:0008:0007.0001: item fetching failed at offset 0/2 [ 218.078123][ T7831] hid-generic 0005:0008:0007.0001: probe with driver hid-generic failed with error -22 [ 218.338257][T12980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 219.492514][T12985] udevd[12985]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 219.513136][T13063] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 219.522844][T13063] netlink: 'syz.1.1801': attribute type 5 has an invalid length. [ 219.535591][T13063] bond_slave_0: entered promiscuous mode [ 219.556765][ T7268] : (slave bond_slave_0): link status definitely down, disabling slave [ 219.824084][T13087] rdma_op ffff888034f3ea38 conn xmit_rdma 0000000000000000 [ 219.884457][T13091] netlink: 'syz.0.1810': attribute type 10 has an invalid length. [ 219.915828][T13089] 8021q: adding VLAN 0 to HW filter on device  [ 220.610291][T13138] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 220.628572][T13138] __nla_validate_parse: 40 callbacks suppressed [ 220.628593][T13138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1822'. [ 220.645389][T13134] bond5: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 220.664460][T13134] bond5 (unregistering): Released all slaves [ 220.770992][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 220.771107][T13143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.805177][T13143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.855920][T13146] netlink: 'syz.4.1824': attribute type 3 has an invalid length. [ 220.964720][T13155] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1826'. [ 221.298279][T13177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1833'. [ 221.321374][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 221.340358][T13181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1834'. [ 221.543415][T13194] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 221.605545][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 221.616069][T13191] netlink: 'syz.3.1840': attribute type 4 has an invalid length. [ 221.644539][T13191] netlink: 'syz.3.1840': attribute type 4 has an invalid length. [ 221.675008][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 221.682733][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 221.997699][T13219] 8021q: adding VLAN 0 to HW filter on device .` [ 222.068770][T13219] veth0_vlan: entered promiscuous mode [ 222.145574][T13219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.231292][T13219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.262858][T13219] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.280408][T13219] 8021q: adding VLAN 0 to HW filter on device bond9 [ 222.348421][ T7843] wg0 speed is unknown, defaulting to 1000 [ 222.352539][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.352674][ T7268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.448877][ T7266] bond1: (slave .`): link status definitely up, 10000 Mbps full duplex [ 222.448960][ T7266] bond1: (slave .`): making interface the new active one [ 222.495933][T13247] SET target dimension over the limit! [ 222.545148][ T7266] bond1: active interface up! [ 222.742866][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'. [ 222.815114][T13262] syzkaller1: entered promiscuous mode [ 222.815137][T13262] syzkaller1: entered allmulticast mode [ 222.905628][T13266] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 223.002258][T13266] 8021q: adding VLAN 0 to HW filter on device bond12 [ 223.079599][T13279] netlink: 'syz.4.1856': attribute type 1 has an invalid length. [ 223.185772][T13279] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.213593][T13333] netlink: 'syz.1.1867': attribute type 6 has an invalid length. [ 224.232313][T13347] netlink: 'syz.3.1870': attribute type 2 has an invalid length. [ 224.357928][T13355] can: request_module (can-proto-4) failed. [ 224.591424][T13363] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 224.613610][T13376] netlink: 'syz.4.1877': attribute type 3 has an invalid length. [ 224.614578][T13371] netlink: 'syz.0.1878': attribute type 11 has an invalid length. [ 224.723741][T13378] bridge_slave_0: invalid flags given to default FDB implementation [ 225.435713][T13412] netlink: 'syz.4.1883': attribute type 12 has an invalid length. [ 225.520971][T13391] syzkaller1: entered promiscuous mode [ 225.520992][T13391] syzkaller1: entered allmulticast mode [ 225.738142][T13416] macsec2: entered promiscuous mode [ 225.738164][T13416] bridge0: entered promiscuous mode [ 225.738350][T13416] macsec2: entered allmulticast mode [ 225.738363][T13416] bridge0: entered allmulticast mode [ 225.739124][T13416] bridge0: port 1(macsec2) entered blocking state [ 225.739290][T13416] bridge0: port 1(macsec2) entered disabled state [ 225.742854][T13416] bridge0: left allmulticast mode [ 225.742873][T13416] bridge0: left promiscuous mode [ 225.785325][T13418] macsec2: entered promiscuous mode [ 225.785344][T13418] bridge0: entered promiscuous mode [ 225.785480][T13418] macsec2: entered allmulticast mode [ 225.785492][T13418] bridge0: entered allmulticast mode [ 225.789927][T13418] bridge0: port 1(macsec2) entered blocking state [ 225.790027][T13418] bridge0: port 1(macsec2) entered disabled state [ 225.848294][T13418] bridge0: left allmulticast mode [ 225.848319][T13418] bridge0: left promiscuous mode [ 225.882251][T13432] __nla_validate_parse: 8 callbacks suppressed [ 225.882324][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 226.220622][T13441] vxlan0: entered promiscuous mode [ 226.220646][T13441] vxlan0: entered allmulticast mode [ 226.237094][ T7275] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.238274][ T7275] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.238323][ T7275] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.238352][ T7275] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 226.350480][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.350685][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.350845][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.351006][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.351166][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.351338][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.351507][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.351676][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.351838][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 226.471597][T13453] netlink: 'syz.0.1893': attribute type 1 has an invalid length. [ 226.792999][T13467] ip6gre2: entered promiscuous mode [ 226.793020][T13467] ip6gre2: entered allmulticast mode [ 227.705556][T13529] netlink: 'syz.1.1912': attribute type 1 has an invalid length. [ 228.675378][T13583] block nbd0: Unsupported socket: should be TCP or UNIX. [ 228.689076][T13583] nbd: must specify at least one socket [ 228.749614][T13583] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 228.749642][T13583] bond6: option packets_per_slave: allowed values 0 - 65535 [ 228.755654][T13583] bond6 (unregistering): Released all slaves [ 228.792561][T13594] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 228.904502][T13594] 8021q: adding VLAN 0 to HW filter on device bond11 [ 228.969693][T13600] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 229.010629][T13600] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.065476][T13600] bond6: (slave veth5): Enslaving as an active interface with a down link [ 229.107999][T13600] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 229.116098][T13600] bond6: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 229.419485][T13621] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 229.666956][T13624] 8021q: adding VLAN 0 to HW filter on device bond12 [ 229.669430][T13629] lo: Caught tx_queue_len zero misconfig [ 229.693328][T13631] netlink: 'syz.2.1933': attribute type 4 has an invalid length. [ 229.759880][T13624] macvlan2: entered promiscuous mode [ 229.759900][T13624] macvlan2: entered allmulticast mode [ 229.952019][T13647] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 229.989682][T13647] 8021q: adding VLAN 0 to HW filter on device bond13 [ 230.263529][T13670] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 230.263636][T13670] syzkaller1: linktype set to 823 [ 230.288647][T13670] ip_tables: iptables: counters copy to user failed while replacing table [ 230.379862][T13679] pim6reg: entered allmulticast mode [ 230.709694][T13694] geneve3: entered promiscuous mode [ 230.709710][T13694] geneve3: entered allmulticast mode [ 231.045697][T13718] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 231.202304][T13725] netlink: 'syz.0.1962': attribute type 1 has an invalid length. [ 231.351077][T13736] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 231.351097][T13736] netlink: 'syz.3.1968': attribute type 268 has an invalid length. [ 231.351109][T13736] __nla_validate_parse: 153 callbacks suppressed [ 231.351130][T13736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1968'. [ 231.506549][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 231.695978][T13765] bond14: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 231.724098][T13765] bond14 (unregistering): Released all slaves [ 231.773207][T13763] IPVS: Unknown mcast interface: syzkaller0 [ 231.888875][T13779] ip_tables: iptables: counters copy to user failed while replacing table [ 231.913996][T13779] syzkaller1: entered promiscuous mode [ 231.914019][T13779] syzkaller1: entered allmulticast mode [ 232.026017][T13779] bond7: Removing last ns target with arp_interval on [ 232.041812][T13789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 232.135321][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 232.394587][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566cec00: rx timeout, send abort [ 232.425923][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.426291][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.458604][T13804] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 232.458627][T13804] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1983'. [ 232.816686][T13795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.850328][T13795] tipc: Resetting bearer [ 232.884264][T13795] tipc: Resetting bearer [ 233.171974][T13795] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 233.235104][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 233.286498][ T7273] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.286532][ T7273] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.286588][ T7273] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.286611][ T7273] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.286641][ T7273] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.286664][ T7273] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.286706][ T7273] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.286729][ T7273] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.521135][T13835] geneve0: entered allmulticast mode [ 233.663985][T13839] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 233.710593][T13839] bond8 (unregistering): Released all slaves [ 233.800176][T13843] ip6tnl0: Caught tx_queue_len zero misconfig [ 233.868290][T13852] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 233.870148][T13852] bond8 (unregistering): Released all slaves [ 234.245397][T13879] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 234.317592][T13883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.319908][T13884] syzkaller0: left promiscuous mode [ 234.319926][T13884] syzkaller0: left allmulticast mode [ 234.330162][T13889] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 234.337666][T13884] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1996'. [ 234.338010][T13884] unsupported nlmsg_type 40 [ 234.378444][T13889] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.493522][T13898] netlink: zone id is out of range [ 234.493537][T13898] netlink: set zone limit has 4 unknown bytes [ 234.560032][T13902] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.825556][T13909] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 234.825580][T13909] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1999'. [ 234.890655][T13909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.890672][T13909] IPv6: NLM_F_CREATE should be set when creating new route [ 234.890698][T13909] IPv6: NLM_F_CREATE should be set when creating new route [ 235.976923][T13972] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2005'. [ 235.977091][T13972] 0{X功: renamed from gretap0 (while UP) [ 235.979169][T13972] 0{X功: entered allmulticast mode [ 235.979476][T13972] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 235.979687][T13972] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2005'. [ 235.979794][T13972] 1{X功: renamed from 30{X功 (while UP) [ 235.981574][T13972] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 235.981769][T13972] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2005'. [ 235.981893][T13972] 0{X功: renamed from 31{X功 (while UP) [ 235.983200][T13972] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 235.983504][T13972] 1{X功: renamed from 30{X功 (while UP) [ 235.984803][T13972] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 235.985074][T13972] 0{X功: renamed from 31{X功 (while UP) [ 235.995207][T13972] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 235.995533][T13972] 1{X功: renamed from 30{X功 (while UP) [ 235.998790][T13972] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 236.000642][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.003709][T13972] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 236.005911][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.025604][T13972] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 236.025942][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.034608][T13972] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 236.036170][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.040926][T13972] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 236.041219][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.063995][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.073892][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.088584][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.094949][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.110813][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.119787][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.133413][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.140818][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.155620][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.161843][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.179589][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.184275][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.200011][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.208957][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.223490][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.235418][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.244688][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.250981][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.257805][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.263497][T13972] 0{X功: renamed from 31{X功 (while UP) [ 236.269722][T13972] 1{X功: renamed from 30{X功 (while UP) [ 236.275898][T13972] 0{X功: renamed from 31{X功 (while UP) [ 237.193629][T13879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.487458][T13981] netlink: 'syz.3.2007': attribute type 21 has an invalid length. [ 237.546142][T13978] __nla_validate_parse: 30 callbacks suppressed [ 237.546161][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 237.564925][T13988] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.2010'. [ 237.803336][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 238.186118][T14028] xt_bpf: check failed: parse error [ 238.251187][T14030] tipc: Started in network mode [ 238.251216][T14030] tipc: Node identity e23a45fa7396, cluster identity 4711 [ 238.251461][T14030] tipc: Enabled bearer , priority 0 [ 238.252198][T14030] syzkaller0: entered promiscuous mode [ 238.252216][T14030] syzkaller0: entered allmulticast mode [ 238.254852][T14030] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 238.326637][T14030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2023'. [ 238.326673][T14030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2023'. [ 238.343177][T14030] tipc: Resetting bearer [ 238.359718][T14029] tipc: Resetting bearer [ 238.394096][T14029] tipc: Disabling bearer [ 238.521133][T14044] 8021q: VLANs not supported on vcan0 [ 238.570943][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 238.658864][T14054] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2030'. [ 238.750923][T14058] syzkaller1: entered allmulticast mode [ 238.854951][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 239.053594][T14083] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 239.142915][T14083] bond9: option mode: invalid value (9) [ 239.160829][T14083] bond9 (unregistering): Released all slaves [ 239.264580][T14094] siw: device registration error -23 [ 239.264972][T14093] siw: device registration error -23 [ 239.383792][T14109] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 239.509590][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'. [ 240.030851][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2050'. [ 240.363862][T14175] sock: sock_timestamping_bind_phc: sock not bind to device [ 240.420964][T14180] sock: sock_timestamping_bind_phc: sock not bind to device [ 240.759131][T14197] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 240.985549][T14222] tunl0: entered promiscuous mode [ 240.985713][T14222] netlink: 'syz.0.2072': attribute type 3 has an invalid length. [ 241.779688][T14274] nbd: must specify an index to disconnect [ 242.153940][T14304] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 242.188289][T14304] 8021q: adding VLAN 0 to HW filter on device bond14 [ 242.499220][T14318] netlink: 'syz.2.2099': attribute type 21 has an invalid length. [ 242.499220][T14322] netlink: 'syz.2.2099': attribute type 21 has an invalid length. [ 242.499270][T14322] netlink: 'syz.2.2099': attribute type 6 has an invalid length. [ 242.500235][T14325] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 242.549982][T14325] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.555339][T14318] netlink: 'syz.2.2099': attribute type 6 has an invalid length. [ 242.555358][T14318] __nla_validate_parse: 13 callbacks suppressed [ 242.555369][T14318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2099'. [ 242.635432][T14330] bridge_slave_0: default FDB implementation only supports local addresses [ 242.746974][T14336] syzkaller0: entered promiscuous mode [ 242.746998][T14336] syzkaller0: entered allmulticast mode [ 242.959406][T14353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2109'. [ 243.131674][T14372] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2114'. [ 243.163317][T14371] bridge_slave_1: left allmulticast mode [ 243.163609][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.185459][T14371] bridge_slave_0: left allmulticast mode [ 243.185484][T14371] bridge_slave_0: left promiscuous mode [ 243.186173][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.499166][ T5629] Bluetooth: hci4: link tx timeout [ 243.499186][ T5629] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 243.552291][T14400] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2123'. [ 243.559483][T14400] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2123'. [ 243.666126][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2127'. [ 243.684167][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'. [ 245.300083][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 245.478930][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 245.514520][T14451] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 245.571424][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 245.683583][T14460] netlink: 'syz.3.2138': attribute type 1 has an invalid length. [ 245.720167][T14460] 8021q: adding VLAN 0 to HW filter on device bond9 [ 245.810718][T14468] sctp: [Deprecated]: syz.4.2140 (pid 14468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.810718][T14468] Use struct sctp_sack_info instead [ 246.049540][T14486] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2143'. [ 246.380904][T14494] gretap0: entered promiscuous mode [ 246.380927][T14494] gretap0: entered allmulticast mode [ 247.040603][T14528] netlink: 'syz.1.2153': attribute type 2 has an invalid length. [ 247.638368][T14562] __nla_validate_parse: 5 callbacks suppressed [ 247.638388][T14562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2161'. [ 247.638425][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 248.085507][T14580] x_tables: unsorted entry at hook 3 [ 248.203614][T14587] netlink: 'syz.0.2171': attribute type 29 has an invalid length. [ 248.307885][ T7270] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.307928][ T7270] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.307959][ T7270] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.307988][ T7270] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.364717][T14600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2173'. [ 248.617106][T14618] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2172'. [ 248.891116][T14626] netlink: 'syz.2.2177': attribute type 1 has an invalid length. [ 248.920788][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 248.920838][T14632] net_ratelimit: 26 callbacks suppressed [ 248.920849][T14632] openvswitch: netlink: Missing key (keys=40, expected=80) [ 248.927956][T14626] 8021q: adding VLAN 0 to HW filter on device bond17 [ 248.932424][T14629] netlink: 'syz.3.2178': attribute type 2 has an invalid length. [ 248.932453][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 249.097555][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 249.099959][T14644] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.105242][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 249.137733][T14645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.169481][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'. [ 249.515686][T14664] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 250.225032][T14717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2196'. [ 250.502645][T14723] 8021q: adding VLAN 0 to HW filter on device bond10 [ 250.588545][T14734] syz.1.2200: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 250.588833][T14734] CPU: 0 UID: 0 PID: 14734 Comm: syz.1.2200 Not tainted syzkaller #0 PREEMPT(full) [ 250.588884][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 250.588912][T14734] Call Trace: [ 250.588920][T14734] [ 250.588930][T14734] dump_stack_lvl+0xe8/0x150 [ 250.588973][T14734] warn_alloc+0x24d/0x270 [ 250.588997][T14734] ? stack_depot_save_flags+0x33/0x810 [ 250.589029][T14734] ? __pfx_warn_alloc+0x10/0x10 [ 250.589052][T14734] ? kasan_save_track+0x4f/0x80 [ 250.589079][T14734] ? __kasan_kmalloc+0x93/0xb0 [ 250.589105][T14734] ? xsk_init_queue+0x8a/0xe0 [ 250.589136][T14734] ? xsk_setsockopt+0x52a/0x960 [ 250.589160][T14734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.589194][T14734] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 250.589249][T14734] ? rcu_is_watching+0x16/0xb0 [ 250.589293][T14734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.589314][T14734] ? __kmalloc_cache_noprof+0x31c/0x600 [ 250.589337][T14734] ? __kmalloc_cache_noprof+0x148/0x600 [ 250.589362][T14734] ? xskq_create+0x56/0x220 [ 250.589391][T14734] xskq_create+0x148/0x220 [ 250.589416][T14734] ? xsk_init_queue+0x8a/0xe0 [ 250.589444][T14734] xsk_init_queue+0x8a/0xe0 [ 250.589471][T14734] xsk_setsockopt+0x52a/0x960 [ 250.589498][T14734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.589521][T14734] ? __pfx_aa_sk_perm+0x10/0x10 [ 250.589557][T14734] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 250.589581][T14734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.589604][T14734] do_sock_setsockopt+0x17c/0x1b0 [ 250.589629][T14734] __x64_sys_setsockopt+0x13d/0x1b0 [ 250.589654][T14734] do_syscall_64+0x16a/0x530 [ 250.589678][T14734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.589695][T14734] ? clear_bhb_loop+0x70/0xc0 [ 250.589718][T14734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.589734][T14734] RIP: 0033:0x7fb50dba94d9 [ 250.589751][T14734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.589767][T14734] RSP: 002b:00007fb50ea17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.589787][T14734] RAX: ffffffffffffffda RBX: 00007fb50de25fa0 RCX: 00007fb50dba94d9 [ 250.589801][T14734] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 250.589812][T14734] RBP: 00007fb50dc3804e R08: 0000000000000004 R09: 0000000000000000 [ 250.589825][T14734] R10: 00002000000013c0 R11: 0000000000000246 R12: 0000000000000000 [ 250.589838][T14734] R13: 00007fb50de26038 R14: 00007fb50de25fa0 R15: 00007ffda9c70d68 [ 250.589869][T14734] [ 250.595766][T14734] Mem-Info: [ 250.595782][T14734] active_anon:6178 inactive_anon:0 isolated_anon:0 [ 250.595782][T14734] active_file:0 inactive_file:43181 isolated_file:0 [ 250.595782][T14734] unevictable:0 dirty:76 writeback:0 [ 250.595782][T14734] slab_reclaimable:11835 slab_unreclaimable:108531 [ 250.595782][T14734] mapped:29343 shmem:530 pagetables:1319 [ 250.595782][T14734] sec_pagetables:0 bounce:0 [ 250.595782][T14734] kernel_misc_reclaimable:0 [ 250.595782][T14734] free:1309382 free_pcp:10885 free_cma:0 [ 250.595839][T14734] Node 0 active_anon:24712kB inactive_anon:0kB active_file:0kB inactive_file:172520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117372kB dirty:304kB writeback:0kB shmem:2120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15244kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 250.595893][T14734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 250.595942][T14734] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.595998][T14734] lowmem_reserve[]: 0 2463 2464 2464 2464 [ 250.596035][T14734] Node 0 DMA32 free:1287240kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24712kB inactive_anon:0kB active_file:0kB inactive_file:172520kB unevictable:0kB writepending:304kB zspages:0kB present:3129332kB managed:2522760kB mlocked:0kB bounce:0kB free_pcp:43536kB local_pcp:16868kB free_cma:0kB [ 250.596091][T14734] lowmem_reserve[]: 0 0 1 1 1 [ 250.596125][T14734] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 250.596178][T14734] lowmem_reserve[]: 0 0 0 0 0 [ 250.604586][T14734] Node 1 Normal free:3934928kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.604654][T14734] lowmem_reserve[]: 0 0 0 0 0 [ 250.604687][T14734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.604810][T14734] Node 0 DMA32: 960*4kB (UME) 201*8kB (UME) 78*16kB (UM) 61*32kB (UM) 38*64kB (ME) 4*128kB (UME) 33*256kB (M) 19*512kB (UME) 10*1024kB (ME) 5*2048kB (UME) 302*4096kB (M) = 1287240kB [ 250.612487][T14734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 250.612584][T14734] Node 1 Normal: 2*4kB (M) 5*8kB (UM) 6*16kB (UM) 8*32kB (UM) 9*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3934928kB [ 250.612730][T14734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.612745][T14734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.612760][T14734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.612774][T14734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.612789][T14734] 43707 total pagecache pages [ 250.612808][T14734] 0 pages in swap cache [ 250.612815][T14734] Free swap = 124996kB [ 250.612821][T14734] Total swap = 124996kB [ 250.612830][T14734] 2097051 pages RAM [ 250.612836][T14734] 0 pages HighMem/MovableOnly [ 250.612842][T14734] 434397 pages reserved [ 250.612849][T14734] 0 pages cma reserved [ 251.273332][T14751] can: request_module (can-proto-0) failed. [ 251.274691][T14758] netlink: 'syz.4.2203': attribute type 13 has an invalid length. [ 251.329912][ C1] ------------[ cut here ]------------ [ 251.329929][ C1] !rcu_read_lock_held() [ 251.329943][ C1] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#1: ksoftirqd/1/24 [ 251.350159][ C1] Modules linked in: [ 251.354083][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 251.363353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 251.373472][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 251.379565][ C1] Code: be b5 01 00 00 48 c7 c2 a0 f7 53 8d e8 70 94 06 f7 e9 aa fc ff ff e8 f6 3f 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 e8 3f 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 07 cc 51 fa 84 c0 0f 84 e1 00 [ 251.399270][ C1] RSP: 0018:ffffc900001e7660 EFLAGS: 00010246 [ 251.405368][ C1] RAX: ffffffff8a9de0f8 RBX: 0000000000000000 RCX: ffff88801f6dddc0 [ 251.413417][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 251.421444][ C1] RBP: ffffc900001e78f0 R08: 0000000000000100 R09: 1ffffffff237c017 [ 251.429490][ C1] R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 [ 251.437511][ C1] R13: ffff88802ce1c558 R14: ffff888055a14bd0 R15: ffff888077526000 [ 251.445503][ C1] FS: 0000000000000000(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 251.454484][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.461122][ C1] CR2: 00007f5c9403b7e8 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 251.469149][ C1] Call Trace: [ 251.472453][ C1] [ 251.475450][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 251.481083][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 251.486363][ C1] ? __asan_memset+0x22/0x50 [ 251.490999][ C1] ? xfrm_output+0xa03/0x1ca0 [ 251.495733][ C1] iptfs_delay_timer+0x3803/0x4310 [ 251.500952][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 251.506471][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 251.511527][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.516995][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.522830][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 251.528363][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 251.533640][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 251.538814][ C1] handle_softirqs+0x265/0x8d0 [ 251.543652][ C1] run_ksoftirqd+0x36/0x60 [ 251.548122][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 251.553096][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 251.558188][ C1] kthread+0x38b/0x480 [ 251.562287][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 251.567800][ C1] ? __pfx_kthread+0x10/0x10 [ 251.572708][ C1] ret_from_fork+0x514/0xb70 [ 251.577375][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 251.582519][ C1] ? __switch_to+0xc78/0x1410 [ 251.587272][ C1] ? __pfx_kthread+0x10/0x10 [ 251.591898][ C1] ret_from_fork_asm+0x1a/0x30 [ 251.596745][ C1] [ 251.599785][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.607076][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 251.616283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 251.626362][ C1] Call Trace: [ 251.629674][ C1] [ 251.632621][ C1] vpanic+0x26f/0x710 [ 251.636629][ C1] panic+0xc5/0xd0 [ 251.640363][ C1] ? __pfx_panic+0x10/0x10 [ 251.644807][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 251.649781][ C1] __warn+0x315/0x4c0 [ 251.653809][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 251.659226][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 251.664633][ C1] __report_bug+0x276/0x570 [ 251.669184][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 251.674599][ C1] ? __pfx___report_bug+0x10/0x10 [ 251.679660][ C1] ? lock_acquire+0x115/0x350 [ 251.684366][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 251.689776][ C1] ? xfrm_aevent_is_on+0x18/0x230 [ 251.694852][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 251.700264][ C1] report_bug+0x16b/0x220 [ 251.704639][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 251.710045][ C1] ? xfrm_output_resume+0x41db/0x64e0 [ 251.715450][ C1] handle_bug+0x9c/0x200 [ 251.719741][ C1] exc_invalid_op+0x1a/0x50 [ 251.724282][ C1] asm_exc_invalid_op+0x1a/0x20 [ 251.729160][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 251.735176][ C1] Code: be b5 01 00 00 48 c7 c2 a0 f7 53 8d e8 70 94 06 f7 e9 aa fc ff ff e8 f6 3f 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 e8 3f 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 07 cc 51 fa 84 c0 0f 84 e1 00 [ 251.754894][ C1] RSP: 0018:ffffc900001e7660 EFLAGS: 00010246 [ 251.760990][ C1] RAX: ffffffff8a9de0f8 RBX: 0000000000000000 RCX: ffff88801f6dddc0 [ 251.768989][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 251.776993][ C1] RBP: ffffc900001e78f0 R08: 0000000000000100 R09: 1ffffffff237c017 [ 251.785090][ C1] R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 [ 251.793097][ C1] R13: ffff88802ce1c558 R14: ffff888055a14bd0 R15: ffff888077526000 [ 251.801103][ C1] ? xfrm_output_resume+0x41d8/0x64e0 [ 251.806560][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 251.812139][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 251.817385][ C1] ? __asan_memset+0x22/0x50 [ 251.822009][ C1] ? xfrm_output+0xa03/0x1ca0 [ 251.826805][ C1] iptfs_delay_timer+0x3803/0x4310 [ 251.831985][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 251.837528][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 251.842582][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.847998][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.853825][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 251.859313][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 251.864543][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 251.869674][ C1] handle_softirqs+0x265/0x8d0 [ 251.874489][ C1] run_ksoftirqd+0x36/0x60 [ 251.878951][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 251.883999][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 251.889056][ C1] kthread+0x38b/0x480 [ 251.893154][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 251.898627][ C1] ? __pfx_kthread+0x10/0x10 [ 251.903247][ C1] ret_from_fork+0x514/0xb70 [ 251.907873][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 251.913012][ C1] ? __switch_to+0xc78/0x1410 [ 251.917707][ C1] ? __pfx_kthread+0x10/0x10 [ 251.922319][ C1] ret_from_fork_asm+0x1a/0x30 [ 251.927131][ C1] [ 251.930460][ C1] Kernel Offset: disabled [ 251.934794][ C1] Rebooting in 86400 seconds..