last executing test programs: 6.66714307s ago: executing program 4 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000014000780080008000000000008000640000000000500010006000000050005000000000005000400000000000900020073797a31000000000d000300686173683a6d616300000000a01b208dbd4e4ad882f4d973c8ac10427b0b8d233ffecf9fe3e83a1531acf179d7ae6ac01727cb5dbd357fcb36d37d3ed16ba7bf4154"], 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044080}, 0x40) 6.445066844s ago: executing program 4 (id=2835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async) socket$inet(0x2, 0x5, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) shutdown(r6, 0x0) (async) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) 6.206932036s ago: executing program 4 (id=2839): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd2b}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540070000090800014000000000080002"], 0xdc}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x890b, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x9c, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba5c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 6.132940965s ago: executing program 4 (id=2840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) (async) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 5.966807787s ago: executing program 4 (id=2844): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) (async) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14) (async, rerun: 64) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) (rerun: 64) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@deltclass={0xd8, 0x29, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0xffe0}, {0xffe0, 0xffe0}, {0xffff, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x42}}}, @c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x16, 0x3, "c63598d9e5e0a9d0cb6ca6757673f0c1c8f9"}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_HDR={0x8, 0x3, "34bab8d5"}, @TCA_ATM_HDR={0x3a, 0x3, "86f923e2cce4edf87ab6ef2d360064e4fd25a86f110e08195deb321d74fde5802f544980cf43024bdfc446bfa68ea3d613e1ba4dbf86"}, @TCA_ATM_HDR={0x11, 0x3, "b3f6a43e7f5da15483449ebaf0"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c0c1) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast1, @in=@loopback, 0x4e21, 0x5, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, r4}, {0x3, 0x4, 0x2, 0x5, 0x2, 0x21d, 0x0, 0x9}, {0x5, 0xfff, 0x1, 0xa629}, 0x3, 0x6e6bbb, 0x2, 0x1, 0x2, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x0, 0x0, 0x3, 0x5, 0x8, 0xbff, 0x200}}, 0xe8) (async, rerun: 32) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000d40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000640)=@deltfilter={0x6b0, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff2, 0x6}, {0xb, 0xb}, {0x4, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xb}}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x66c, 0x2, [@TCA_CGROUP_ACT={0x668, 0x1, [@m_mpls={0xf8, 0x8, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2e, 0x7, 0x10000000, 0x6, 0x3}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd2206}, @TCA_MPLS_PROTO={0x6, 0x4, 0xaac}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}]}, {0x8d, 0x6, "76917a555072e849fb67abc4dc794504cf260b0bebeb4af72e0796fc19775d50a6aee1ddbce79df69701d29f6c4bcf27ad0603434805dfae3f3e35fc7574999270c74d7e8197c93f083690342d680e083a335474d66d70c8993882444ccfc2bebb4da73216a785cd6c04b0262b5498fea339a3105eec1cff5b675afcc98a2adaaef42b0e57daf6b9ee"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xc8, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x0, 0xfffffffffffffffe, 0x5, 0x3}, 0x7f}}]}, {0x7b, 0x6, "9a1821038abc30d53bd37fe9cd3d045cadf2ce3ac640d9973b425450ba4a9974a9b00fac1243c786b391c5b2a40bf0c38e774e5aad05c377748660ac77aa6fadb13fc06a59daa7342c3ecede5599f0d983a53c9ce5915d3402d3791ef0eb20839905fd7bba36f6510d4351d7b725a7c2bc8c10564f6c51"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0xcc, 0x1f, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x800, 0x3, 0x8, 0x4}, @empty, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x3, 0x8, 0x2}, @dev={0xac, 0x14, 0x14, 0x25}, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8c, 0x7, 0x1000, 0x2}, @broadcast, @local, 0xffffff00, 0x1}}]}, {0x2a, 0x6, "d9edf4684a544ab626176a26cbc2b781baaade0ad62638b2d13f242a8ad7fb91d4974355e7f9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x360, 0xd, 0x0, 0x0, {{0x7}, {0x2b8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x95c}, @TCA_IPT_TARG={0x10d, 0x6, {0x14, 'nat\x00', 0x7, 0x2, "b4bff55180ece74f9e253a0998999adcc3c8a22c0832904d5f279877f189bfd85d338419be9b55737005864edce30d244cf429dca44ed3fd2a42c35b97f60c0584681c9f27fff32818b6a4eeae7ca4616d49b7eb348aad85cabeaae9422f8b80035fc8ae385cf934d3571ed95bfb01ca2377cc7771343d94856d9f5276a6b8760e048fdf914f96554d1ab07fad0d5fdbed693354a749d5f8f15e64cdbc227922f829c26e011460fd0ac1c9ced8f4f048b53451eafc6479e734b7a5d9fc4d491f81543aa3bcca6118911538cfb0c4b086bcdb158e60cbb1fe9305081f894345be5019c7"}}, @TCA_IPT_TARG={0x126, 0x6, {0x4, 'raw\x00', 0x4, 0x3ff, "dbd7a97e5f12c3f8f8986cf2ba76dcb3dceedd09843bf30b0f62a2a7398bd96ec59f81924beeb0bcf5068f9eb23df1fc176300ac1601800906b775bd36f8581a520c1b6e64d71228026548e2ab762f964983d4eb769e92c6e0ce53232943f4b186a44f07fb2134d7942e2edab7be75bce1c7a46b6593af841fbfca08bca1ce0534a780244b2c69d5426c564450297dea4ba7bcd89910c7a9403b9f69522518ed9ec7869ec15b330ffe3c7f2f04de53c6704db4088cdc2e9efacb3a06ffcb05a149204f3dd31272170af2eb04e954821868f61c6f15f1772e81c6015527952cb7ef25c3180e04d073022cf9879774b514bfb3fd931a6bf703ea064b29"}}]}, {0x84, 0x6, "a7e0bb75eb60c27f0d4a210b5fb37718f1063922ed3c46f4be1e0aa173dd0fed7705a47da8639e19da921c4d885b330023fa5bfd137211a0160fa57d37fdc78b3a42af7385ff98d8c014e343a44dd32834e115749ea4127b6d869bf7cc8f4b84cf2a5e881761ba3a72c8692fba1e3ee9e3bee9d6039c61bf2717e60e33d25164"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x78, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0x43, 0x6, "8f7c2729986ec1226bdf9cd5e624f6060e131597aa74b0dd379d3323f4fc6e04c7a976ce7f88d21ae27cd577b61395ba71ec1bab2645d013a5e84959c85d15"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x1}, 0x40014) (async) syz_emit_ethernet(0x63, &(0x7f0000000d80)={@remote, @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "7bdfdd", 0x29, 0x21, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e21, 0x4e23, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x3, "8b65d6", 0x7, "4c3306"}, "290c7feb2a8a7ec5551ee2d338145bb5183ae3d508d957cbfc"}}}}}}, &(0x7f0000000e00)={0x1, 0x2, [0x19e, 0x744, 0x8db, 0x4b2]}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000e40)={@multicast2, @empty, 0xffffffffffffffff, "261d6b3b741f004becad90ea5a6abc00cb16b3afa1dc39c7002e3d3907236834", 0x81, 0x0, 0x1}, 0x3c) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000f00)={r2, r3, 0x8, 0x70, &(0x7f0000000e80)="729266bd38741ac74a53ff55ebfdebae55f69710d66440ded289d3e385e299be8a023cd48533928f51ee335223a2964afc39bfb9a9163852cd84eb5ba5fc18ed463498b4d07bcf5fc70b7538ec3c69dd45119f9e3fc6f9fcba6bd6fe2e3fb6d680a11537fe360a09d67ae93496d238be", 0x4, 0xb2, 0x9, 0x383, 0xee, 0x3, 0x3, 'syz1\x00'}) (async, rerun: 32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r6, &(0x7f0000000fc0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0xfffffffc, @private1, 0xcfb7}}}, 0x32) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001040), r0) (rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040090}, 0x800) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000001140), &(0x7f0000001180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000011c0)={'bridge0\x00'}) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000001200)=""/204, &(0x7f0000001300)=0xcc) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001340), &(0x7f0000001380)=0x4) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001400), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, r10, 0x10, 0x70bd27, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x20000001) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001540)={0x7, 0x2, 0xf, 0x2, 0x0}, &(0x7f0000001580)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r11, 0x84, 0x78, &(0x7f00000015c0)=r12, 0x4) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000001600)={0x2, 0x18c1, 0x4, 0xb, 0x10000, 0x81}) (async) write(r11, &(0x7f0000001640)="931bae0f776b45b2b825a050b4a13094f55a73e99cb661a65e768cf95f9286f514513de098e419ee1f7f779e7c89b6f042d8a4e539b4fa6abf3f9229f523ccb4a0ce34d06401c4197fcea2750c4d2cdfed02d2149834c662395fac9b5131d73d9d7b0c0348c4b004836071061e23275dea0543e83f56ae995c2b6426861933a136478c52d0b3da23a882c2444076b8abba0dc2ab3adf1976138965dfd9b28f210df39f194100332fa6e4262b7758e4a5cba602fc2a3571e4ed3b094675f60287eaf324024b4f4a7616aada0df4121f8f1da186cb2d4add8f907731dfabc9fc08d582cc5b0948bff51989e6e2533adea3", 0xf0) 5.8716886s ago: executing program 4 (id=2846): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000540)="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", 0x118) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3.127189701s ago: executing program 1 (id=2882): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r3}, 0x20) close(r3) (async) close(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.899035284s ago: executing program 1 (id=2886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x2000, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xa2}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x1}]}, 0x24}}, 0xc010) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="01000100000000080c002b80080003000f00000008001b0000000000"], 0x34}}, 0x0) 1.896272886s ago: executing program 2 (id=2888): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0xffffffff}}}}, 0x30}}, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 1.793366488s ago: executing program 2 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a001b000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 1.774187591s ago: executing program 1 (id=2890): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000fd001e"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000064000000bf0900000000000055090100000000009500000000000000bf91000000000800b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x4, 0x1, 0x4, 0x2}}, 0x26) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20e4ffff1100010a002000000000000000000200"], 0x26}}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) select(0x40, &(0x7f00000000c0)={0xffffffff, 0x8, 0x2, 0x10, 0x0, 0x1, 0x381, 0x8}, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x101, 0x5, 0xffffffffffffffff, 0xd558, 0x3ff, 0x10000}, &(0x7f0000000180)={0xff, 0x8, 0x4a0, 0x7, 0x100, 0x5, 0x7, 0x6}, &(0x7f00000001c0)={0x77359400}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xf, 0x0, &(0x7f0000000700)="a498812dcc59a7470a16d3e5158013", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000002c0)=0x2, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r7}, 0x10) vmsplice(r8, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) 1.114735252s ago: executing program 3 (id=2894): syz_emit_ethernet(0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="ffff227c3551feff000000001001001504aa0097deb4"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="610966e6000000000300000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002004e20ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000005014cbc349fbcbb16a3f144993c090f0eb"], 0x80}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000040)={0x2c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'none\x00', 0x2a, 0x6, 0x5c}, 0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getchain={0x64, 0x66, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {0x2, 0x9}, {0x9}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x100}, {0x1, 0xb, 0x1000}, {0x8, 0xb, 0x7bf5c323}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xffffff0f}, {0x8, 0xb, 0x401}]}, 0x64}}, 0x0) 1.114549954s ago: executing program 0 (id=2895): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000081"], 0x0, 0x2a}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="88010000100013070000000000000000fe8000000000000000000000000000aafe80000000f1000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/320], 0x188}}, 0x0) 994.452028ms ago: executing program 0 (id=2896): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x5, {0x2, 0x400, 0x3, 0x5, 0x6}}) socket$inet6(0xa, 0x3, 0x7) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x5, {0x2, 0x400, 0x3, 0x5, 0x6}}) (async) 972.455536ms ago: executing program 3 (id=2897): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xf865, 0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x1, 0x2, 0x1, 0x2, 0xfffd}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f}, 0x20) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async, rerun: 64) bind$tipc(r2, 0x0, 0x0) (rerun: 64) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000700)={0x34, r6, 0x1, 0x7ffffe, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYRES16=r1], 0xfc}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 829.156102ms ago: executing program 2 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddr={0x50, 0x16, 0x300, 0x70bd2d, 0x25dfdbfc, {0xa, 0x20, 0x12}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x13}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x3800, 0x6, 0x10, 0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 733.579284ms ago: executing program 3 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0xfffe, {0xaaaaaaaaaaaa0202}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 614.221997ms ago: executing program 0 (id=2900): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f", @ANYRESHEX=r2, @ANYRESOCT=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 563.083574ms ago: executing program 2 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000e2ffffffff36000000080001007063690011000200303030303a30303a31302e300000000b08007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x9b}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0xe000}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x907}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40090}, 0x24000000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) 555.45272ms ago: executing program 1 (id=2902): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x48}}, 0x88890) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x180, 0x8, 0x8, 0xe6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r7, 0x49}, &(0x7f0000000580)=0x8) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r7, 0x1, 0x5, [0xa7, 0x8, 0x4, 0x4, 0x4]}, &(0x7f0000000080)=0x12) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffbe, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 507.450732ms ago: executing program 3 (id=2903): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 451.288915ms ago: executing program 2 (id=2904): socket(0x22, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(r0, 0x0, 0x0) socket(0x22, 0x2, 0x2) (async) pipe(&(0x7f0000000000)) (async) accept$alg(r0, 0x0, 0x0) (async) 323.098091ms ago: executing program 0 (id=2905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x1100, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffa6, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 321.925483ms ago: executing program 2 (id=2906): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd5, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x8}}, @random_vendor={0xdd, 0x3b, "2852bf19ab3956cadfba65a03a5feaa9c28b7628006ed9931a148a769eb07a3b2d60ee83b3e9dcda2d20b40f879c251c3d322b558e221e2e0ad3e6"}, @fast_bss_trans={0x37, 0x89, {0x0, 0x2, "30a86b512cb12fee1eb9723a65787705", "e3f61a993babc05eacbcc2491420c9d028eeed3261071015b53baab75a038eed", "3f3a2da80eadb88d7df2f0432661f2dc7471c76187dbb59f0edbbe8b6999d9a1", [{0x4, 0x12, "15b109e311953cf46a93f5e0a7b52192d0fd"}, {0x3, 0x21, "18c7d4c51edf5bfa16619dec16940067b401b4a87d082e466d967b58e3984727d0"}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}]}, 0x30}}, 0x4000014) 315.202761ms ago: executing program 1 (id=2907): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c000100000000000000000014000b"], 0x110}], 0x1}, 0x80) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x1e0, 0x6, 0xa, 0x5249195ad1cab334, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x55, 0x7, 0x1, 0x0, "502a2ac9ed35c58abdb5594d77ef33b2ed7023066cad87aed1edb04e828ea10d8e5c036e0d5c02614b27ecf34f784ee5c74cdd9093ba59d06d54c3f51605e8c49fdfa72cd60bf4a94aee08a9d907200b9f"}, @NFTA_RULE_EXPRESSIONS={0x160, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4411}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x52}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x208}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3f}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) (async) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x10, 0x10, 0x3, 0xd, 0x5, 0x7, 0x8, 0x5, 0x93, 0x4, 0x4}, 0xe) 211.17235ms ago: executing program 3 (id=2908): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001f80), 0x1, 0x0) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001f80), 0x1, 0x0) write(r0, &(0x7f0000001fc0)="db890a3274", 0x5) (async) write(r0, &(0x7f0000001fc0)="db890a3274", 0x5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002140), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "78a661c5b54e58bc", "ea090b51f5425341a6e4a7b41b4e6ab4", "bbe040fa", "f8c4a96319b9d9d4"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'pim6reg\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 4.292381ms ago: executing program 0 (id=2909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001900)=ANY=[@ANYBLOB="400000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0800000000000000140012800b0001006772657461700000040002a00a0001"], 0x40}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x0) 1.538487ms ago: executing program 0 (id=2910): r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x0, 0x30bd2b, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x8, 0xfe, 0x2, 0x1d8900f23d860fbd, 0x6, 0x1100}, ["", ""]}, 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 280.897µs ago: executing program 1 (id=2911): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x800442d4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 0s ago: executing program 3 (id=2912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x4000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES8=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) kernel console output (not intermixed with test programs): 05][ T7132] netlink: 'syz.4.300': attribute type 3 has an invalid length. [ 98.982601][ T7130] syz_tun: left allmulticast mode [ 99.210758][ T7109] tipc: Resetting bearer [ 99.230257][ T7156] netlink: 'syz.4.307': attribute type 10 has an invalid length. [ 99.243657][ T7109] tipc: Disabling bearer [ 99.263512][ T7156] team0: Device hsr_slave_0 failed to register rx_handler [ 99.689415][ T7176] netlink: 'syz.4.312': attribute type 33 has an invalid length. [ 99.697425][ T7176] netlink: 152 bytes leftover after parsing attributes in process `syz.4.312'. [ 99.893034][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 100.208953][ T7200] tipc: Enabling of bearer rejected, failed to enable media [ 100.593496][ T7218] bond0: entered promiscuous mode [ 100.617260][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.623387][ T5865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.677476][ T7218] bond_slave_0: entered promiscuous mode [ 100.692617][ T7218] bond_slave_1: entered promiscuous mode [ 100.709411][ T7218] batadv0: entered promiscuous mode [ 100.717444][ T7218] batadv0: left promiscuous mode [ 100.731256][ T7218] bond0: left promiscuous mode [ 100.745667][ T7218] bond_slave_0: left promiscuous mode [ 100.751389][ T7218] bond_slave_1: left promiscuous mode [ 100.851115][ T5875] block nbd0: Receive control failed (result -32) [ 100.968745][ T5901] IPVS: starting estimator thread 0... [ 100.974568][ T7232] batman_adv: batadv0: Interface activated: wlan1 [ 101.065814][ T7234] IPVS: using max 37 ests per chain, 88800 per kthread [ 101.185843][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 101.688068][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.695817][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.732505][ T7283] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 101.743707][ T7283] netlink: 'syz.4.346': attribute type 2 has an invalid length. [ 101.837437][ T7264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.852521][ T7264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.022986][ T74] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.032162][ T74] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.050305][ T74] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.079793][ T74] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.126752][ T74] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.149867][ T7289] netlink: 'syz.4.349': attribute type 7 has an invalid length. [ 102.159258][ T7289] netlink: 'syz.4.349': attribute type 8 has an invalid length. [ 102.182741][ T74] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.204851][ T7293] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 102.213095][ T74] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.235654][ T74] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.251099][ T7289] 0ªî{X¹¦: entered promiscuous mode [ 102.291781][ T7289] batadv_slave_1: entered promiscuous mode [ 102.300103][ T7289] erspan0: entered promiscuous mode [ 102.442004][ T7308] tipc: Enabling of bearer rejected, failed to enable media [ 102.695341][ T7316] bond0: entered promiscuous mode [ 102.700703][ T1150] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 102.719243][ T7316] bond_slave_0: entered promiscuous mode [ 102.743608][ T7316] bond_slave_1: entered promiscuous mode [ 102.761631][ T7316] batadv0: entered promiscuous mode [ 102.803848][ T7316] debugfs: 'hsr1' already exists in 'hsr' [ 102.823159][ T7316] Cannot create hsr debugfs directory [ 102.844282][ T7316] hsr1: entered allmulticast mode [ 102.860986][ T7316] bond0: entered allmulticast mode [ 102.893658][ T7316] bond_slave_0: entered allmulticast mode [ 102.921787][ T7316] bond_slave_1: entered allmulticast mode [ 102.942622][ T7316] batadv0: entered allmulticast mode [ 102.949023][ T7335] netlink: 'syz.4.360': attribute type 10 has an invalid length. [ 102.970849][ T7316] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.985087][ T7316] bond0: left promiscuous mode [ 102.994397][ T7316] bond_slave_0: left promiscuous mode [ 103.000454][ T7316] bond_slave_1: left promiscuous mode [ 103.017353][ T7316] batadv0: left promiscuous mode [ 103.132410][ T7335] team0: Port device dummy0 added [ 103.179775][ T7339] team0: Port device dummy0 removed [ 103.209742][ T7339] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 103.491579][ T7360] __nla_validate_parse: 10 callbacks suppressed [ 103.491597][ T7360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.365'. [ 103.630394][ T7368] netlink: 'syz.2.367': attribute type 11 has an invalid length. [ 103.679402][ T7368] netlink: 'syz.2.367': attribute type 11 has an invalid length. [ 103.691611][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 103.717120][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 103.729928][ T7368] netlink: 224 bytes leftover after parsing attributes in process `syz.2.367'. [ 103.759580][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 103.932604][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 103.958519][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 103.981294][ T7380] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 104.034546][ T7390] validate_nla: 1 callbacks suppressed [ 104.034563][ T7390] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 104.109392][ T7390] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 104.141830][ T7395] lo speed is unknown, defaulting to 1000 [ 104.174994][ T7399] netlink: 'syz.1.377': attribute type 1 has an invalid length. [ 104.186146][ T7395] lo speed is unknown, defaulting to 1000 [ 104.193725][ T7395] lo speed is unknown, defaulting to 1000 [ 104.332347][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'. [ 104.408544][ T7404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.433161][ T7404] bond2: (slave bond3): making interface the new active one [ 104.441669][ T7404] bond2: (slave bond3): Enslaving as an active interface with an up link [ 105.012459][ T7440] IPv6: sit1: Disabled Multicast RS [ 105.039733][ T7440] sit1: entered allmulticast mode [ 105.105230][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 105.172642][ T7395] infiniband syz0: set down [ 105.180821][ T7395] infiniband syz0: added lo [ 105.191430][ T7395] syz0: rxe_create_cq: returned err = -12 [ 105.197882][ T7395] infiniband syz0: Couldn't create ib_mad CQ [ 105.201123][ T7444] vlan2: entered allmulticast mode [ 105.204180][ T7395] infiniband syz0: Couldn't open port 1 [ 105.230096][ T7444] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 105.248109][ T10] lo speed is unknown, defaulting to 1000 [ 105.279861][ T7395] RDS/IB: syz0: added [ 105.307318][ T7395] smc: adding ib device syz0 with port count 1 [ 105.313696][ T7395] smc: ib device syz0 port 1 has pnetid [ 105.393770][ T9] lo speed is unknown, defaulting to 1000 [ 105.437397][ T7395] lo speed is unknown, defaulting to 1000 [ 105.444188][ T7454] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 105.481287][ T7452] scsi_nl_rcv_msg: discarding partial skb [ 105.505758][ T7454] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 105.517234][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 106.043663][ T7482] nftables ruleset with unbound set [ 106.087148][ T7482] netlink: 'syz.3.396': attribute type 33 has an invalid length. [ 106.698848][ T7395] lo speed is unknown, defaulting to 1000 [ 107.132077][ T7395] lo speed is unknown, defaulting to 1000 [ 107.224095][ T7527] netlink: 'syz.4.406': attribute type 28 has an invalid length. [ 107.608443][ T7395] lo speed is unknown, defaulting to 1000 [ 107.760136][ T7547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.186107][ T7567] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 108.220094][ T7567] netlink: 'syz.1.419': attribute type 2 has an invalid length. [ 108.227936][ T7567] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 108.295293][ T7395] lo speed is unknown, defaulting to 1000 [ 108.631186][ T7581] __nla_validate_parse: 8 callbacks suppressed [ 108.631202][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'. [ 108.692326][ T7581] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 109.020239][ T7593] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.067860][ T7593] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 109.076825][ T7604] Unsupported ieee802154 address type: 0 [ 109.078572][ T7593] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 109.183306][ T7604] net veth1_virt_wifi .: renamed from virt_wifi0 [ 109.210264][ T7608] syzkaller0: entered promiscuous mode [ 109.226017][ T7608] syzkaller0: entered allmulticast mode [ 109.735789][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 109.787283][ T7601] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 110.004044][ T7647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.438'. [ 110.013235][ T7647] gre0: entered promiscuous mode [ 110.018637][ T7647] gre0: entered allmulticast mode [ 110.349294][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.439'. [ 110.359344][ T7650] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.439'. [ 110.520632][ T7661] validate_nla: 1 callbacks suppressed [ 110.520649][ T7661] netlink: 'syz.3.443': attribute type 29 has an invalid length. [ 110.557586][ T7663] tipc: Enabled bearer , priority 0 [ 110.576591][ T7663] syzkaller0: entered promiscuous mode [ 110.582100][ T7663] syzkaller0: entered allmulticast mode [ 110.669754][ T7662] tipc: Resetting bearer [ 110.739217][ T7662] tipc: Disabling bearer [ 110.786854][ T7676] netlink: 176 bytes leftover after parsing attributes in process `syz.0.449'. [ 110.805169][ T7676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.449'. [ 110.988196][ T7691] netlink: 277 bytes leftover after parsing attributes in process `syz.3.452'. [ 111.017274][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.041806][ T7692] netlink: 277 bytes leftover after parsing attributes in process `syz.3.452'. [ 111.227525][ T7706] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 111.308742][ T7709] sctp: [Deprecated]: syz.3.456 (pid 7709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.308742][ T7709] Use struct sctp_sack_info instead [ 111.391124][ T7713] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 111.463252][ T7713] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.498866][ T7713] gretap1: entered promiscuous mode [ 111.507350][ T7713] gretap1: entered allmulticast mode [ 111.630645][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 111.673075][ T7733] netlink: 'syz.3.462': attribute type 4 has an invalid length. [ 112.346372][ T7774] tipc: Enabled bearer , priority 0 [ 112.400509][ T7774] syzkaller0: entered promiscuous mode [ 112.407441][ T7774] syzkaller0: entered allmulticast mode [ 112.939863][ T7789] can: request_module (can-proto-3) failed. [ 113.468071][ T10] tipc: Node number set to 801375089 [ 113.811051][ T7773] tipc: Resetting bearer [ 113.874338][ T7773] tipc: Disabling bearer [ 113.889152][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 113.947733][ T7804] netlink: 116 bytes leftover after parsing attributes in process `syz.3.481'. [ 114.056889][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 114.101432][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'. [ 114.359655][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 114.411169][ T7832] netlink: 'syz.0.489': attribute type 13 has an invalid length. [ 114.587862][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 114.628881][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.492'. [ 114.801253][ T7849] netlink: 52 bytes leftover after parsing attributes in process `syz.0.493'. [ 115.114694][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 115.139380][ T7874] netlink: 'syz.2.501': attribute type 11 has an invalid length. [ 115.159264][ T7874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.501'. [ 115.463937][ T7892] batman_adv: batadv0: Adding interface: wlan1 [ 115.481955][ T7892] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.524487][ T7892] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 115.627825][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.659957][ T7900] bridge4: entered promiscuous mode [ 115.669822][ T7900] bridge4: entered allmulticast mode [ 115.770641][ T7887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.794717][ T7887] team0: Failed to send port change of device bond4 via netlink (err -105) [ 115.824167][ T7887] team0: Failed to send options change via netlink (err -105) [ 115.832067][ T7887] team0: Port device bond4 added [ 115.890340][ T1150] team0: Failed to send port change of device bond4 via netlink (err -105) [ 117.494851][ T7956] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 117.846448][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.018869][ T7977] bridge_slave_1 (unregistering): left allmulticast mode [ 118.041576][ T7988] delete_channel: no stack [ 118.062341][ T7977] bridge_slave_1 (unregistering): left promiscuous mode [ 118.073138][ T7987] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 118.085107][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.102994][ T7987] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 118.146047][ T7992] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 118.228156][ T7979] netem: incorrect gi model size [ 118.233409][ T7979] netem: change failed [ 119.163706][ T8033] nbd: nbd0 already in use [ 119.481435][ T8048] __nla_validate_parse: 7 callbacks suppressed [ 119.481453][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 119.519646][ T8048] openvswitch: netlink: Flow actions attr not present in new flow. [ 119.547118][ T8048] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 119.634706][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 119.984385][ T8076] Driver unsupported XDP return value 0 on prog (id 166) dev N/A, expect packet loss! [ 120.036328][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 120.047526][ T8082] xt_socket: unknown flags 0xe4 [ 120.054214][ T8074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.563'. [ 120.070729][ T8084] xt_socket: unknown flags 0xe4 [ 120.248270][ T8094] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 120.413646][ T8101] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 120.439533][ T8101] netlink: 224 bytes leftover after parsing attributes in process `syz.4.571'. [ 120.491511][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'. [ 120.512906][ T8102] tipc: Enabled bearer , priority 0 [ 120.545387][ T8102] syzkaller0: entered promiscuous mode [ 120.568881][ T8102] syzkaller0: entered allmulticast mode [ 120.578540][ T8111] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 120.624297][ T8114] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 120.686313][ T8100] tipc: Resetting bearer [ 120.723875][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 120.751791][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 120.752777][ T8100] tipc: Disabling bearer [ 120.821019][ T8121] erspan0: entered promiscuous mode [ 120.830707][ T8121] erspan0: left promiscuous mode [ 120.835457][ T8127] netlink: 68 bytes leftover after parsing attributes in process `syz.2.578'. [ 120.862054][ T8126] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 120.869866][ T8129] netlink: 68 bytes leftover after parsing attributes in process `syz.2.578'. [ 121.241208][ T8144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 121.373258][ T8148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 121.416690][ T8148] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.468280][ T8148] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 121.615475][ T8167] dvmrp1: entered allmulticast mode [ 121.650524][ T8169] netlink: 'syz.2.591': attribute type 24 has an invalid length. [ 121.807356][ T8184] netlink: 'syz.4.595': attribute type 3 has an invalid length. [ 122.525512][ T8230] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 122.618770][ T8234] netlink: 'syz.0.609': attribute type 58 has an invalid length. [ 122.783412][ T8247] batman_adv: batadv0: Adding interface: wlan1 [ 122.791963][ T8247] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.820514][ T8247] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 122.898535][ T8189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.904897][ T8189] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 123.010331][ T8256] IPVS: Unknown mcast interface: pimreg1 [ 123.298761][ T8266] validate_nla: 1 callbacks suppressed [ 123.298778][ T8266] netlink: 'syz.0.616': attribute type 21 has an invalid length. [ 123.468866][ T8277] veth0: entered promiscuous mode [ 123.481967][ T8277] netlink: 'syz.3.617': attribute type 27 has an invalid length. [ 123.609601][ T8286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.764960][ T8294] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20001 [ 123.774355][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.913429][ T8297] bridge0: port 3(syz_tun) entered disabled state [ 124.013984][ T8297] syz_tun (unregistering): left allmulticast mode [ 124.024082][ T8297] syz_tun (unregistering): left promiscuous mode [ 124.042366][ T8297] bridge0: port 3(syz_tun) entered disabled state [ 124.105244][ T8267] veth0: left promiscuous mode [ 124.877276][ T8307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.883231][ T8307] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 124.896115][ T8307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.902062][ T8307] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 124.913738][ T8307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.919735][ T8307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 124.933741][ T8307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.940663][ T8307] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 124.964450][ T8307] batman_adv: batadv0: Interface deactivated: wlan1 [ 127.655857][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.779254][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.785740][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.502462][ T8329] __nla_validate_parse: 16 callbacks suppressed [ 141.502480][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 141.506530][ T8333] netlink: 332 bytes leftover after parsing attributes in process `syz.4.637'. [ 141.556286][ T8335] netlink: 332 bytes leftover after parsing attributes in process `syz.4.637'. [ 141.784130][ T8350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.640'. [ 141.994724][ T8362] netlink: 'syz.0.645': attribute type 25 has an invalid length. [ 142.010505][ T8363] netlink: 'syz.0.645': attribute type 25 has an invalid length. [ 142.370825][ T8382] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20000 [ 142.390571][ T8380] netlink: 'syz.2.651': attribute type 1 has an invalid length. [ 142.439680][ T8380] netlink: 17 bytes leftover after parsing attributes in process `syz.2.651'. [ 142.470890][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 142.561522][ T8389] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 142.607511][ T8389] netlink: 'syz.4.655': attribute type 10 has an invalid length. [ 142.629821][ T8389] netlink: 236 bytes leftover after parsing attributes in process `syz.4.655'. [ 142.639908][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 142.663292][ T8390] batadv_slave_1: Device is already in use. [ 142.695105][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 142.696447][ T8389] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 142.735833][ T8389] netlink: 'syz.4.655': attribute type 10 has an invalid length. [ 142.736274][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 142.818901][ T8390] batadv_slave_1: Device is already in use. [ 143.530129][ T8428] 8021q: VLANs not supported on wg1 [ 143.603139][ T8432] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 143.726842][ T8436] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 143.776940][ T8436] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 144.100182][ T8454] netlink: 'syz.3.674': attribute type 39 has an invalid length. [ 144.176795][ T8448] syzkaller0: entered promiscuous mode [ 144.182297][ T8448] syzkaller0: entered allmulticast mode [ 144.244691][ T8458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.342000][ T8457] veth1_macvtap: left promiscuous mode [ 145.347813][ T8457] macsec0: entered promiscuous mode [ 145.353055][ T8457] macsec0: entered allmulticast mode [ 145.361494][ T8466] veth1_macvtap: entered promiscuous mode [ 145.368109][ T8466] veth1_macvtap: entered allmulticast mode [ 145.374157][ T8466] macsec0: left promiscuous mode [ 145.396333][ T8466] macsec0: left allmulticast mode [ 145.401419][ T8466] veth1_macvtap: left allmulticast mode [ 146.231907][ T8508] bridge1: entered promiscuous mode [ 146.238161][ T8508] bridge1: entered allmulticast mode [ 146.934830][ T8545] __nla_validate_parse: 7 callbacks suppressed [ 146.934846][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 147.007157][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 147.039221][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 147.587430][ T8578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.712'. [ 147.637905][ T8574] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.710'. [ 147.647807][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.141282][ T8612] erspan0: entered promiscuous mode [ 148.169826][ T8612] erspan0: entered allmulticast mode [ 148.387674][ T8624] tipc: Enabled bearer , priority 0 [ 148.441454][ T8624] syzkaller0: entered promiscuous mode [ 148.468387][ T8624] syzkaller0: entered allmulticast mode [ 148.523687][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 148.547713][ T8628] lo speed is unknown, defaulting to 1000 [ 148.567320][ T8624] tipc: Resetting bearer [ 148.646900][ T8624] tipc: Disabling bearer [ 149.023767][ T8645] lo speed is unknown, defaulting to 1000 [ 149.371566][ T8666] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 149.508429][ T8671] validate_nla: 1 callbacks suppressed [ 149.508448][ T8671] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 149.548245][ T8671] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 149.586287][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.740'. [ 149.597556][ T8671] batman_adv: batadv0: Removing interface: wlan1 [ 149.751060][ T8676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.752205][ T8678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.804436][ T8676] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 150.103409][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 150.280396][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 150.344162][ T8699] vlan2: entered promiscuous mode [ 150.361292][ T8699] vlan2: entered allmulticast mode [ 150.368539][ T8699] hsr_slave_1: entered allmulticast mode [ 150.787567][ T8720] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 151.021556][ T8724] netlink: 72 bytes leftover after parsing attributes in process `syz.1.758'. [ 151.455303][ T8754] tipc: New replicast peer: 255.255.255.255 [ 151.480431][ T8754] tipc: Enabled bearer , priority 10 [ 151.791339][ T8772] netlink: 'syz.0.769': attribute type 83 has an invalid length. [ 151.842145][ T8772] veth0_to_team: entered promiscuous mode [ 151.877586][ T8772] veth0_to_team: entered allmulticast mode [ 151.938530][ T8780] __nla_validate_parse: 1 callbacks suppressed [ 151.938547][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 152.157197][ T8795] netlink: 'syz.4.775': attribute type 58 has an invalid length. [ 152.182090][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 152.249673][ T8797] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 152.365408][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.779'. [ 152.744034][ T8828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'. [ 152.923694][ T8844] openvswitch: netlink: Unknown key attributes 2 [ 152.960222][ T8846] netlink: 104 bytes leftover after parsing attributes in process `syz.0.793'. [ 153.043356][ T8851] veth0: entered promiscuous mode [ 153.051103][ T8850] veth0: left promiscuous mode [ 153.314392][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 153.331605][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 153.341129][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 153.350093][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 153.360752][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 153.413989][ T8874] syz_tun: entered allmulticast mode [ 153.440827][ T8872] syz_tun: left allmulticast mode [ 154.101578][ T8910] bridge_slave_0: left allmulticast mode [ 154.133359][ T8910] bridge_slave_0: left promiscuous mode [ 154.137347][ T8913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.149687][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.247394][ T8910] bridge_slave_1: left allmulticast mode [ 154.257965][ T8910] bridge_slave_1: left promiscuous mode [ 154.270855][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.330988][ T8910] bond0: (slave bond_slave_0): Releasing backup interface [ 154.356852][ T8910] bond0: (slave bond_slave_1): Releasing backup interface [ 154.387509][ T8910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.410410][ T8910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.056133][ T8966] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 155.082167][ T8966] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.193531][ T8974] veth1_to_bond: entered allmulticast mode [ 155.433603][ T8992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.440933][ T8992] IPv6: NLM_F_CREATE should be set when creating new route [ 155.448351][ T8992] IPv6: NLM_F_CREATE should be set when creating new route [ 155.455624][ T8992] IPv6: NLM_F_CREATE should be set when creating new route [ 155.503438][ T8973] veth1_to_bond: left allmulticast mode [ 155.547878][ T8999] netlink: 'syz.4.837': attribute type 5 has an invalid length. [ 155.630791][ T8999] geneve2: entered promiscuous mode [ 155.647660][ T8999] geneve2: entered allmulticast mode [ 155.817591][ T1107] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 155.970911][ T1107] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 156.092609][ T1107] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 156.124442][ T1107] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 156.669062][ T9061] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 156.760667][ T1213] IPVS: starting estimator thread 0... [ 156.896417][ T9067] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.007185][ T9077] __nla_validate_parse: 38 callbacks suppressed [ 157.007203][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.860'. [ 157.338732][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 157.585070][ T9106] netlink: 48 bytes leftover after parsing attributes in process `syz.2.869'. [ 157.620282][ T9111] netlink: 68 bytes leftover after parsing attributes in process `syz.1.865'. [ 157.674713][ T9100] netlink: 236 bytes leftover after parsing attributes in process `syz.1.865'. [ 157.946799][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.872'. [ 158.522950][ T9139] netlink: 84 bytes leftover after parsing attributes in process `syz.4.881'. [ 158.599364][ T9151] netlink: 76 bytes leftover after parsing attributes in process `syz.2.884'. [ 158.646631][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 158.786883][ T9159] netlink: 136 bytes leftover after parsing attributes in process `syz.3.886'. [ 159.283974][ T5901] IPVS: starting estimator thread 0... [ 159.376173][ T9193] IPVS: using max 28 ests per chain, 67200 per kthread [ 159.502038][ T9205] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 159.568760][ T9209] netem: unknown loss type 0 [ 159.573912][ T9209] netem: change failed [ 159.972189][ T9238] tipc: Enabled bearer , priority 10 [ 160.344311][ T9263] netlink: 'syz.4.916': attribute type 83 has an invalid length. [ 161.018654][ T9288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.575754][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.641218][ T9327] bridge_slave_0: entered promiscuous mode [ 161.919527][ T9341] dvmrp1: entered allmulticast mode [ 162.162045][ T9359] __nla_validate_parse: 13 callbacks suppressed [ 162.162062][ T9359] netlink: 224 bytes leftover after parsing attributes in process `syz.4.940'. [ 162.374280][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'. [ 162.414045][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.944'. [ 162.426545][ T9373] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 162.570928][ T9376] IPVS: Error connecting to the multicast addr [ 162.828896][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 162.869966][ T9391] tipc: Enabled bearer , priority 0 [ 162.967471][ T9391] syzkaller0: entered promiscuous mode [ 162.983032][ T9391] syzkaller0: entered allmulticast mode [ 162.998527][ T9391] tipc: Resetting bearer [ 163.128619][ T36] tipc: Resetting bearer [ 163.166535][ T9390] tipc: Resetting bearer [ 163.729783][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 163.743953][ T9425] netlink: 'syz.1.956': attribute type 4 has an invalid length. [ 163.784774][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 164.464515][ T9390] tipc: Disabling bearer [ 165.002647][ T9461] Unsupported ieee802154 address type: 0 [ 165.229237][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 165.257572][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 165.285986][ T9467] netlink: 44 bytes leftover after parsing attributes in process `syz.4.969'. [ 165.452720][ T9483] gre0: left promiscuous mode [ 165.482873][ T9483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.572449][ T9489] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 165.617315][ T9489] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.654848][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 165.692979][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.710268][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.745249][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.795542][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.408579][ T9528] netlink: 'syz.1.988': attribute type 1 has an invalid length. [ 166.432225][ T9528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.471799][ T9528] netlink: 'syz.1.988': attribute type 7 has an invalid length. [ 166.728663][ T9538] netlink: 'syz.2.993': attribute type 3 has an invalid length. [ 166.753407][ T9538] netlink: 'syz.2.993': attribute type 4 has an invalid length. [ 167.052522][ T9565] netlink: 'syz.3.998': attribute type 15 has an invalid length. [ 167.590761][ T9591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.712462][ T9598] __nla_validate_parse: 6 callbacks suppressed [ 167.712480][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 167.724122][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 167.746165][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 167.757849][ T9597] delete_channel: no stack [ 167.763378][ T9599] netlink: 'syz.1.1009': attribute type 6 has an invalid length. [ 167.772237][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 167.791257][ T9598] netlink: 'syz.1.1009': attribute type 6 has an invalid length. [ 168.140305][ T9617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1014'. [ 168.304319][ T9623] netlink: 'syz.4.1015': attribute type 1 has an invalid length. [ 168.353483][ T9623] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1015'. [ 168.762126][ T9648] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 168.935478][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1024'. [ 169.031263][ T9651] veth3: entered promiscuous mode [ 169.046249][ T9651] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 169.094796][ T9660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.140161][ T9662] syz.0.1028 (9662) used greatest stack depth: 17864 bytes left [ 169.277956][ T9675] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1032'. [ 169.325069][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 169.337378][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 169.376144][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 169.601061][ T9697] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 169.728525][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'. [ 169.730133][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1043'. [ 169.942099][ T9711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.993065][ T9680] infiniband syz2: set active [ 169.998823][ T5901] vxcan1 speed is unknown, defaulting to 1000 [ 170.009028][ T9680] infiniband syz2: added vxcan1 [ 170.079945][ T9680] RDS/IB: syz2: added [ 170.133258][ T9680] smc: adding ib device syz2 with port count 1 [ 170.174875][ T9680] smc: ib device syz2 port 1 has pnetid [ 170.191196][ T979] vxcan1 speed is unknown, defaulting to 1000 [ 170.203268][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 170.897382][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 170.921373][ T5944] IPVS: starting estimator thread 0... [ 170.957726][ T9764] netlink: 'syz.4.1060': attribute type 83 has an invalid length. [ 171.038382][ T9761] IPVS: using max 27 ests per chain, 64800 per kthread [ 171.465375][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 171.934109][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 172.379976][ T9680] vxcan1 speed is unknown, defaulting to 1000 [ 172.649555][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 172.667527][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 172.690763][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 172.698289][ T9814] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.712935][ T9744] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.745052][ T9815] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.754930][ T9744] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.947586][ T9823] __nla_validate_parse: 6 callbacks suppressed [ 172.947603][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 172.954543][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 172.974274][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 173.001610][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 173.093597][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 173.109490][ T9744] hsr0 speed is unknown, defaulting to 1000 [ 173.231195][ T9834] IPVS: set_ctl: invalid protocol: 43 172.20.20.45:20001 [ 173.430025][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 173.468380][ T9847] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1091'. [ 173.734614][ T9866] syzkaller1: entered promiscuous mode [ 173.755977][ T9866] syzkaller1: entered allmulticast mode [ 173.806390][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 173.974726][ T9883] netlink: 'syz.4.1102': attribute type 15 has an invalid length. [ 174.036855][ T9883] netlink: 'syz.4.1102': attribute type 2 has an invalid length. [ 174.132828][ T9883] : entered promiscuous mode [ 174.305250][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 174.612248][ T979] vxcan1 speed is unknown, defaulting to 1000 [ 175.012218][ T9945] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1121'. [ 175.489112][ T9970] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 175.516104][ T9970] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 175.523952][ T9970] netlink: 'syz.1.1131': attribute type 4 has an invalid length. [ 175.542803][ T9970] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1131'. [ 175.743488][ T9983] geneve2: entered promiscuous mode [ 175.779487][ T9983] geneve2: entered allmulticast mode [ 175.808030][ T997] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 19999 - 0 [ 175.832234][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 175.841803][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 175.883745][ T9996] netlink: 6828 bytes leftover after parsing attributes in process `syz.4.1138'. [ 175.914502][ T9986] gretap0: entered promiscuous mode [ 175.921131][ T9986] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 175.929371][ T9986] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 175.937470][ T997] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.969511][ T997] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.993826][ T9989] 0ªî{X¹¦: renamed from gretap0 [ 176.064813][ T9989] 0ªî{X¹¦: left promiscuous mode [ 176.099835][ T9989] 0ªî{X¹¦: entered allmulticast mode [ 176.141610][ T9989] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 176.196045][ T997] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 176.240889][T10013] netlink: 'syz.4.1142': attribute type 16 has an invalid length. [ 176.695489][T10036] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 176.848773][T10040] geneve2: entered promiscuous mode [ 176.890207][T10040] geneve2: entered allmulticast mode [ 177.040664][T10049] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 177.372936][T10065] rdma_rxe: rxe_newlink: failed to add lo [ 177.569845][T10081] tipc: Enabled bearer , priority 12 [ 178.017064][T10102] __nla_validate_parse: 20 callbacks suppressed [ 178.017083][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 178.054649][T10105] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1172'. [ 178.320535][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 178.348621][T10115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1174'. [ 178.361711][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 178.460607][T10115] geneve3: entered promiscuous mode [ 178.472328][T10115] geneve3: entered allmulticast mode [ 178.567105][ T979] tipc: Node number set to 1147842376 [ 178.677296][T10131] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 178.728189][T10126] vlan2: entered allmulticast mode [ 178.733348][T10126] bond0: entered allmulticast mode [ 178.844220][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.854198][T10139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1180'. [ 178.912143][T10139] gretap2: entered promiscuous mode [ 178.956244][T10139] gretap2: entered allmulticast mode [ 179.002806][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'. [ 179.004591][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1182'. [ 179.081805][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1184'. [ 179.149918][T10146] tipc: Enabling of bearer rejected, failed to enable media [ 179.548826][T10170] netlink: 'syz.4.1189': attribute type 11 has an invalid length. [ 179.714810][T10174] dvmrp0: entered allmulticast mode [ 179.866660][T10191] veth0_to_team: left promiscuous mode [ 180.157283][T10207] veth0_to_bridge: entered promiscuous mode [ 180.179523][T10207] veth0_to_bridge: left promiscuous mode [ 180.528315][T10228] netlink: 'syz.4.1207': attribute type 5 has an invalid length. [ 180.605014][T10228] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 180.731354][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.573394][T10292] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004 [ 181.672067][T10296] ip6gre1: entered allmulticast mode [ 181.785334][T10301] tipc: Enabling of bearer rejected, failed to enable media [ 181.795441][T10305] tipc: Enabling of bearer rejected, failed to enable media [ 181.953373][T10318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.081506][T10314] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 182.119593][T10314] netlink: 'syz.0.1233': attribute type 4 has an invalid length. [ 182.148484][T10314] NCSI netlink: No device for ifindex 458760 [ 182.177705][T10327] netlink: 'syz.1.1236': attribute type 11 has an invalid length. [ 182.203944][T10327] netlink: 'syz.1.1236': attribute type 11 has an invalid length. [ 182.295028][T10331] sctp: [Deprecated]: syz.2.1239 (pid 10331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.295028][T10331] Use struct sctp_sack_info instead [ 182.502843][T10341] tipc: Enabled bearer , priority 0 [ 182.545012][T10345] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 182.567214][T10341] tipc: Resetting bearer [ 182.573074][T10343] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 182.603228][T10352] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 182.641384][T10340] tipc: Disabling bearer [ 183.406960][T10408] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 183.579763][T10417] lo speed is unknown, defaulting to 1000 [ 183.752133][T10421] ipvlan3: entered promiscuous mode [ 183.778134][T10421] bridge0: port 2(ipvlan3) entered blocking state [ 183.794876][T10421] bridge0: port 2(ipvlan3) entered disabled state [ 183.812015][T10421] ipvlan3: entered allmulticast mode [ 183.817942][T10421] bridge0: entered allmulticast mode [ 183.836380][T10421] ipvlan3: left allmulticast mode [ 183.843205][T10421] bridge0: left allmulticast mode [ 184.039028][T10417] vxcan1 speed is unknown, defaulting to 1000 [ 184.351030][T10450] delete_channel: no stack [ 184.553759][T10454] __nla_validate_parse: 23 callbacks suppressed [ 184.553778][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 184.636692][T10457] lo speed is unknown, defaulting to 1000 [ 184.670378][T10417] hsr0 speed is unknown, defaulting to 1000 [ 184.735638][ T3561] tipc: Subscription rejected, illegal request [ 184.770928][T10465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.009524][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 185.458161][T10501] tipc: Enabled bearer , priority 0 [ 185.496957][T10501] syzkaller0: entered promiscuous mode [ 185.503053][T10501] syzkaller0: entered allmulticast mode [ 185.516351][T10457] vxcan1 speed is unknown, defaulting to 1000 [ 185.520698][T10501] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 185.585405][T10501] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1290'. [ 185.663768][T10501] tipc: Resetting bearer [ 185.728360][T10500] tipc: Resetting bearer [ 185.766437][T10500] tipc: Disabling bearer [ 186.055454][T10527] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1297'. [ 186.339242][T10457] hsr0 speed is unknown, defaulting to 1000 [ 187.298496][T10564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1304'. [ 187.728974][T10587] netlink: 'syz.4.1313': attribute type 21 has an invalid length. [ 187.737848][T10587] netlink: 'syz.4.1313': attribute type 22 has an invalid length. [ 187.748269][T10587] netlink: 'syz.4.1313': attribute type 23 has an invalid length. [ 187.756509][T10587] netlink: 'syz.4.1313': attribute type 25 has an invalid length. [ 187.765265][T10587] netlink: 'syz.4.1313': attribute type 26 has an invalid length. [ 187.774975][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'. [ 188.158913][T10604] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1317'. [ 188.229590][T10607] tipc: Trying to set illegal importance in message [ 188.251002][T10607] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1317'. [ 188.303819][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 188.316860][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 188.849028][T10638] lo: MTU too low for tipc bearer [ 188.868171][T10638] tipc: Enabling of bearer rejected, failed to enable media [ 188.943315][T10644] IPVS: length: 157 != 24 [ 189.031812][T10647] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 189.132750][T10647] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 189.230782][T10653] netlink: 'syz.1.1331': attribute type 10 has an invalid length. [ 189.656526][T10696] __nla_validate_parse: 8 callbacks suppressed [ 189.656545][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 189.701473][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'. [ 189.781897][T10699] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.034587][T10717] netlink: 'syz.3.1350': attribute type 39 has an invalid length. [ 190.042376][T10713] netlink: 'syz.2.1348': attribute type 10 has an invalid length. [ 190.073667][T10713] veth0_macvtap: left promiscuous mode [ 190.123692][T10721] syzkaller1: entered promiscuous mode [ 190.129624][T10721] syzkaller1: entered allmulticast mode [ 190.195364][T10719] pim6reg1: entered promiscuous mode [ 190.208331][T10719] pim6reg1: entered allmulticast mode [ 190.476199][T10746] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 190.506460][T10746] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1361'. [ 190.520805][T10746] netlink: 'syz.1.1361': attribute type 2 has an invalid length. [ 190.534618][T10749] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1362'. [ 190.551162][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1361'. [ 190.593498][T10754] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1364'. [ 190.652077][T10756] netlink: 'syz.1.1365': attribute type 11 has an invalid length. [ 190.670674][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 190.698876][T10759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.709926][T10756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1365'. [ 191.340735][T10796] vlan3: entered promiscuous mode [ 191.359710][T10796] bridge0: entered promiscuous mode [ 191.445390][T10808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1381'. [ 191.631150][T10816] lo speed is unknown, defaulting to 1000 [ 191.708134][T10828] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1386'. [ 192.254532][T10816] vxcan1 speed is unknown, defaulting to 1000 [ 192.256937][T10851] lo speed is unknown, defaulting to 1000 [ 192.262362][T10853] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 192.573457][T10853] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 192.629958][T10855] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 192.651026][T10855] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 192.741037][T10860] geneve2: entered promiscuous mode [ 192.746737][T10860] geneve2: entered allmulticast mode [ 192.753622][ T3561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 192.795654][ T3561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 192.815052][ T3561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 192.836653][ T3561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 192.995030][T10816] hsr0 speed is unknown, defaulting to 1000 [ 193.128005][T10851] vxcan1 speed is unknown, defaulting to 1000 [ 193.304019][T10885] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 193.486844][T10894] x_tables: ip_tables: udp match: only valid for protocol 17 [ 193.722741][T10903] validate_nla: 4 callbacks suppressed [ 193.722759][T10903] netlink: 'syz.0.1408': attribute type 3 has an invalid length. [ 193.725138][T10851] hsr0 speed is unknown, defaulting to 1000 [ 193.761484][T10903] netlink: 'syz.0.1408': attribute type 3 has an invalid length. [ 194.049856][T10913] netlink: 'syz.3.1411': attribute type 6 has an invalid length. [ 194.136882][T10918] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 194.222590][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.237824][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.431148][T10921] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.443925][T10921] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 194.454387][T10921] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 195.007567][T10953] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 195.035145][T10953] __nla_validate_parse: 8 callbacks suppressed [ 195.035160][T10953] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1421'. [ 195.066235][T10953] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 195.083029][T10953] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1421'. [ 195.112502][T10953] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 195.130226][T10953] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1421'. [ 195.168358][T10953] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 195.180012][T10953] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1421'. [ 195.190151][T10953] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 195.224511][T10953] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1421'. [ 195.518961][T10970] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1427'. [ 195.562456][T10972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.626957][T10973] lo speed is unknown, defaulting to 1000 [ 195.777072][T10987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1431'. [ 196.036406][T10973] vxcan1 speed is unknown, defaulting to 1000 [ 196.137675][T11005] ipvlan3: entered promiscuous mode [ 196.483658][T10973] hsr0 speed is unknown, defaulting to 1000 [ 196.769674][T11037] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 196.780011][T11037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1451'. [ 196.794855][T11037] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 196.983245][T11042] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 197.374994][T11066] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1459'. [ 197.411089][T11068] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1457'. [ 198.482229][T11117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.554686][T11129] bond6: (slave wlan0): Opening slave failed [ 198.961154][T11150] atomic_op ffff88807e59e198 conn xmit_atomic 0000000000000000 [ 198.979205][T11150] atomic_op ffff88807e599198 conn xmit_atomic 0000000000000000 [ 198.995986][T11150] atomic_op ffff88807e59c198 conn xmit_atomic 0000000000000000 [ 199.014437][T11150] atomic_op ffff88807e59b998 conn xmit_atomic 0000000000000000 [ 199.045884][T11150] atomic_op ffff88807b4e7198 conn xmit_atomic 0000000000000000 [ 199.053634][T11150] atomic_op ffff8880304c7198 conn xmit_atomic 0000000000000000 [ 199.879474][T11194] validate_nla: 3 callbacks suppressed [ 199.879492][T11194] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 199.907500][T11199] syzkaller0: entered promiscuous mode [ 199.930163][T11199] syzkaller0: entered allmulticast mode [ 200.036952][T11207] __nla_validate_parse: 8 callbacks suppressed [ 200.036969][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'. [ 200.182510][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 200.616641][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 200.889522][T11249] rdma_rxe: rxe_newlink: failed to add lo [ 200.912854][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.952254][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.960235][T11253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1514'. [ 200.976628][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.984568][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.018110][T11247] batman_adv: batadv0: Removing interface: wlan1 [ 201.174498][T11273] netlink: ct family unspecified [ 201.200080][T11274] netlink: ct family unspecified [ 201.205240][T11273] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.228115][T11274] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.241301][T11276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1520'. [ 201.267241][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'. [ 201.284293][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'. [ 201.305543][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'. [ 201.345148][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'. [ 201.362158][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'. [ 201.516223][T11293] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 201.671072][T11299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.684583][T11299] bond4: (slave bond5): making interface the new active one [ 201.704053][T11299] bond4: (slave bond5): Enslaving as an active interface with an up link [ 201.750931][T11299] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.768405][T11299] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 202.162086][T11331] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 202.205945][T11331] lo speed is unknown, defaulting to 1000 [ 202.548743][T11331] vxcan1 speed is unknown, defaulting to 1000 [ 202.961160][T11331] hsr0 speed is unknown, defaulting to 1000 [ 203.630275][T11371] tipc: Enabled bearer , priority 0 [ 203.651027][T11371] syzkaller0: entered promiscuous mode [ 203.671965][T11371] syzkaller0: entered allmulticast mode [ 203.727365][T11374] tipc: Resetting bearer [ 203.800299][T11370] tipc: Resetting bearer [ 203.845485][T11370] tipc: Disabling bearer [ 203.991599][T11384] openvswitch: netlink: Multiple metadata blocks provided [ 203.996322][T11383] openvswitch: netlink: Flow key attr not present in new flow. [ 204.065476][T11098] Set syz1 is full, maxelem 65536 reached [ 204.240978][T11396] netlink: 'syz.3.1555': attribute type 9 has an invalid length. [ 204.315166][T11401] openvswitch: netlink: Key type 29 is not supported [ 204.375172][T11406] openvswitch: netlink: Key type 29 is not supported [ 204.393100][T11403] nbd: nbd0 already in use [ 204.539425][T11415] dvmrp0: entered allmulticast mode [ 204.573023][T11418] dvmrp0: left allmulticast mode [ 204.977544][T11439] Unsupported ieee802154 address type: 0 [ 205.044488][T11442] lo: entered allmulticast mode [ 205.054925][T11442] lo: left allmulticast mode [ 205.136848][T11439] tipc: Can't bind to reserved service type 1 [ 205.333323][T11460] __nla_validate_parse: 73 callbacks suppressed [ 205.333340][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1575'. [ 205.467603][T11465] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1576'. [ 205.497361][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 205.499636][T11468] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1578'. [ 205.524876][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 205.558645][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 205.615789][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 205.616900][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1577'. [ 205.655358][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 205.675406][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1578'. [ 205.725337][T11474] netlink: 'syz.3.1577': attribute type 5 has an invalid length. [ 206.071325][T11501] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.378941][T11528] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 206.991999][T11571] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 207.183304][T11580] netlink: 'syz.2.1610': attribute type 8 has an invalid length. [ 207.724378][T11614] hsr_slave_0: left promiscuous mode [ 207.752868][T11614] hsr_slave_1: left promiscuous mode [ 207.976348][T11636] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.037100][T11640] netlink: 'syz.3.1628': attribute type 21 has an invalid length. [ 208.074411][T11640] netlink: 'syz.3.1628': attribute type 21 has an invalid length. [ 208.254543][T11654] netlink: 'syz.2.1632': attribute type 4 has an invalid length. [ 209.058184][T11700] erspan0: entered promiscuous mode [ 209.064491][T11700] gretap0: entered promiscuous mode [ 209.559068][T11738] netlink: 'syz.2.1659': attribute type 16 has an invalid length. [ 209.596227][T11738] netlink: 'syz.2.1659': attribute type 17 has an invalid length. [ 209.628767][T11741] netlink: 'syz.0.1657': attribute type 11 has an invalid length. [ 209.666108][T11744] nbd: must specify a size in bytes for the device [ 209.741765][T11738] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.749012][T11738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.789786][T11738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.878872][T11753] nbd: nbd0 already in use [ 210.063208][T11764] netlink: 'syz.3.1667': attribute type 29 has an invalid length. [ 210.091064][T11764] netlink: 'syz.3.1667': attribute type 29 has an invalid length. [ 210.275217][T11775] syz.2.1669 uses old SIOCAX25GETINFO [ 210.367870][T11786] __nla_validate_parse: 27 callbacks suppressed [ 210.367889][T11786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1672'. [ 210.599535][T11807] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1676'. [ 211.378869][T11835] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 211.493336][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1689'. [ 211.524289][ T24] IPVS: starting estimator thread 0... [ 211.532385][T11844] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.636002][T11852] IPVS: using max 31 ests per chain, 74400 per kthread [ 211.760178][T11871] Bluetooth: MGMT ver 1.23 [ 212.584738][T11919] syz.2.1706: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.612492][T11919] CPU: 0 UID: 0 PID: 11919 Comm: syz.2.1706 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 212.612528][T11919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.612545][T11919] Call Trace: [ 212.612553][T11919] [ 212.612562][T11919] dump_stack_lvl+0x189/0x250 [ 212.612593][T11919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.612621][T11919] ? __pfx__printk+0x10/0x10 [ 212.612655][T11919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.612677][T11919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.612699][T11919] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 212.612722][T11919] warn_alloc+0x214/0x310 [ 212.612749][T11919] ? stack_depot_save_flags+0x40/0x860 [ 212.612773][T11919] ? __pfx_warn_alloc+0x10/0x10 [ 212.612800][T11919] ? kasan_save_track+0x4f/0x80 [ 212.612822][T11919] ? xskq_create+0x56/0x170 [ 212.612842][T11919] ? xsk_init_queue+0xb0/0x110 [ 212.612860][T11919] ? xsk_setsockopt+0x4dc/0x8d0 [ 212.612877][T11919] ? do_sock_setsockopt+0x17c/0x1b0 [ 212.612901][T11919] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 212.612915][T11919] ? do_syscall_64+0xfa/0x3b0 [ 212.612937][T11919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.612964][T11919] __vmalloc_node_range_noprof+0x125/0x12f0 [ 212.613020][T11919] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.613051][T11919] ? __kasan_kmalloc+0x93/0xb0 [ 212.613078][T11919] vmalloc_user_noprof+0xad/0xf0 [ 212.613102][T11919] ? xskq_create+0xbf/0x170 [ 212.613124][T11919] xskq_create+0xbf/0x170 [ 212.613149][T11919] xsk_init_queue+0xb0/0x110 [ 212.613173][T11919] xsk_setsockopt+0x4dc/0x8d0 [ 212.613197][T11919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.613217][T11919] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.613245][T11919] ? aa_sock_opt_perm+0xff/0x1b0 [ 212.613265][T11919] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 212.613284][T11919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.613306][T11919] do_sock_setsockopt+0x17c/0x1b0 [ 212.613336][T11919] __x64_sys_setsockopt+0x13f/0x1b0 [ 212.613359][T11919] do_syscall_64+0xfa/0x3b0 [ 212.613381][T11919] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.613403][T11919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.613420][T11919] ? clear_bhb_loop+0x60/0xb0 [ 212.613445][T11919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.613462][T11919] RIP: 0033:0x7fd90778ebe9 [ 212.613478][T11919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.613493][T11919] RSP: 002b:00007fd90865e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.613511][T11919] RAX: ffffffffffffffda RBX: 00007fd9079b5fa0 RCX: 00007fd90778ebe9 [ 212.613524][T11919] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 212.613534][T11919] RBP: 00007fd907811e19 R08: 0000000000000004 R09: 0000000000000000 [ 212.613544][T11919] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.613555][T11919] R13: 00007fd9079b6038 R14: 00007fd9079b5fa0 R15: 00007fff4bd6eee8 [ 212.613585][T11919] [ 212.911939][T11919] Mem-Info: [ 212.915085][T11919] active_anon:3668 inactive_anon:0 isolated_anon:0 [ 212.915085][T11919] active_file:2565 inactive_file:39874 isolated_file:0 [ 212.915085][T11919] unevictable:768 dirty:57 writeback:0 [ 212.915085][T11919] slab_reclaimable:11878 slab_unreclaimable:107520 [ 212.915085][T11919] mapped:28801 shmem:1369 pagetables:960 [ 212.915085][T11919] sec_pagetables:0 bounce:0 [ 212.915085][T11919] kernel_misc_reclaimable:0 [ 212.915085][T11919] free:1317815 free_pcp:20362 free_cma:0 [ 212.960981][T11919] Node 0 active_anon:14636kB inactive_anon:0kB active_file:10260kB inactive_file:159292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115168kB dirty:224kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12468kB pagetables:3764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.993727][T11919] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.023807][T11919] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.053294][T11919] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 213.059138][T11919] Node 0 DMA32 free:1358156kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14588kB inactive_anon:0kB active_file:10260kB inactive_file:157716kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:62616kB local_pcp:39324kB free_cma:0kB [ 213.091952][T11919] lowmem_reserve[]: 0 0 1 1 1 [ 213.096735][T11919] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 213.126247][T11919] lowmem_reserve[]: 0 0 0 0 0 [ 213.130987][T11919] Node 1 Normal free:3897712kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18176kB local_pcp:5984kB free_cma:0kB [ 213.162723][T11919] lowmem_reserve[]: 0 0 0 0 0 [ 213.167493][T11919] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.180378][T11919] Node 0 DMA32: 1085*4kB (UME) 724*8kB (UM) 146*16kB (UM) 331*32kB (UM) 16*64kB (UME) 11*128kB (UME) 7*256kB (UM) 15*512kB (UM) 10*1024kB (ME) 7*2048kB (UME) 317*4096kB (UM) = 1357972kB [ 213.199433][T11919] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 213.215953][T11919] Node 1 Normal: 178*4kB (UME) 43*8kB (UME) 45*16kB (UME) 104*32kB (UME) 26*64kB (UME) 8*128kB (UME) 3*256kB (ME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 948*4096kB (ME) = 3897712kB [ 213.255808][T11919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.265401][T11919] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.297313][T11919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.324985][T11931] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1710'. [ 213.336862][T11919] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.350267][T11919] 43807 total pagecache pages [ 213.360068][T11919] 0 pages in swap cache [ 213.364249][T11919] Free swap = 124996kB [ 213.385683][T11919] Total swap = 124996kB [ 213.396178][T11919] 2097051 pages RAM [ 213.405660][T11919] 0 pages HighMem/MovableOnly [ 213.413925][T11919] 425656 pages reserved [ 213.418297][T11919] 0 pages cma reserved [ 213.577462][T11941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1711'. [ 213.782806][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 213.867424][T11940] team0 (unregistering): Port device team_slave_0 removed [ 213.887450][T11940] team0 (unregistering): Port device team_slave_1 removed [ 214.042407][T11967] netlink: 'syz.4.1718': attribute type 10 has an invalid length. [ 214.264072][T11987] netlink: 'syz.4.1722': attribute type 21 has an invalid length. [ 214.273238][T11987] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1722'. [ 214.538928][T11994] lo speed is unknown, defaulting to 1000 [ 214.797799][T11994] vxcan1 speed is unknown, defaulting to 1000 [ 215.006121][T11994] hsr0 speed is unknown, defaulting to 1000 [ 215.341045][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1730'. [ 215.397014][T12020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1730'. [ 215.515528][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 215.547321][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 215.931475][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1738'. [ 216.155975][T12060] netlink: 'syz.0.1739': attribute type 17 has an invalid length. [ 216.163926][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 216.196865][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1739'. [ 216.310098][T12073] netlink: 'syz.1.1742': attribute type 7 has an invalid length. [ 216.413157][T12074] netlink: 'syz.1.1742': attribute type 11 has an invalid length. [ 216.529007][T12073] : entered promiscuous mode [ 216.669007][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1745'. [ 216.698619][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1745'. [ 216.843253][T12084] sctp: [Deprecated]: syz.4.1744 (pid 12084) Use of int in max_burst socket option. [ 216.843253][T12084] Use struct sctp_assoc_value instead [ 217.030703][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 217.063895][T12103] netem: incorrect ge model size [ 217.131433][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 217.165815][T12097] nbd3: detected capacity change from 0 to 63 [ 217.172364][T12102] block nbd3: NBD_DISCONNECT [ 217.209813][T12102] block nbd3: Disconnected due to user request. [ 217.223588][T12105] batadv_slave_1 (unregistering): left promiscuous mode [ 217.230746][T12102] block nbd3: shutting down sockets [ 217.670388][T12125] tipc: Enabled bearer , priority 0 [ 217.683856][T12124] syzkaller0: entered promiscuous mode [ 217.694327][T12124] syzkaller0: entered allmulticast mode [ 217.729017][T12124] tipc: Resetting bearer [ 217.768255][T12124] tipc: Disabling bearer [ 218.676008][T12153] pim6reg1: entered promiscuous mode [ 218.697761][T12153] pim6reg1: entered allmulticast mode [ 219.106499][T12178] netlink: 'syz.4.1777': attribute type 7 has an invalid length. [ 220.298453][T11977] Set syz1 is full, maxelem 65536 reached [ 220.417884][T12223] sctp: [Deprecated]: syz.4.1789 (pid 12223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.417884][T12223] Use struct sctp_sack_info instead [ 220.791025][T12242] can: request_module (can-proto-0) failed. [ 220.858897][T12252] __nla_validate_parse: 3 callbacks suppressed [ 220.858915][T12252] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1801'. [ 220.894686][T12252] netlink: 'syz.4.1801': attribute type 3 has an invalid length. [ 220.909358][T12255] nbd: couldn't find device at index 1 [ 220.911747][T12252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.170283][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 221.194942][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 221.206774][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 221.224458][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 221.324294][T12260] syzkaller1: entered promiscuous mode [ 221.330122][T12260] syzkaller1: entered allmulticast mode [ 221.702259][T12302] netlink: 'syz.0.1818': attribute type 3 has an invalid length. [ 221.772517][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 221.812806][T12302] bridge_slave_1: left allmulticast mode [ 221.837877][T12302] bridge_slave_1: left promiscuous mode [ 221.856150][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.919031][T12302] bridge_slave_0: left allmulticast mode [ 221.947451][T12302] bridge_slave_0: left promiscuous mode [ 221.954881][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.147164][T12330] ieee802154 phy0 wpan0: encryption failed: -90 [ 222.229977][ T30] audit: type=1107 audit(1755493096.967:2): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 222.747771][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 222.862951][T12336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.894650][T12351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1830'. [ 222.904576][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 222.938706][T12351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1830'. [ 223.797377][T12425] netlink: 'syz.2.1852': attribute type 1 has an invalid length. [ 223.826742][T12429] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 224.100710][T12451] netlink: 'syz.0.1860': attribute type 64 has an invalid length. [ 224.224436][T12457] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 224.225365][T12459] veth0: entered promiscuous mode [ 224.271951][T12457] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 224.297170][T12459] veth0 (unregistering): left promiscuous mode [ 224.342160][T12462] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.561847][T12487] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 224.590252][T12489] vlan3: entered allmulticast mode [ 224.597788][T12489] veth1: entered allmulticast mode [ 224.644374][T12487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.718344][T12494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.734531][T12494] team0: Port device bond7 added [ 224.743629][T12497] netlink: 'syz.0.1874': attribute type 9 has an invalid length. [ 224.745880][T12499] netlink: 'syz.2.1875': attribute type 7 has an invalid length. [ 224.755842][T12497] netlink: 'syz.0.1874': attribute type 9 has an invalid length. [ 224.765541][T12499] netlink: 'syz.2.1875': attribute type 8 has an invalid length. [ 225.060203][T12524] netlink: 'syz.2.1881': attribute type 4 has an invalid length. [ 225.103497][T12524] netlink: 'syz.2.1881': attribute type 4 has an invalid length. [ 225.115015][T12527] netlink: 'syz.3.1883': attribute type 9 has an invalid length. [ 225.269626][T12538] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 225.295468][T12536] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 225.771386][T12572] 0ªî{X¹¦: left allmulticast mode [ 225.780882][T12572] erspan0: left promiscuous mode [ 225.787074][T12572] erspan0: left allmulticast mode [ 225.820667][T12572] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 225.871485][T12580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.930702][T12583] __nla_validate_parse: 18 callbacks suppressed [ 225.930722][T12583] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1901'. [ 225.949225][T12583] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1901'. [ 225.974335][T12583] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1901'. [ 225.985215][T12583] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1901'. [ 226.230118][T12597] tipc: Enabled bearer , priority 0 [ 226.239988][T12597] syzkaller0: entered promiscuous mode [ 226.246100][T12597] syzkaller0: entered allmulticast mode [ 226.274543][T12597] tipc: Resetting bearer [ 226.295535][T12596] tipc: Resetting bearer [ 226.306549][T12602] sctp: [Deprecated]: syz.0.1906 (pid 12602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.306549][T12602] Use struct sctp_sack_info instead [ 226.327841][T12602] sctp: [Deprecated]: syz.0.1906 (pid 12602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.327841][T12602] Use struct sctp_sack_info instead [ 226.360828][T12596] tipc: Disabling bearer [ 226.436437][T12607] sock: sock_set_timeout: `syz.0.1909' (pid 12607) tries to set negative timeout [ 226.616554][T12621] 8021q: VLANs not supported on ip6_vti0 [ 226.944205][T12637] tipc: Enabled bearer , priority 0 [ 226.991674][T12637] syzkaller0: entered promiscuous mode [ 227.001350][T12637] syzkaller0: entered allmulticast mode [ 227.140149][T12637] tipc: Resetting bearer [ 227.164846][T12635] tipc: Resetting bearer [ 227.207029][T12635] tipc: Disabling bearer [ 227.451494][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 227.559860][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1934'. [ 227.616622][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 227.626158][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 227.934063][T12711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1943'. [ 228.181563][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 228.544518][T12731] tipc: Enabled bearer , priority 0 [ 228.564786][T12731] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 228.604170][T12731] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 228.647641][T12731] tipc: Resetting bearer [ 229.439318][T12795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.446648][T12795] IPv6: NLM_F_CREATE should be set when creating new route [ 229.646199][ T979] tipc: Node number set to 1929225260 [ 230.112751][T12830] rdma_rxe: rxe_newlink: failed to add lo [ 230.200179][T12830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.224741][T12830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.335966][T12841] validate_nla: 9 callbacks suppressed [ 230.335984][T12841] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 231.594764][T12935] __nla_validate_parse: 3 callbacks suppressed [ 231.594782][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 231.831798][T12953] bridge_slave_0: default FDB implementation only supports local addresses [ 231.853758][T12953] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 232.339570][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2017'. [ 232.387013][T13000] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2021'. [ 233.738436][T13017] netlink: 696 bytes leftover after parsing attributes in process `syz.0.2026'. [ 233.776939][T13017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2026'. [ 233.796421][T13017] gre0: entered promiscuous mode [ 233.802720][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2026'. [ 233.807165][T13017] gre0: entered allmulticast mode [ 233.819522][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 234.260317][T13052] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 234.318649][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2040'. [ 234.439220][T13066] bond0: (slave bond_slave_0): Releasing backup interface [ 234.475564][T13066] bond0: (slave bond_slave_1): Releasing backup interface [ 234.505366][T13066] team0: Port device team_slave_0 removed [ 234.553643][T13076] netlink: 'syz.2.2049': attribute type 10 has an invalid length. [ 234.691160][T13066] team0: Port device team_slave_1 removed [ 234.698496][T13066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.709426][T13066] bond1: (slave veth3): Releasing backup interface [ 234.727331][T13066] bond2: (slave gretap1): Releasing active interface [ 234.759769][T13076] team0: Device veth1_macvtap failed to register rx_handler [ 234.778933][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2051'. [ 234.958068][T13093] team_slave_0: entered promiscuous mode [ 234.964113][T13093] team_slave_1: entered promiscuous mode [ 234.965434][T13103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2054'. [ 234.969857][T13093] dummy0: entered promiscuous mode [ 235.062391][T13093] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 235.122087][T13093] team0: Device macvtap1 is already an upper device of the team interface [ 235.169079][T13093] team_slave_0: left promiscuous mode [ 235.174589][T13093] team_slave_1: left promiscuous mode [ 235.180166][T13093] dummy0: left promiscuous mode [ 235.186645][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.003453][T13170] 8021q: VLANs not supported on dvmrp1 [ 236.030603][T13166] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 236.292997][T13185] Unsupported ieee802154 address type: 0 [ 236.303187][T13185] Unsupported ieee802154 address type: 0 [ 236.758042][T13209] __nla_validate_parse: 7 callbacks suppressed [ 236.758061][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 236.818237][T13209] netlink: 'syz.1.2082': attribute type 11 has an invalid length. [ 236.827244][T13213] netlink: 'syz.4.2084': attribute type 23 has an invalid length. [ 236.833443][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 236.858763][T13209] netlink: 'syz.1.2082': attribute type 11 has an invalid length. [ 236.895060][T13215] tipc: Enabling of bearer rejected, already enabled [ 237.121062][T13235] tipc: Enabled bearer , priority 0 [ 237.150210][T13235] syzkaller0: entered promiscuous mode [ 237.202792][T13235] syzkaller0: entered allmulticast mode [ 237.231542][T13246] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 237.234353][T13243] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 237.412760][T13235] tipc: Resetting bearer [ 237.476661][T13235] tipc: Disabling bearer [ 237.633809][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2099'. [ 237.748419][T13271] netlink: 'syz.0.2101': attribute type 83 has an invalid length. [ 237.883380][T13278] netlink: zone id is out of range [ 237.898946][T13278] netlink: del zone limit has 4 unknown bytes [ 238.025295][T13286] netlink: 'syz.4.2105': attribute type 11 has an invalid length. [ 238.077248][T13292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2106'. [ 238.279213][T13306] netlink: 'syz.2.2111': attribute type 26 has an invalid length. [ 238.282684][T13307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.511383][T13328] openvswitch: netlink: Unknown key attributes 2 [ 238.539736][T13327] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.547547][T13327] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.642528][T13336] netlink: 'syz.3.2120': attribute type 21 has an invalid length. [ 238.674117][T13336] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.716274][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 238.737669][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 238.949827][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2123'. [ 239.000784][T13350] Bluetooth: MGMT ver 1.23 [ 239.178836][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2123'. [ 239.204190][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2123'. [ 239.241795][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2123'. [ 239.472499][T13378] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 239.510908][T13375] pim6reg1: entered promiscuous mode [ 239.534573][T13375] pim6reg1: entered allmulticast mode [ 239.609390][T13375] vlan0: entered promiscuous mode [ 239.614471][T13375] bridge0: entered promiscuous mode [ 239.724651][T13397] netlink: 'syz.2.2134': attribute type 6 has an invalid length. [ 239.740572][T13397] netlink: 'syz.2.2134': attribute type 1 has an invalid length. [ 240.097807][T13416] bridge3: entered allmulticast mode [ 240.359951][ T30] audit: type=1804 audit(1755493115.097:3): pid=13431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2147" name="/newroot/464/cgroup.controllers" dev="tmpfs" ino=2373 res=1 errno=0 [ 240.428891][ T30] audit: type=1800 audit(1755493115.107:4): pid=13431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2147" name="cgroup.controllers" dev="tmpfs" ino=2373 res=0 errno=0 [ 240.467913][T13431] gtp1: entered promiscuous mode [ 241.365339][T13511] bond8 (unregistering): Released all slaves [ 241.407838][T13517] bridge: RTM_NEWNEIGH with invalid ether address [ 241.482889][T13521] macvlan0: entered promiscuous mode [ 241.514445][T13521] macvlan0: entered allmulticast mode [ 241.882731][T13544] lo speed is unknown, defaulting to 1000 [ 241.986433][T13557] __nla_validate_parse: 79 callbacks suppressed [ 241.986450][T13557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2180'. [ 242.123765][T13544] vxcan1 speed is unknown, defaulting to 1000 [ 242.424195][T13561] bond9: entered promiscuous mode [ 242.443751][T13561] bond9: entered allmulticast mode [ 242.453463][T13561] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.491883][T13544] hsr0 speed is unknown, defaulting to 1000 [ 242.583756][T13564] lo speed is unknown, defaulting to 1000 [ 242.669644][T13575] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2188'. [ 242.844290][T13587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2186'. [ 242.861211][T13587] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 242.923798][T13587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2186'. [ 242.937660][T13587] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 243.104628][T13596] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2192'. [ 243.127036][T13599] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2193'. [ 243.308005][T13564] vxcan1 speed is unknown, defaulting to 1000 [ 243.433100][T13614] Can't find ip_set type hash:net,p [ 243.741670][T13633] veth0: entered promiscuous mode [ 243.774778][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 243.848496][T13636] veth0: left promiscuous mode [ 243.851607][T13639] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.870832][T13564] hsr0 speed is unknown, defaulting to 1000 [ 244.003728][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 244.012871][T13647] validate_nla: 7 callbacks suppressed [ 244.013042][T13647] netlink: 'syz.4.2207': attribute type 4 has an invalid length. [ 244.059850][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 244.146177][T13652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2209'. [ 244.171097][T13648] xfrm1: entered promiscuous mode [ 244.191243][T13648] xfrm1: entered allmulticast mode [ 244.506450][T13670] syz_tun: entered allmulticast mode [ 244.612635][T13670] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 244.656998][T13670] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 244.774416][T13684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.827082][T13686] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 244.957451][T13669] syz_tun: left allmulticast mode [ 245.590628][T13720] gre0: left allmulticast mode [ 245.625799][T13722] netlink: 'syz.3.2232': attribute type 10 has an invalid length. [ 246.102622][T13720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.123637][T13720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.493072][T13720] bridge1: left promiscuous mode [ 246.498975][T13720] bridge1: left allmulticast mode [ 246.519518][T13720] geneve2: left promiscuous mode [ 246.524609][T13720] geneve2: left allmulticast mode [ 246.642712][T13720] gtp1: left promiscuous mode [ 246.649664][T13720] xfrm1: left promiscuous mode [ 246.654469][T13720] xfrm1: left allmulticast mode [ 246.686558][T13729] bridge5: entered allmulticast mode [ 246.760275][ T3561] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.785401][ T3561] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.819699][ T3561] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.837537][ T3561] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.866959][ T3561] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.877097][ T3561] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.894271][ T3561] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.907453][ T3561] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.174027][T13774] IPv6: sit1: Disabled Multicast RS [ 247.186753][T13774] sit1: entered allmulticast mode [ 247.202578][T13776] __nla_validate_parse: 12 callbacks suppressed [ 247.202593][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2243'. [ 247.224005][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2243'. [ 247.263192][T13776] bridge0: port 2(vlan0) entered blocking state [ 247.274015][T13776] bridge0: port 2(vlan0) entered disabled state [ 247.286103][T13776] vlan0: entered allmulticast mode [ 247.291359][T13776] bridge0: entered allmulticast mode [ 247.314428][T13776] vlan0: left allmulticast mode [ 247.326477][T13776] bridge0: left allmulticast mode [ 247.570698][T13802] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 247.600016][T13802] team0: Port device dummy0 added [ 247.608593][T13802] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 247.648290][T13802] team0: Port device dummy0 removed [ 247.678413][T13802] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 247.729191][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 247.875323][T13825] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 247.889279][T13825] netlink: 'syz.3.2260': attribute type 21 has an invalid length. [ 247.914015][T13821] lo speed is unknown, defaulting to 1000 [ 248.366547][T13850] netlink: 'syz.2.2262': attribute type 30 has an invalid length. [ 248.604063][T13821] vxcan1 speed is unknown, defaulting to 1000 [ 248.604798][T13853] macsec0: entered promiscuous mode [ 248.617001][T13853] macsec0: entered allmulticast mode [ 248.625806][T13853] veth1_macvtap: entered allmulticast mode [ 248.631996][T13853] macsec0: left promiscuous mode [ 248.638076][T13853] macsec0: left allmulticast mode [ 248.646139][T13853] veth1_macvtap: left allmulticast mode [ 248.869954][T13867] netlink: 'syz.3.2272': attribute type 6 has an invalid length. [ 248.915971][T13867] netlink: 'syz.3.2272': attribute type 6 has an invalid length. [ 249.172061][T13821] hsr0 speed is unknown, defaulting to 1000 [ 249.188619][T13887] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 249.210260][T13887] netlink: 'syz.2.2278': attribute type 2 has an invalid length. [ 249.334892][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2281'. [ 249.337744][T13896] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 249.349443][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2281'. [ 249.361282][T13896] netlink: 'syz.1.2280': attribute type 2 has an invalid length. [ 249.370215][T13896] netlink: 'syz.1.2280': attribute type 2 has an invalid length. [ 249.391100][T13896] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 249.413840][T13896] netlink: 'syz.1.2280': attribute type 2 has an invalid length. [ 249.444923][T13896] netlink: 1108 bytes leftover after parsing attributes in process `syz.1.2280'. [ 249.559849][T13906] netlink: 'syz.2.2281': attribute type 2 has an invalid length. [ 249.647568][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 249.659779][T13911] netlink: 'syz.1.2284': attribute type 3 has an invalid length. [ 249.675502][T13911] netlink: 'syz.1.2284': attribute type 1 has an invalid length. [ 249.689605][T13910] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 249.689946][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 249.732901][T13912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2282'. [ 249.946584][T13920] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2287'. [ 250.833936][T13971] 8021q: VLANs not supported on ip_vti0 [ 251.171229][T14003] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 251.251686][T14009] hsr_slave_0: left promiscuous mode [ 251.667865][T14032] pim6reg1: entered promiscuous mode [ 251.673409][T14032] pim6reg1: entered allmulticast mode [ 251.756010][ T5875] Bluetooth: hci1: command tx timeout [ 252.070800][T14056] nbd: must specify at least one socket [ 252.299802][T14070] __nla_validate_parse: 9 callbacks suppressed [ 252.299822][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 252.350899][T14077] 8021q: VLANs not supported on lo [ 252.393080][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2335'. [ 253.049662][T14126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.059053][T14129] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2351'. [ 253.078878][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2351'. [ 253.103441][T14129] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2351'. [ 253.329282][T14141] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2355'. [ 253.339350][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 253.469588][T14150] openvswitch: netlink: Message has 4 unknown bytes. [ 253.491868][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2357'. [ 253.516299][T14150] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2358'. [ 253.675939][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 253.895200][T14187] xt_limit: Overflow, try lower: 604147548/4200216962 [ 254.031462][T14193] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 254.256669][T14205] veth7: entered allmulticast mode [ 254.264706][T14208] IPVS: Error joining to the multicast group [ 254.374823][T14215] validate_nla: 11 callbacks suppressed [ 254.374842][T14215] netlink: 'syz.3.2382': attribute type 2 has an invalid length. [ 254.413194][T14217] netlink: 'syz.2.2383': attribute type 10 has an invalid length. [ 254.431944][T14217] team0: Port device dummy0 added [ 254.443359][T14217] netlink: 'syz.2.2383': attribute type 10 has an invalid length. [ 254.463808][T14217] team0: Port device dummy0 removed [ 254.480702][T14217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 254.493269][T14220] netlink: 'syz.1.2384': attribute type 2 has an invalid length. [ 255.660434][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.012671][T14231] __nla_validate_parse: 3 callbacks suppressed [ 274.012689][T14231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2386'. [ 274.182396][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'. [ 274.241495][T14246] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2393'. [ 274.281290][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'. [ 274.295185][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2395'. [ 274.371826][T14258] block nbd4: Unsupported socket: shutdown callout must be supported. [ 274.422476][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'. [ 274.541587][T14265] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 274.565215][T14267] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2400'. [ 275.401504][T14301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2412'. [ 275.436771][T14301] netlink: 'syz.2.2412': attribute type 29 has an invalid length. [ 275.451188][T14301] netlink: 'syz.2.2412': attribute type 29 has an invalid length. [ 275.477206][T14304] openvswitch: netlink: Multiple metadata blocks provided [ 275.887799][T14321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2420'. [ 275.912976][T14322] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2419'. [ 276.084225][T14333] ip6erspan0: entered promiscuous mode [ 276.092930][T14333] ip6erspan0: entered allmulticast mode [ 276.115122][T14338] syzkaller1: entered promiscuous mode [ 276.149428][T14338] syzkaller1: entered allmulticast mode [ 276.166024][T14342] netlink: 'syz.2.2424': attribute type 10 has an invalid length. [ 276.430402][T14358] veth0: entered promiscuous mode [ 276.501315][T14357] veth0: left promiscuous mode [ 276.603353][T14376] netlink: 'syz.0.2436': attribute type 2 has an invalid length. [ 276.612492][T14376] nbd: must specify a device to reconfigure [ 276.740614][T14382] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 276.904808][T14388] syzkaller0: entered promiscuous mode [ 276.912837][T14388] syzkaller0: entered allmulticast mode [ 279.214662][T14465] tipc: Enabled bearer , priority 0 [ 279.225256][T14478] netlink: 'syz.0.2465': attribute type 14 has an invalid length. [ 279.260782][T14465] syzkaller0: entered promiscuous mode [ 279.267564][T14465] syzkaller0: entered allmulticast mode [ 279.303676][T14465] tipc: Resetting bearer [ 279.320093][T14464] tipc: Resetting bearer [ 279.351926][T14464] tipc: Disabling bearer [ 279.368782][T14483] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 279.377453][T14483] __nla_validate_parse: 11 callbacks suppressed [ 279.377470][T14483] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2468'. [ 279.407056][T14482] syzkaller0: entered promiscuous mode [ 279.412564][T14482] syzkaller0: entered allmulticast mode [ 279.522759][T14487] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.638019][T14499] netlink: 'syz.3.2472': attribute type 4 has an invalid length. [ 279.646753][T14502] netlink: 'syz.3.2472': attribute type 4 has an invalid length. [ 279.952352][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2478'. [ 279.974718][T14527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2476'. [ 280.060034][T14527] lo speed is unknown, defaulting to 1000 [ 280.177147][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 280.193762][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 280.333748][T14542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2482'. [ 280.530904][T14553] netlink: 'syz.0.2488': attribute type 11 has an invalid length. [ 280.573839][T14553] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2488'. [ 280.642850][T14527] vxcan1 speed is unknown, defaulting to 1000 [ 280.783112][T14569] netlink: 'syz.2.2490': attribute type 4 has an invalid length. [ 280.789548][T14566] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2489'. [ 280.992238][T14565] lo speed is unknown, defaulting to 1000 [ 281.302744][T14527] hsr0 speed is unknown, defaulting to 1000 [ 281.338287][T14590] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2494'. [ 281.387591][T14590] netlink: 'syz.2.2494': attribute type 10 has an invalid length. [ 281.412499][T14590] batman_adv: batadv0: Removing interface: wlan1 [ 281.421204][T14590] bond0: (slave wlan1): Opening slave failed [ 281.490529][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 281.544642][T14565] vxcan1 speed is unknown, defaulting to 1000 [ 282.002773][T14615] netlink: 'syz.3.2499': attribute type 3 has an invalid length. [ 282.298594][T14565] hsr0 speed is unknown, defaulting to 1000 [ 282.625443][T14644] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 282.731817][T14644] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 282.954135][T14659] netlink: 'syz.1.2511': attribute type 15 has an invalid length. [ 283.637979][T14697] netlink: 'syz.1.2522': attribute type 4 has an invalid length. [ 284.050562][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 284.431082][T14742] __nla_validate_parse: 13 callbacks suppressed [ 284.431100][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2537'. [ 284.578761][T14752] netlink: 'syz.2.2541': attribute type 6 has an invalid length. [ 284.980295][T14765] tipc: Enabled bearer , priority 0 [ 285.015114][T14765] tipc: Resetting bearer [ 285.039771][T14762] lo speed is unknown, defaulting to 1000 [ 285.053533][T14764] tipc: Disabling bearer [ 285.074316][T14770] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2547'. [ 285.107340][T14772] netlink: 'syz.2.2548': attribute type 4 has an invalid length. [ 285.126720][T14773] netlink: 'syz.2.2548': attribute type 4 has an invalid length. [ 285.228155][T14778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.327018][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 285.358589][T14783] vlan0: entered allmulticast mode [ 285.364598][T14783] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 285.366537][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 285.386184][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 285.500664][T14762] vxcan1 speed is unknown, defaulting to 1000 [ 285.631037][T14798] openvswitch: netlink: IPv4 tun info is not correct [ 285.672483][T14801] openvswitch: netlink: IPv4 tun info is not correct [ 285.822361][T14762] hsr0 speed is unknown, defaulting to 1000 [ 285.893333][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2560'. [ 285.916670][T14808] xfrm0: entered promiscuous mode [ 286.048936][T14816] tipc: Enabled bearer , priority 0 [ 286.109081][T14816] syzkaller0: entered promiscuous mode [ 286.114591][T14816] syzkaller0: entered allmulticast mode [ 286.228090][T14819] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2565'. [ 286.237698][T14816] tipc: Resetting bearer [ 286.312322][T14819] team0: Device vti1 is of different type [ 286.409558][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 286.418883][T14813] tipc: Resetting bearer [ 286.461656][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2568'. [ 286.488069][T14813] tipc: Disabling bearer [ 286.731941][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 287.007389][T14863] netem: incorrect gi model size [ 287.563634][T14901] veth0: entered allmulticast mode [ 287.594208][T14905] syz0: rxe_newlink: already configured on lo [ 287.683097][T14909] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.733987][T14915] netlink: 'syz.2.2594': attribute type 23 has an invalid length. [ 288.021480][T14934] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 288.061149][T14941] bridge_slave_0: invalid flags given to default FDB implementation [ 288.258880][T14956] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 288.301962][T14956] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 288.568013][T14980] netlink: 'syz.2.2613': attribute type 1 has an invalid length. [ 289.010199][T15018] tunl0: entered promiscuous mode [ 289.024866][T15018] netlink: 'syz.3.2626': attribute type 3 has an invalid length. [ 289.082242][T15022] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 289.091229][T15023] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 289.105702][T15023] team0: Port device dummy0 removed [ 289.124586][T15023] dummy0: entered allmulticast mode [ 289.136194][T15023] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 289.283810][T15033] openvswitch: netlink: Message has 75 unknown bytes. [ 289.706338][T15072] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 289.742694][T15079] tipc: Enabling of bearer rejected, failed to enable media [ 289.767827][T15076] lo speed is unknown, defaulting to 1000 [ 289.984070][T15092] lo: entered allmulticast mode [ 289.995474][T15076] vxcan1 speed is unknown, defaulting to 1000 [ 290.147169][T15097] pim6reg1: entered promiscuous mode [ 290.152506][T15097] pim6reg1: entered allmulticast mode [ 290.358644][T15108] __nla_validate_parse: 18 callbacks suppressed [ 290.358664][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'. [ 290.389408][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2648'. [ 290.420943][T15108] netlink: 'syz.2.2648': attribute type 15 has an invalid length. [ 290.449791][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2649'. [ 290.502658][T15076] hsr0 speed is unknown, defaulting to 1000 [ 290.707294][T15129] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 290.769907][T15122] pim6reg1: entered promiscuous mode [ 290.775239][T15122] pim6reg1: entered allmulticast mode [ 290.827058][T15129] lo speed is unknown, defaulting to 1000 [ 291.328985][T15129] vxcan1 speed is unknown, defaulting to 1000 [ 291.507660][T15129] hsr0 speed is unknown, defaulting to 1000 [ 309.341318][T15139] netlink: 152064 bytes leftover after parsing attributes in process `syz.0.2655'. [ 309.368041][T15145] sctp: [Deprecated]: syz.4.2659 (pid 15145) Use of int in max_burst socket option deprecated. [ 309.368041][T15145] Use struct sctp_assoc_value instead [ 309.393922][T15139] netlink: zone id is out of range [ 309.417251][T15139] netlink: zone id is out of range [ 309.430960][T15139] netlink: zone id is out of range [ 309.445450][T15139] netlink: zone id is out of range [ 309.464888][T15139] netlink: zone id is out of range [ 309.482118][ T12] tipc: Subscription rejected, illegal request [ 309.488104][T15139] netlink: zone id is out of range [ 309.490611][T15156] siw: device registration error -23 [ 309.493643][T15139] netlink: zone id is out of range [ 309.504553][T15139] netlink: zone id is out of range [ 309.510257][T15139] netlink: zone id is out of range [ 309.537531][T15139] netlink: zone id is out of range [ 309.585029][T15157] lo speed is unknown, defaulting to 1000 [ 309.643140][T15161] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 309.803652][T15173] netlink: 'syz.2.2666': attribute type 10 has an invalid length. [ 309.817345][T15173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2666'. [ 309.849969][T15173] team0: Port device geneve0 added [ 310.044902][T15157] vxcan1 speed is unknown, defaulting to 1000 [ 310.366133][T15157] hsr0 speed is unknown, defaulting to 1000 [ 310.371466][T15195] netlink: 'syz.0.2672': attribute type 142 has an invalid length. [ 310.607825][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 310.623669][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 310.799187][T15225] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2678'. [ 311.170510][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2686'. [ 311.384911][T15260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2690'. [ 311.461270][T15260] bond9: (slave veth11): Enslaving as an active interface with an up link [ 311.481328][T15260] netlink: 'syz.2.2690': attribute type 21 has an invalid length. [ 311.582825][T15267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2693'. [ 311.592825][T15267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2693'. [ 311.762815][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2698'. [ 311.801919][T15282] tipc: Enabling of bearer rejected, failed to enable media [ 312.211685][T15318] pim6reg1: entered promiscuous mode [ 312.225684][T15318] pim6reg1: entered allmulticast mode [ 312.568676][T15341] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 312.728906][T15355] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 313.235435][T15377] netlink: 'syz.2.2727': attribute type 4 has an invalid length. [ 313.430025][T15393] netlink: 'syz.3.2729': attribute type 12 has an invalid length. [ 313.465048][T15393] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 313.753825][T15411] tipc: Enabling of bearer rejected, already enabled [ 313.794572][T15415] netlink: 'syz.3.2734': attribute type 4 has an invalid length. [ 314.118774][T15434] syzkaller1: entered promiscuous mode [ 314.124680][T15434] syzkaller1: entered allmulticast mode [ 314.172922][T15434] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 314.386763][T15458] netlink: 'syz.2.2750': attribute type 83 has an invalid length. [ 314.425135][T15462] __nla_validate_parse: 14 callbacks suppressed [ 314.425153][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 314.480739][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2747'. [ 314.723803][T15486] net_ratelimit: 219 callbacks suppressed [ 314.723820][T15486] openvswitch: netlink: Key type 193 is out of range max 32 [ 314.820462][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 314.834913][T15481] netlink: 696 bytes leftover after parsing attributes in process `syz.2.2757'. [ 314.961060][T15500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2762'. [ 314.981424][T15500] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2762'. [ 314.991087][T15500] netlink: 'syz.4.2762': attribute type 6 has an invalid length. [ 315.022055][T15500] netlink: 'syz.4.2762': attribute type 5 has an invalid length. [ 315.055210][T15500] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2762'. [ 315.073839][T15500] netlink: 'syz.4.2762': attribute type 1 has an invalid length. [ 315.084279][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 315.110053][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 315.278872][T15528] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 315.460026][T15539] dvmrp1: left allmulticast mode [ 315.486667][T15539] lo: left allmulticast mode [ 315.578950][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 315.633030][T15547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.790640][T15564] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 315.798680][T15564] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 315.862744][T15569] sit1: entered promiscuous mode [ 315.868244][T15569] sit1: entered allmulticast mode [ 315.937378][T15575] netlink: 'syz.0.2781': attribute type 10 has an invalid length. [ 315.984492][T15575] bond0: (slave dummy0): Releasing backup interface [ 316.007866][T15579] netlink: 'syz.0.2781': attribute type 10 has an invalid length. [ 316.018601][T15577] openvswitch: netlink: Duplicate or invalid key (type 0). [ 316.027329][T15577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.041124][T15575] team0: Port device dummy0 added [ 316.061427][T15579] team0: Port device dummy0 removed [ 316.071247][T15579] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 316.241226][T15599] netlink: 'syz.3.2789': attribute type 12 has an invalid length. [ 316.853916][T15635] gtp0: entered promiscuous mode [ 316.859921][T15635] gtp0: entered allmulticast mode [ 317.102683][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204286][T15661] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 318.047015][T15731] netlink: 'syz.3.2829': attribute type 11 has an invalid length. [ 318.054875][T15731] netlink: 'syz.3.2829': attribute type 11 has an invalid length. [ 318.066741][T15731] netlink: 'syz.3.2829': attribute type 10 has an invalid length. [ 318.074681][T15731] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 318.301506][T15747] netlink: 'syz.2.2836': attribute type 12 has an invalid length. [ 318.315457][T15747] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 318.351744][T15754] netlink: 'syz.3.2837': attribute type 7 has an invalid length. [ 319.652984][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.663012][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.671321][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.684518][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.692939][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.880278][T15810] lo speed is unknown, defaulting to 1000 [ 319.934396][T15829] __nla_validate_parse: 20 callbacks suppressed [ 319.934413][T15829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2863'. [ 320.209588][T10358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.238368][T10358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.252529][T10358] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.281955][T15810] vxcan1 speed is unknown, defaulting to 1000 [ 320.376704][T15858] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2870'. [ 320.404924][T15859] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2871'. [ 320.421470][T10358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.445986][T10358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.475653][T10358] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.597396][T10358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.609939][T10358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.620513][T10358] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.642173][T15810] hsr0 speed is unknown, defaulting to 1000 [ 320.709482][T10358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.724835][T10358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.737439][T10358] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 320.954271][T10358] bridge_slave_0: left allmulticast mode [ 320.965766][T10358] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.568546][T10358] erspan0 (unregistering): left promiscuous mode [ 321.596996][T10358] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 321.708131][T10358] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 321.741357][ T5865] Bluetooth: hci5: command tx timeout [ 322.178455][T10358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.190273][T10358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.201249][T10358] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 322.214679][T10358] bond0 (unregistering): Released all slaves [ 322.234831][T10358] bond1 (unregistering): Released all slaves [ 322.249876][T10358] bond2 (unregistering): Released all slaves [ 322.265775][T10358] bond3 (unregistering): Released all slaves [ 322.280233][T10358] bond4 (unregistering): Released all slaves [ 322.293752][T10358] bond5 (unregistering): Released all slaves [ 322.311501][T10358] bond6 (unregistering): Released all slaves [ 322.381748][T15810] chnl_net:caif_netlink_parms(): no params data found [ 322.524671][T10358] : left promiscuous mode [ 322.532634][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2885'. [ 322.630498][T15915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2886'. [ 322.658292][T10358] tipc: Disabling bearer [ 322.668617][T10358] tipc: Left network mode [ 322.669405][T15915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.734820][T15919] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 322.742681][T15919] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 322.883447][T15810] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.896523][T15810] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.906388][T15810] bridge_slave_0: entered allmulticast mode [ 322.924364][T15810] bridge_slave_0: entered promiscuous mode [ 322.957935][T15810] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.995821][T15810] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.005563][T15810] bridge_slave_1: entered allmulticast mode [ 323.018128][T15810] bridge_slave_1: entered promiscuous mode [ 323.217499][T15810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.234188][T15810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.352051][T15810] team0: Port device team_slave_0 added [ 323.407813][T15810] team0: Port device team_slave_1 added [ 323.454976][T15946] IPVS: set_ctl: invalid protocol: 44 172.30.0.4:20003 [ 323.624981][T15810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.644648][T15810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.692917][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 323.713112][T15810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.745279][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2898'. [ 323.780719][T15810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.789705][T15810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.817081][ T5865] Bluetooth: hci5: command tx timeout [ 323.854807][T15810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.048280][T15973] netlink: 'syz.3.2903': attribute type 2 has an invalid length. [ 324.060484][T15973] netlink: 'syz.3.2903': attribute type 8 has an invalid length. [ 324.079653][T15973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2903'. [ 324.137590][T15810] hsr_slave_0: entered promiscuous mode [ 324.146960][T15810] hsr_slave_1: entered promiscuous mode [ 324.201691][T15810] debugfs: 'hsr0' already exists in 'hsr' [ 324.211351][T15810] Cannot create hsr debugfs directory [ 324.279892][T15981] netlink: 'syz.1.2907': attribute type 1 has an invalid length. [ 324.301136][T15984] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.314073][T15981] netlink: 'syz.1.2907': attribute type 11 has an invalid length. [ 324.320315][T10358] veth1_macvtap: left promiscuous mode [ 324.324506][T15981] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2907'. [ 324.334522][T10358] veth0_macvtap: left promiscuous mode [ 324.510348][T10358] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 324.522271][T10358] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 324.531804][T10358] CPU: 1 UID: 0 PID: 10358 Comm: kworker/u8:11 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 324.544109][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.554322][T10358] Workqueue: netns cleanup_net [ 324.559099][T10358] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 324.564721][T10358] Code: ff ff ff e8 9d 2c 41 01 89 c5 31 ff 89 c6 e8 72 81 87 f7 85 ed 74 40 e8 29 7d 87 f7 eb 05 e8 22 7d 87 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 5c e6 ea f7 4d 8b 27 49 8d 7f 30 [ 324.584310][T10358] RSP: 0018:ffffc90003747390 EFLAGS: 00010206 [ 324.590363][T10358] RAX: 000000001fffe000 RBX: ffff88807d8c8538 RCX: ffff88802687bc00 [ 324.598319][T10358] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 324.606278][T10358] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 324.614233][T10358] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888076ac8428 [ 324.622188][T10358] R13: dffffc0000000000 R14: ffff888076ac8400 R15: 00000000ffff0000 [ 324.630147][T10358] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 324.639068][T10358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.645633][T10358] CR2: 000055557e6ee808 CR3: 0000000077d26000 CR4: 00000000003526f0 [ 324.653592][T10358] Call Trace: [ 324.656873][T10358] [ 324.659788][T10358] ? ipv6_mc_down+0x2a3/0x360 [ 324.664451][T10358] ipv6_mc_destroy_dev+0x45/0x5a0 [ 324.669459][T10358] ? addrconf_ifdown+0x1396/0x1880 [ 324.674553][T10358] addrconf_ifdown+0x139e/0x1880 [ 324.679478][T10358] ? tls_dev_event+0x717/0xec0 [ 324.684226][T10358] ? __pfx_addrconf_ifdown+0x10/0x10 [ 324.689494][T10358] addrconf_notify+0x1bc/0x1010 [ 324.694330][T10358] notifier_call_chain+0x1b6/0x3e0 [ 324.699425][T10358] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 324.705827][T10358] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 324.712612][T10358] ? unregister_netdevice_queue+0x1b3/0x380 [ 324.718505][T10358] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 324.724738][T10358] ? __pfx_vxcan_dellink+0x10/0x10 [ 324.729844][T10358] default_device_exit_batch+0x819/0x890 [ 324.735475][T10358] ? __pfx___might_resched+0x10/0x10 [ 324.740748][T10358] ? __pfx_default_device_exit_batch+0x10/0x10 [ 324.746893][T10358] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 324.752370][T10358] ? net_generic+0x1e/0x240 [ 324.756863][T10358] ? __pfx_default_device_exit_batch+0x10/0x10 [ 324.763091][T10358] ops_undo_list+0x525/0x990 [ 324.769067][T10358] ? __pfx_ops_undo_list+0x10/0x10 [ 324.774187][T10358] ? do_raw_spin_unlock+0x122/0x240 [ 324.779378][T10358] cleanup_net+0x4c5/0x800 [ 324.783785][T10358] ? __pfx_cleanup_net+0x10/0x10 [ 324.788707][T10358] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.793890][T10358] ? process_scheduled_works+0x9ef/0x17b0 [ 324.799591][T10358] ? process_scheduled_works+0x9ef/0x17b0 [ 324.805294][T10358] process_scheduled_works+0xade/0x17b0 [ 324.810830][T10358] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.816794][T10358] worker_thread+0x8a0/0xda0 [ 324.821381][T10358] kthread+0x70e/0x8a0 [ 324.825437][T10358] ? __pfx_worker_thread+0x10/0x10 [ 324.830530][T10358] ? __pfx_kthread+0x10/0x10 [ 324.835105][T10358] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.840288][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.845474][T10358] ? __pfx_kthread+0x10/0x10 [ 324.850043][T10358] ret_from_fork+0x3f9/0x770 [ 324.854615][T10358] ? __pfx_ret_from_fork+0x10/0x10 [ 324.859713][T10358] ? __switch_to_asm+0x39/0x70 [ 324.864463][T10358] ? __switch_to_asm+0x33/0x70 [ 324.869207][T10358] ? __pfx_kthread+0x10/0x10 [ 324.873782][T10358] ret_from_fork_asm+0x1a/0x30 [ 324.878549][T10358] [ 324.881546][T10358] Modules linked in: [ 324.887601][T10358] ---[ end trace 0000000000000000 ]--- [ 324.895133][T10358] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 324.907200][T10358] Code: ff ff ff e8 9d 2c 41 01 89 c5 31 ff 89 c6 e8 72 81 87 f7 85 ed 74 40 e8 29 7d 87 f7 eb 05 e8 22 7d 87 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 5c e6 ea f7 4d 8b 27 49 8d 7f 30 [ 324.928069][T10358] RSP: 0018:ffffc90003747390 EFLAGS: 00010206 [ 324.934348][T10358] RAX: 000000001fffe000 RBX: ffff88807d8c8538 RCX: ffff88802687bc00 [ 324.942573][T10358] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 324.950673][T10358] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 324.958899][T10358] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888076ac8428 [ 324.967052][T10358] R13: dffffc0000000000 R14: ffff888076ac8400 R15: 00000000ffff0000 [ 324.975151][T10358] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 324.984474][T10358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.991646][T10358] CR2: 00007f9ea8c58f98 CR3: 0000000021f54000 CR4: 00000000003526f0 [ 325.000170][T10358] Kernel panic - not syncing: Fatal exception [ 325.006523][T10358] Kernel Offset: disabled [ 325.010849][T10358] Rebooting in 86400 seconds..