last executing test programs: 1.842473547s ago: executing program 1 (id=2835): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0, 0x1443}], 0x1, 0x0, 0x0, 0x0) 1.73737313s ago: executing program 3 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) 1.632415991s ago: executing program 3 (id=2840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x4c}, 0x2, 0x34005}, 0x4000000) 1.450344396s ago: executing program 3 (id=2843): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 1.421623994s ago: executing program 4 (id=2845): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 1.34676916s ago: executing program 3 (id=2846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.301510056s ago: executing program 4 (id=2848): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast}, {0x14, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.223413956s ago: executing program 3 (id=2849): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) 1.15344923s ago: executing program 4 (id=2850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001100)={0x50, r1, 0x101, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}]}, 0x50}}, 0x4800) 1.054451071s ago: executing program 4 (id=2853): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, 0x3}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)="998145f3ecf6572de9801bcd73ebc2a5af8f2b8fe208845a90c604847f50a046d746ee8cbd40a64934b06fd136ecbfceca17dff1e0c2b57d20b73517a614bcc10acfbdb6c888623c6b73be561d3a65cacacde70b74f9dbf97b98d7d5be341d6b1599781a3fa956152aec428cb6b00a4b1699565535a7ee3d8fc9c2238e6966eb0db7034108cfc6b5822936e3fffeb95382bf8cb9f5b71fda", 0x98}, {0x0}, {&(0x7f0000000540)}, {0x0}, {0x0}], 0x5}, 0x10) 974.465033ms ago: executing program 0 (id=2855): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x8918, &(0x7f0000000380)={0xe0ff, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3}) 961.545737ms ago: executing program 4 (id=2856): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000280)='4', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4040814) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0xcf, 0x2, 0x68, 0x7f, 0x5, 0x5, 0x2, 0xfd, 0x67, 0x1, 0x3, 0x7, 0x4}, 0xe) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 929.92788ms ago: executing program 2 (id=2857): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r0, 0x1}, 0x14}}, 0x0) 862.48702ms ago: executing program 1 (id=2858): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="90ffe4fff40001042bbd700000000002", @ANYBLOB="226101000000000068001280"], 0x90}, 0x1, 0x0, 0x0, 0x24004040}, 0x20000000) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 837.501708ms ago: executing program 0 (id=2859): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 796.930495ms ago: executing program 1 (id=2860): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 742.818669ms ago: executing program 2 (id=2861): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 713.694438ms ago: executing program 0 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 687.159958ms ago: executing program 1 (id=2863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) 582.64112ms ago: executing program 2 (id=2864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, 0x0, 0x9f) 559.510201ms ago: executing program 1 (id=2865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 491.800097ms ago: executing program 0 (id=2866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000000)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0) 430.729342ms ago: executing program 1 (id=2867): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 430.175304ms ago: executing program 2 (id=2868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8000001, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c820}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 346.794093ms ago: executing program 0 (id=2869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe800000000000000038b3af00", @ANYRES32=0x41424344], 0x0) 259.417238ms ago: executing program 3 (id=2870): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff00a}]}, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="fffffaff4cfce911406bfbc851c5808d9db098a90a9d866e57778ff7a6aa6e13237a1812bef048445ff3287a060cd55c0b039565dc1d39a6bba485dde67f2cfce5347ac55bd471d94b3ed20e663c36ad", 0x50, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000c6000000c6000000070000000000000000000009040000000d0000000000000b04000000100000000000000e03000000000000000b00000000000008050000000f00000000000009050000000d0000000000000b03000000060000000000000c040000000f0000000000000802000000010000000700000f0200000002000000090000000800000005000000000000000f000000050000000645000006000000050000000f00000007000000010000005600000008000000010000000000008007004000030000000600000024000000b16f0000002e61305f3000"], &(0x7f00000000c0)=""/35, 0xe7, 0x23, 0x0, 0x5}, 0x28) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000040)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x6, r10, 0x1, 0x7, 0x6, @link_local}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 162.460732ms ago: executing program 2 (id=2871): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x3e, &(0x7f00000002c0)=[{&(0x7f0000000880)={0x34, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x34}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x3e, &(0x7f00000002c0)=[{&(0x7f0000000880)={0x34, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}]}, 0x34}], 0x1}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) 161.947035ms ago: executing program 0 (id=2872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001200)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) socket$inet6(0xa, 0x4, 0x800) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, &(0x7f0000002180)) socket(0x15, 0x4, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x400) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) 10.599604ms ago: executing program 2 (id=2873): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1b, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x6f}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @alu={0x7, 0x0, 0xa, 0x4, 0x5, 0x80, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x6}, @generic={0xff, 0x3, 0xc, 0x101, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) 0s ago: executing program 4 (id=2874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x284, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xef, 0x6, "a0f92f00dd78fca0d907cd64700d45ff6b657f7620410e8d0b2149e7072e2b2bec9c4f72bba3cbebc56e0d8a1a84f939018a4a1ad5026f2ae5940a52a50a9de45fb68e01e761f3c88e14dbb99af8248242b2e9080924ae6d1ec8eb6e31ddc0d3cef7a0fa33d291b5c3431dbe0f3a7f5579b153da72f51973373e4f278afab9f8ef8e0667d1b22db54145b9a046c06fe8cefd24465c41196d6cc67f10dad455f276334906f8edbd73fcdf4d8cd6ae38c7e7d661adfe9daf84c11028104ee9b5a2b1c2789a935cc5bd72103da66ee824b385a5be15a6c549384611f3c805985f15b2a07a6e4a89fb952a2352"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "35aee035ff4adc728a76f123cc60553f9946b78890e189f4a9cf231ab509277f85e3096b95c3326d5cf9733170e9ee4c99adccdadf9849f0d7d972e9ab8af9e74fb1a1037e58d20f648f"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "c5b0975422060311227d4ee9699189d79b21b5ca07997eb83f251d2624a12366c39b81ba5c20c44829554e30a9a45b3eac9462da1cc88b4b03d6df0d9c6e8e8841cb05332798fa8546ff8414e7a0cd1a2cfabf69cdb7893cce2033610ac82ed56dcf20cf7562dee85d880be26cfa0187ec623ad9f17632e9c67748994a6a08e93e18f8f9c03325cda242f201f96d8f0955f2e22466a0f09de6ebeec18cc5901c443f445b217378b273f09602cb8ae831bbaabfe6733fc55537fe199a344f44d318fae7181f5f111479522d376b8a6b9320db8c26f69dbbdc"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x258, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DESC={0x1a4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f5b7dae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7edc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x808}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}], {0x14, 0x10}}, 0x524}}, 0x1) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100)) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x284, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xef, 0x6, "a0f92f00dd78fca0d907cd64700d45ff6b657f7620410e8d0b2149e7072e2b2bec9c4f72bba3cbebc56e0d8a1a84f939018a4a1ad5026f2ae5940a52a50a9de45fb68e01e761f3c88e14dbb99af8248242b2e9080924ae6d1ec8eb6e31ddc0d3cef7a0fa33d291b5c3431dbe0f3a7f5579b153da72f51973373e4f278afab9f8ef8e0667d1b22db54145b9a046c06fe8cefd24465c41196d6cc67f10dad455f276334906f8edbd73fcdf4d8cd6ae38c7e7d661adfe9daf84c11028104ee9b5a2b1c2789a935cc5bd72103da66ee824b385a5be15a6c549384611f3c805985f15b2a07a6e4a89fb952a2352"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "35aee035ff4adc728a76f123cc60553f9946b78890e189f4a9cf231ab509277f85e3096b95c3326d5cf9733170e9ee4c99adccdadf9849f0d7d972e9ab8af9e74fb1a1037e58d20f648f"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xdc, 0x6, "c5b0975422060311227d4ee9699189d79b21b5ca07997eb83f251d2624a12366c39b81ba5c20c44829554e30a9a45b3eac9462da1cc88b4b03d6df0d9c6e8e8841cb05332798fa8546ff8414e7a0cd1a2cfabf69cdb7893cce2033610ac82ed56dcf20cf7562dee85d880be26cfa0187ec623ad9f17632e9c67748994a6a08e93e18f8f9c03325cda242f201f96d8f0955f2e22466a0f09de6ebeec18cc5901c443f445b217378b273f09602cb8ae831bbaabfe6733fc55537fe199a344f44d318fae7181f5f111479522d376b8a6b9320db8c26f69dbbdc"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x258, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DESC={0x1a4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x78, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f5b7dae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7edc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x808}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x88, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}], {0x14, 0x10}}, 0x524}}, 0x1) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) kernel console output (not intermixed with test programs): ueue [ 121.107304][ T6588] gretap1: entered promiscuous mode [ 121.128931][ T6588] gretap1: entered allmulticast mode [ 121.212541][ T6598] ieee802154 phy1 wpan1: encryption failed: -22 [ 121.297585][ T6605] netlink: 'syz.4.179': attribute type 24 has an invalid length. [ 121.318210][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'. [ 121.322451][ T6605] Bluetooth: MGMT ver 1.23 [ 121.410219][ T6607] geneve2: entered promiscuous mode [ 121.416444][ T6607] geneve2: entered allmulticast mode [ 121.424267][ T6609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.434710][ T6610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.446833][ T6613] netlink: 'syz.4.183': attribute type 8 has an invalid length. [ 121.447616][ T6604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.180'. [ 121.721757][ T6619] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 121.722421][ T6622] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 121.858336][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 122.152444][ T6638] vlan2: entered promiscuous mode [ 122.157776][ T6638] bridge0: entered promiscuous mode [ 122.612076][ T6659] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 122.875353][ T6676] netlink: 44 bytes leftover after parsing attributes in process `syz.0.204'. [ 122.920966][ T6676] netlink: 43 bytes leftover after parsing attributes in process `syz.0.204'. [ 122.954472][ T6676] netlink: 'syz.0.204': attribute type 6 has an invalid length. [ 122.988689][ T6682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 123.008201][ T6678] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.205'. [ 123.010519][ T6676] netlink: 'syz.0.204': attribute type 5 has an invalid length. [ 123.048088][ T6676] netlink: 43 bytes leftover after parsing attributes in process `syz.0.204'. [ 123.257554][ T6693] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 123.331211][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 125.193066][ T6737] tunl0: entered promiscuous mode [ 125.227139][ T6737] netlink: 'syz.1.220': attribute type 3 has an invalid length. [ 125.299455][ T6742] IPv6: sit1: Disabled Multicast RS [ 125.337142][ T6742] sit1: entered allmulticast mode [ 125.995187][ T6786] __nla_validate_parse: 4 callbacks suppressed [ 125.995207][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 126.206499][ T6786] hsr_slave_1 (unregistering): left promiscuous mode [ 126.461317][ T6818] netlink: 104 bytes leftover after parsing attributes in process `syz.1.241'. [ 126.486953][ T6819] netlink: 104 bytes leftover after parsing attributes in process `syz.1.241'. [ 127.298484][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 127.386334][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 127.421602][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.467773][ T6854] bridge_slave_1 (unregistering): left allmulticast mode [ 127.476222][ T6854] bridge_slave_1 (unregistering): left promiscuous mode [ 127.488689][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.538511][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 127.677396][ T6879] netlink: 'syz.2.260': attribute type 2 has an invalid length. [ 127.850016][ T6885] veth1: entered allmulticast mode [ 127.986708][ T6898] netlink: 76 bytes leftover after parsing attributes in process `syz.4.264'. [ 128.291024][ T6912] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.271'. [ 128.306435][ T6912] netlink: zone id is out of range [ 128.314032][ T6912] netlink: zone id is out of range [ 128.319413][ T6912] netlink: zone id is out of range [ 128.326045][ T6912] netlink: zone id is out of range [ 128.331524][ T6912] netlink: zone id is out of range [ 128.337775][ T6912] netlink: zone id is out of range [ 128.345009][ T6912] netlink: zone id is out of range [ 128.351230][ T6912] netlink: zone id is out of range [ 128.356693][ T6915] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 128.359969][ T6912] netlink: zone id is out of range [ 128.375073][ T6912] netlink: zone id is out of range [ 128.402616][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 128.766470][ T6933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.807852][ T6937] syzkaller1: entered promiscuous mode [ 128.818424][ T6937] syzkaller1: entered allmulticast mode [ 128.886584][ T6933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.048468][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 129.124998][ T6933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.212636][ T6957] netlink: 'syz.3.287': attribute type 3 has an invalid length. [ 129.307588][ T6933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.479432][ T6964] tipc: Started in network mode [ 129.484845][ T6964] tipc: Node identity 3e63ec9acc3d, cluster identity 4711 [ 129.500912][ T6964] tipc: Enabled bearer , priority 0 [ 129.515618][ T6968] syzkaller0: entered promiscuous mode [ 129.540688][ T6968] syzkaller0: entered allmulticast mode [ 129.617668][ T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.684649][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.741075][ T6963] tipc: Resetting bearer [ 129.809837][ T6963] tipc: Disabling bearer [ 129.837720][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.920375][ T6987] team0: Device gtp0 is of different type [ 129.977867][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.029602][ T6985] gretap1: entered promiscuous mode [ 130.245761][ T7004] tipc: Started in network mode [ 130.260620][ T7004] tipc: Node identity 6a332f64ff82, cluster identity 4711 [ 130.277073][ T7004] tipc: Enabled bearer , priority 0 [ 130.393973][ T7004] tipc: Disabling bearer [ 130.483049][ T7011] pim6reg1: entered promiscuous mode [ 130.492455][ T7011] pim6reg1: entered allmulticast mode [ 130.607255][ T7017] team0: No ports can be present during mode change [ 130.615435][ T7017] netlink: 'syz.0.308': attribute type 6 has an invalid length. [ 130.629533][ T7017] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 130.741412][ T7017] bond3 (unregistering): Released all slaves [ 131.637539][ T7070] syzkaller0: entered promiscuous mode [ 131.661070][ T7070] syzkaller0: entered allmulticast mode [ 132.045429][ T7078] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 132.090920][ T7078] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 132.223648][ T7088] __nla_validate_parse: 7 callbacks suppressed [ 132.223669][ T7088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.324'. [ 133.032821][ T7115] netlink: 'syz.3.333': attribute type 2 has an invalid length. [ 133.245030][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 133.926067][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 135.108623][ T7147] netlink: 'syz.2.341': attribute type 4 has an invalid length. [ 135.537573][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 135.563891][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 135.798622][ T7179] tipc: Started in network mode [ 135.804906][ T7179] tipc: Node identity 06c2759487af, cluster identity 4711 [ 135.819782][ T7179] tipc: Enabled bearer , priority 0 [ 135.828644][ T7179] syzkaller0: entered promiscuous mode [ 135.840390][ T7179] syzkaller0: entered allmulticast mode [ 135.845741][ T7182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 135.900228][ T7179] tipc: Resetting bearer [ 135.923411][ T7177] tipc: Resetting bearer [ 135.960430][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 135.962218][ T7177] tipc: Disabling bearer [ 136.118052][ T7191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.355'. [ 136.242023][ T7197] sctp: [Deprecated]: syz.1.357 (pid 7197) Use of int in max_burst socket option. [ 136.242023][ T7197] Use struct sctp_assoc_value instead [ 136.345202][ T7205] netlink: 68 bytes leftover after parsing attributes in process `syz.1.357'. [ 136.375164][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 136.531674][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.600597][ T7215] netlink: 'syz.3.363': attribute type 178 has an invalid length. [ 136.857751][ T7230] delete_channel: no stack [ 136.993826][ T7240] net_ratelimit: 6 callbacks suppressed [ 136.993840][ T7240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.066466][ T7243] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 137.240676][ T7252] tipc: Enabled bearer , priority 0 [ 137.256564][ T7252] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 137.289180][ T7252] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 137.302753][ T7252] tipc: Resetting bearer [ 137.378522][ T7257] erspan0: entered promiscuous mode [ 137.408050][ T7265] __nla_validate_parse: 7 callbacks suppressed [ 137.408072][ T7265] netlink: 44 bytes leftover after parsing attributes in process `syz.4.375'. [ 137.430222][ T7264] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 137.490180][ T7265] netlink: 148 bytes leftover after parsing attributes in process `syz.4.375'. [ 137.942838][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'. [ 138.256453][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.282288][ T9] tipc: Node number set to 4066307226 [ 138.394384][ T7307] sctp: [Deprecated]: syz.2.390 (pid 7307) Use of int in maxseg socket option. [ 138.394384][ T7307] Use struct sctp_assoc_value instead [ 138.464655][ T7310] netlink: 4336 bytes leftover after parsing attributes in process `syz.4.391'. [ 138.493961][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 138.535761][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 138.590328][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 138.625784][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 139.163717][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 139.366879][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 139.371855][ T5159] Bluetooth: hci4: command tx timeout [ 139.496040][ T7369] netlink: 'syz.2.412': attribute type 5 has an invalid length. [ 139.522511][ T7368] trusted_key: syz.3.411 sent an empty control message without MSG_MORE. [ 139.561951][ T7369] geneve2: entered promiscuous mode [ 139.572149][ T7369] geneve2: entered allmulticast mode [ 139.587265][ T1092] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 139.631290][ T1092] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 139.666606][ T1092] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 139.704108][ T1092] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 140.292099][ T7419] netlink: 'syz.3.429': attribute type 33 has an invalid length. [ 140.791597][ T7444] netlink: 'syz.3.436': attribute type 11 has an invalid length. [ 140.799726][ T7444] netlink: 'syz.3.436': attribute type 11 has an invalid length. [ 140.908578][ T7452] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 141.102080][ T7452] bond1: entered promiscuous mode [ 141.128539][ T7452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.146369][ T7469] netlink: 'syz.3.444': attribute type 58 has an invalid length. [ 141.190157][ T7458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.198511][ T7458] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 141.214454][ T7458] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 141.231584][ T7458] bond1: (slave wireguard0): making interface the new active one [ 141.241241][ T7458] wireguard0: entered promiscuous mode [ 141.248522][ T7458] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 141.258122][ T7470] tipc: Enabling of bearer rejected, already enabled [ 142.678275][ T7555] __nla_validate_parse: 14 callbacks suppressed [ 142.678295][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 142.858501][ T7561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.466'. [ 142.879016][ T7561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.466'. [ 144.225363][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 144.296310][ T7629] team0: Device gtp0 is of different type [ 144.310061][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 144.528517][ T7646] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.488'. [ 144.604313][ T7650] netlink: 'syz.0.490': attribute type 11 has an invalid length. [ 144.618205][ T7650] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 144.642323][ T7650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.490'. [ 144.674820][ T7657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.488'. [ 144.931869][ T7671] netlink: 100 bytes leftover after parsing attributes in process `syz.3.493'. [ 145.019052][ T7680] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 145.186653][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 145.293870][ T7682] syzkaller1: entered promiscuous mode [ 145.307487][ T7682] syzkaller1: entered allmulticast mode [ 145.389938][ T7706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.397645][ T7706] IPv6: NLM_F_CREATE should be set when creating new route [ 145.405543][ T7706] IPv6: NLM_F_CREATE should be set when creating new route [ 145.424035][ T7706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.440296][ T7707] tipc: New replicast peer: 255.255.255.255 [ 145.448201][ T7707] tipc: Enabled bearer , priority 10 [ 145.550248][ T1111] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 146.401957][ T7729] syzkaller0: entered promiscuous mode [ 146.407520][ T7729] syzkaller0: entered allmulticast mode [ 146.453695][ T7731] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 146.507296][ T7739] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 146.570274][ T120] tipc: Node number set to 606605237 [ 146.869131][ T7742] syzkaller1: entered promiscuous mode [ 146.875281][ T7742] syzkaller1: entered allmulticast mode [ 147.182836][ T7777] netlink: 'syz.4.525': attribute type 2 has an invalid length. [ 147.183073][ T7772] netlink: 'syz.1.526': attribute type 21 has an invalid length. [ 147.200262][ T7778] vxcan2: entered promiscuous mode [ 147.360216][ T7788] Unsupported ieee802154 address type: 0 [ 147.823713][ T7798] __nla_validate_parse: 13 callbacks suppressed [ 147.823736][ T7798] netlink: 76 bytes leftover after parsing attributes in process `syz.1.532'. [ 147.848456][ T7798] sctp: [Deprecated]: syz.1.532 (pid 7798) Use of int in maxseg socket option. [ 147.848456][ T7798] Use struct sctp_assoc_value instead [ 147.976747][ T7800] IPVS: length: 24 != 67608 [ 149.050392][ T7795] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.058709][ T7795] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.090009][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 149.122092][ T7802] netlink: 50 bytes leftover after parsing attributes in process `syz.1.534'. [ 149.136165][ T7802] netlink: 50 bytes leftover after parsing attributes in process `syz.1.534'. [ 149.328420][ T7812] TCP: TCP_TX_DELAY enabled [ 149.453513][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 149.700445][ T7834] tipc: Enabled bearer , priority 0 [ 149.726826][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 149.759500][ T7834] syzkaller0: entered promiscuous mode [ 149.767914][ T7834] syzkaller0: entered allmulticast mode [ 149.832442][ T7846] netlink: 256 bytes leftover after parsing attributes in process `syz.0.549'. [ 149.976843][ T7834] tipc: Resetting bearer [ 150.030630][ T7827] tipc: Resetting bearer [ 150.095347][ T7827] tipc: Disabling bearer [ 150.137319][ T7853] bond0: Error: Cannot enslave bond to itself. [ 150.145573][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.552'. [ 150.344413][ T7872] netlink: 144 bytes leftover after parsing attributes in process `syz.3.556'. [ 150.596616][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 150.870108][ T7899] netlink: 'syz.4.565': attribute type 2 has an invalid length. [ 150.892143][ T7899] netlink: 'syz.4.565': attribute type 2 has an invalid length. [ 151.521925][ T7933] tipc: Enabled bearer , priority 0 [ 151.535005][ T7933] tipc: Resetting bearer [ 151.550643][ T7935] netlink: 'syz.4.577': attribute type 21 has an invalid length. [ 151.574565][ T7932] tipc: Disabling bearer [ 151.623007][ T1111] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.646034][ T1111] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.663606][ T7935] tipc: Started in network mode [ 151.669183][ T7935] tipc: Node identity 0aa93f17630c, cluster identity 4711 [ 151.677925][ T7935] tipc: Enabled bearer , priority 0 [ 151.696581][ T1111] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.715165][ T7935] syzkaller0: entered promiscuous mode [ 151.724238][ T7935] syzkaller0: entered allmulticast mode [ 151.739646][ T1111] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.777723][ T7935] tipc: Resetting bearer [ 151.803719][ T7934] tipc: Resetting bearer [ 151.829675][ T7934] tipc: Disabling bearer [ 151.855948][ T7946] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 151.890193][ T7946] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 152.104391][ T7961] netlink: 'syz.2.586': attribute type 5 has an invalid length. [ 152.319485][ T7972] netlink: 'syz.0.590': attribute type 32 has an invalid length. [ 152.355908][ T7972] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 152.495949][ T7981] team0: Device xfrm1 is of different type [ 152.919996][ T8004] syzkaller0: entered promiscuous mode [ 152.930140][ T8004] syzkaller0: entered allmulticast mode [ 153.032031][ T8018] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 153.051365][ T8018] __nla_validate_parse: 25 callbacks suppressed [ 153.051389][ T8018] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.603'. [ 154.608978][ T8046] tls_set_device_offload_rx: netdev not found [ 154.610588][ T8048] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 154.662793][ T8051] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 154.739852][ T8055] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 154.786857][ T8055] veth3: entered promiscuous mode [ 154.798949][ T8055] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 154.819929][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 154.833429][ T37] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 154.855219][ T8055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.926666][ T44] hid-generic 0005:16C0:5507.0001: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa [ 154.951485][ T37] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 155.533346][ T8072] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 155.586837][ T8072] team0: Device hsr_slave_0 failed to register rx_handler [ 155.668789][ T8072] syz.1.618 (8072) used greatest stack depth: 19448 bytes left [ 155.819666][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 155.883538][ T8091] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 155.985691][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 156.020013][ T8102] veth1_to_bridge: mtu less than device minimum [ 156.129217][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 156.460287][ T8124] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 156.537525][ T8131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.638'. [ 156.644700][ T8134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.689184][ T8134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.639'. [ 156.870401][ T8146] tipc: Enabled bearer , priority 0 [ 156.910206][ T8146] netlink: 'syz.1.645': attribute type 21 has an invalid length. [ 157.166207][ T8160] openvswitch: netlink: IP tunnel dst address not specified [ 157.411475][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 157.432646][ T8167] netlink: 'syz.1.647': attribute type 14 has an invalid length. [ 157.683484][ T8186] tipc: Enabled bearer , priority 0 [ 157.773596][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 157.817058][ T8186] syzkaller0: entered promiscuous mode [ 157.829672][ T8186] syzkaller0: entered allmulticast mode [ 157.837814][ T8186] tipc: Resetting bearer [ 157.859670][ T8180] netlink: 88 bytes leftover after parsing attributes in process `syz.1.653'. [ 157.934639][ T8203] openvswitch: netlink: Unknown key attributes 2 [ 157.963864][ T8185] tipc: Resetting bearer [ 157.984776][ T120] tipc: Node number set to 2171434388 [ 158.564260][ T8230] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.666'. [ 158.811306][ T5923] tipc: Node number set to 2511417188 [ 159.614343][ T8185] tipc: Disabling bearer [ 159.649601][ T8226] tipc: Enabled bearer , priority 0 [ 159.668621][ T8228] syzkaller0: entered promiscuous mode [ 159.709323][ T8228] syzkaller0: entered allmulticast mode [ 159.876895][ T8237] tipc: Resetting bearer [ 159.965575][ T8237] tipc: Disabling bearer [ 160.128072][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 160.141121][ T8264] netlink: 92 bytes leftover after parsing attributes in process `syz.3.671'. [ 160.154538][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 160.177912][ T8264] openvswitch: netlink: Flow key attr not present in new flow. [ 160.282527][ T8262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.353785][ T8267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.369963][ T8267] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 160.384174][ T8267] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 160.539519][ T8279] netlink: 56 bytes leftover after parsing attributes in process `syz.1.676'. [ 160.556282][ T8276] veth3: entered promiscuous mode [ 160.568646][ T8276] veth3: entered allmulticast mode [ 160.632100][ T8276] openvswitch: netlink: Message has 20 unknown bytes. [ 160.651226][ T8276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.720208][ T8287] nbd: must specify a size in bytes for the device [ 160.754458][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.792215][ T8284] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 160.867392][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 160.881752][ T8296] netlink: 'syz.4.682': attribute type 29 has an invalid length. [ 160.897050][ T8297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.683'. [ 160.938662][ T8299] netlink: 64 bytes leftover after parsing attributes in process `syz.0.684'. [ 160.958604][ T8299] netlink: 64 bytes leftover after parsing attributes in process `syz.0.684'. [ 161.060098][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 161.544570][ T8336] netlink: 'syz.0.695': attribute type 23 has an invalid length. [ 161.806312][ T8349] netlink: 'syz.2.699': attribute type 29 has an invalid length. [ 161.816866][ T8349] netlink: 'syz.2.699': attribute type 29 has an invalid length. [ 161.969064][ T8353] netlink: zone id is out of range [ 161.980656][ T8353] netlink: del zone limit has 4 unknown bytes [ 162.806672][ T8395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.828210][ T8395] IPv6: sit2: Disabled Multicast RS [ 162.838045][ T8395] sit2: entered allmulticast mode [ 163.082430][ T8406] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 163.120174][ T8406] team_slave_0: entered promiscuous mode [ 163.126162][ T8406] team_slave_1: entered promiscuous mode [ 163.354794][ T8421] netlink: 'syz.2.720': attribute type 11 has an invalid length. [ 163.407889][ T8425] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 163.447940][ T8425] C: renamed from lo (while UP) [ 163.467739][ T8425] dvmrp1: entered allmulticast mode [ 163.558638][ T8433] sctp: [Deprecated]: syz.2.724 (pid 8433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.558638][ T8433] Use struct sctp_sack_info instead [ 163.666910][ T8436] __nla_validate_parse: 11 callbacks suppressed [ 163.666931][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'. [ 163.726898][ T8436] tipc: Enabling of bearer rejected, already enabled [ 163.827834][ T8446] tipc: Enabled bearer , priority 0 [ 163.845051][ T8446] syzkaller0: entered promiscuous mode [ 163.850600][ T8446] syzkaller0: entered allmulticast mode [ 163.920609][ T8446] tipc: Resetting bearer [ 164.129468][ T8464] openvswitch: netlink: Multiple metadata blocks provided [ 164.200313][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 164.288981][ T8462] dvmrp1: entered allmulticast mode [ 164.433323][ T8474] netlink: 108 bytes leftover after parsing attributes in process `syz.4.737'. [ 164.600179][ T8442] tipc: Resetting bearer [ 164.640129][ T8442] tipc: Disabling bearer [ 164.664019][ T8489] netlink: 168 bytes leftover after parsing attributes in process `syz.3.739'. [ 164.675207][ T8492] netlink: 'syz.4.742': attribute type 6 has an invalid length. [ 164.825486][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 164.899264][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 164.949308][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.152906][ T8514] IPVS: Unknown mcast interface: vcan0 [ 165.478993][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 165.516360][ T8539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.755'. [ 165.580143][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 165.662107][ T8546] netlink: 'syz.3.757': attribute type 3 has an invalid length. [ 165.670089][ T8546] netlink: 248 bytes leftover after parsing attributes in process `syz.3.757'. [ 166.060904][ T8576] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 166.284411][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.662880][ T8603] delete_channel: no stack [ 166.786845][ T8611] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 166.799116][ T8611] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 166.829474][ T8611] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 166.848572][ T8611] netlink: 'syz.4.776': attribute type 2 has an invalid length. [ 167.176689][ T8631] netlink: 'syz.4.780': attribute type 11 has an invalid length. [ 167.459861][ T8652] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 167.809879][ T8669] gretap1: entered promiscuous mode [ 167.932082][ T8678] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 167.954663][ T8678] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 168.095509][ T8684] netlink: 'syz.3.799': attribute type 5 has an invalid length. [ 168.118854][ T8687] Driver unsupported XDP return value 0 on prog (id 160) dev N/A, expect packet loss! [ 168.138536][ T8684] geneve3: entered promiscuous mode [ 168.157320][ T8684] geneve3: entered allmulticast mode [ 168.179868][ T1153] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 256 - 0 [ 168.198943][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 168.355930][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 168.376320][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 168.680240][ T8718] __nla_validate_parse: 13 callbacks suppressed [ 168.680263][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 168.767620][ T8717] tipc: Enabled bearer , priority 0 [ 168.817746][ T8717] syzkaller0: entered promiscuous mode [ 168.828019][ T8717] syzkaller0: entered allmulticast mode [ 168.884833][ T8725] netlink: 100 bytes leftover after parsing attributes in process `syz.2.809'. [ 168.930041][ T8722] veth5: entered promiscuous mode [ 168.955892][ T8717] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 169.001128][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.008299][ T8730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.054162][ T8717] netlink: 'syz.1.808': attribute type 10 has an invalid length. [ 169.056305][ T8724] tipc: Resetting bearer [ 169.114084][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.169495][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.176998][ T8717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.235756][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.318333][ T8716] tipc: Resetting bearer [ 169.366358][ T8716] tipc: Disabling bearer [ 169.664709][ T8769] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.824'. [ 169.678490][ T8771] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.824'. [ 169.817287][ T8776] netlink: 'syz.3.828': attribute type 21 has an invalid length. [ 169.817287][ T8779] netlink: 'syz.3.828': attribute type 21 has an invalid length. [ 169.817371][ T8779] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 169.848403][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'. [ 169.873628][ T8776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 169.966977][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 170.003715][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.829'. [ 170.017579][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.830'. [ 171.049714][ T8849] unsupported nla_type 52263 [ 171.253358][ T8869] netlink: 'syz.0.856': attribute type 17 has an invalid length. [ 171.444020][ T8882] tipc: Enabling of bearer rejected, failed to enable media [ 171.636439][ T8898] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 171.908719][ T978] IPVS: starting estimator thread 0... [ 171.935085][ T8913] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 172.041468][ T8917] IPVS: using max 23 ests per chain, 55200 per kthread [ 172.084740][ T8921] netlink: 'syz.0.871': attribute type 11 has an invalid length. [ 172.133888][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 172.392754][ T8946] pimreg: entered allmulticast mode [ 172.455783][ T8946] pimreg: left allmulticast mode [ 172.502189][ T8954] netlink: 'syz.0.881': attribute type 13 has an invalid length. [ 172.566108][ T8954] netlink: 'syz.0.881': attribute type 58 has an invalid length. [ 172.779776][ T8977] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 172.826715][ T8985] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.836148][ T8977] bridge_slave_1: left allmulticast mode [ 172.844436][ T8977] bridge_slave_1: left promiscuous mode [ 172.856171][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.889250][ T8977] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 172.986488][ T8989] syzkaller0: entered promiscuous mode [ 172.992710][ T8989] syzkaller0: entered allmulticast mode [ 173.825003][ T9033] __nla_validate_parse: 15 callbacks suppressed [ 173.825023][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.905'. [ 173.859527][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.905'. [ 173.902019][ T9040] netlink: 104 bytes leftover after parsing attributes in process `syz.3.908'. [ 174.073079][ T9053] sctp: [Deprecated]: syz.0.913 (pid 9053) Use of int in max_burst socket option. [ 174.073079][ T9053] Use struct sctp_assoc_value instead [ 174.120255][ T1092] nci: nci_rx_work: unknown MT 0x6 [ 174.145796][ T9061] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 174.156754][ T9061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.910'. [ 174.190242][ T9061] batadv0: entered promiscuous mode [ 174.218184][ T9061] batadv0: entered allmulticast mode [ 174.255622][ T9061] bridge0: port 2(batadv0) entered blocking state [ 174.264885][ T9061] bridge0: port 2(batadv0) entered disabled state [ 174.561186][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 174.570960][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 175.085121][ T9084] netlink: 'syz.2.919': attribute type 4 has an invalid length. [ 175.099364][ T9093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 175.170417][ T9090] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 175.188683][ T9090] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.923'. [ 175.208111][ T9094] team0: Device vti0 is of different type [ 175.250702][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 175.397682][ T9109] netlink: 'syz.1.928': attribute type 9 has an invalid length. [ 175.951559][ T9138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.933'. [ 176.204728][ T9138] nbd0: detected capacity change from 0 to 549764202496 [ 176.238777][ T5159] block nbd0: Receive control failed (result -32) [ 176.278431][ T9154] Bluetooth: MGMT ver 1.23 [ 176.536694][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.942'. [ 176.560474][ T9171] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 176.568234][ T9171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.649061][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.669667][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.706172][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.719873][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.783997][ T9168] bridge0: port 3(batadv0) entered disabled state [ 176.788705][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.942'. [ 176.828040][ T9168] bridge0: port 3(batadv0) entered disabled state [ 177.185223][ T9205] dvmrp1: entered allmulticast mode [ 177.302456][ T9210] netlink: 72 bytes leftover after parsing attributes in process `syz.0.953'. [ 177.348832][ T9113] IPVS: starting estimator thread 0... [ 177.451422][ T9217] IPVS: using max 27 ests per chain, 64800 per kthread [ 178.051778][ T9252] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 178.574189][ T9292] tipc: Enabling of bearer rejected, failed to enable media [ 178.779510][ T9304] netlink: 'syz.1.978': attribute type 8 has an invalid length. [ 178.794962][ T9305] netlink: 'syz.2.977': attribute type 2 has an invalid length. [ 178.880463][ T9310] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 179.066926][ T9313] __nla_validate_parse: 5 callbacks suppressed [ 179.066954][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.980'. [ 179.409804][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 179.428507][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 179.492379][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.989'. [ 179.501959][ T9336] netlink: 156 bytes leftover after parsing attributes in process `syz.3.986'. [ 179.535854][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.986'. [ 179.560432][ T9336] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 179.730029][ T9351] netlink: 68 bytes leftover after parsing attributes in process `syz.2.993'. [ 179.765532][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 179.896491][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 179.934571][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 179.983326][ T9377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.041127][ T9377] sctp: [Deprecated]: syz.1.999 (pid 9377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.041127][ T9377] Use struct sctp_sack_info instead [ 180.088417][ T9377] sctp: [Deprecated]: syz.1.999 (pid 9377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.088417][ T9377] Use struct sctp_sack_info instead [ 180.444650][ T9400] netlink: 'syz.4.1006': attribute type 2 has an invalid length. [ 180.485221][ T9400] netlink: 'syz.4.1006': attribute type 8 has an invalid length. [ 180.728041][ T9415] IPVS: set_ctl: invalid protocol: 11108 255.255.255.255:20003 [ 181.535362][ T9484] veth1_macvtap: left promiscuous mode [ 181.548513][ T9484] macsec0: entered promiscuous mode [ 181.561654][ T9484] macsec0: entered allmulticast mode [ 181.595544][ T9484] veth1_macvtap: entered promiscuous mode [ 181.608168][ T9484] veth1_macvtap: entered allmulticast mode [ 181.619543][ T9484] macsec0: left promiscuous mode [ 181.629041][ T9484] macsec0: left allmulticast mode [ 181.659097][ T9484] veth1_macvtap: left allmulticast mode [ 181.743684][ T9493] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 181.756965][ T9493] netlink: 'syz.1.1029': attribute type 2 has an invalid length. [ 182.962447][ T9563] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 183.183707][ T9576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.581868][ C0] vcan0: j1939_tp_txtimer: 0xffff888024b73c00: tx aborted with unknown reason: -2 [ 183.592604][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024b73000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 183.612815][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024b73c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 183.633665][ T9603] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.646228][ T9603] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 183.657433][ T9603] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 184.124139][ T9622] __nla_validate_parse: 45 callbacks suppressed [ 184.124163][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1071'. [ 184.176699][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.176711][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.176916][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.229516][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.245104][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.256262][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.304957][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.329780][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.346498][ T9636] openvswitch: netlink: Message has -1 unknown bytes. [ 184.357881][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 184.499608][ T9642] veth1_macvtap: left promiscuous mode [ 184.611217][ T9651] nbd: must specify at least one socket [ 184.907970][ T9668] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 185.386971][ T9692] pim6reg1: entered promiscuous mode [ 185.406394][ T9692] pim6reg1: entered allmulticast mode [ 186.121161][ T9733] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 186.544183][ T9759] veth0: entered promiscuous mode [ 186.569194][ T9759] veth0 (unregistering): left promiscuous mode [ 186.759614][ T9773] netlink: 'syz.4.1117': attribute type 29 has an invalid length. [ 186.776462][ T9773] netlink: 'syz.4.1117': attribute type 29 has an invalid length. [ 186.972890][ T9784] tipc: Enabling of bearer rejected, already enabled [ 187.147825][ T9786] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 187.236101][ T9799] Bluetooth: MGMT ver 1.23 [ 187.287669][ T9801] netlink: 'syz.2.1128': attribute type 12 has an invalid length. [ 187.815337][ T9832] batadv_slave_1: entered promiscuous mode [ 187.966098][ T9831] batadv_slave_1: left promiscuous mode [ 188.754650][ T9901] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 188.788138][ T9901] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 188.819843][ T9907] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 188.828329][ T9904] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 188.846600][ T9907] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 189.085288][ T9925] netlink: 'syz.1.1166': attribute type 23 has an invalid length. [ 189.267739][ T9930] gtp0: entered promiscuous mode [ 189.299221][ T9934] __nla_validate_parse: 80 callbacks suppressed [ 189.299241][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 189.427701][ T6456] IPVS: starting estimator thread 0... [ 189.439310][ T9943] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 189.464117][ T9948] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 189.520851][ T9944] IPVS: using max 26 ests per chain, 62400 per kthread [ 189.532630][ T9949] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 189.582741][ T9956] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 189.591649][ T9956] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1175'. [ 190.244859][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 190.307938][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'. [ 190.308878][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.341854][ T9989] bridge_slave_0: left allmulticast mode [ 190.358387][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1185'. [ 190.362693][ T9989] bridge_slave_0: left promiscuous mode [ 190.374737][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.572882][T10003] openvswitch: netlink: Tunnel attr 16 has unexpected len 5 expected 0 [ 190.768748][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 190.855171][T10012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.884982][T10016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1192'. [ 190.904996][T10025] gretap2: entered promiscuous mode [ 190.934769][T10025] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 190.944091][T10012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1191'. [ 191.032089][T10030] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 191.097291][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 191.514533][T10066] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1205'. [ 191.770599][T10085] validate_nla: 2 callbacks suppressed [ 191.770619][T10085] netlink: 'syz.3.1210': attribute type 83 has an invalid length. [ 191.966449][T10091] netlink: 'syz.0.1214': attribute type 5 has an invalid length. [ 192.036827][ T9870] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.075803][ T9870] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.097897][ T9870] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.259609][ T9870] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.478062][T10119] netlink: 'syz.0.1222': attribute type 11 has an invalid length. [ 192.569260][T10122] dvmrp0: entered allmulticast mode [ 192.631996][T10115] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 193.762563][T10165] tipc: Enabled bearer , priority 0 [ 193.778639][T10170] syzkaller0: entered promiscuous mode [ 193.795139][T10170] syzkaller0: entered allmulticast mode [ 193.895989][T10170] tipc: Resetting bearer [ 193.986485][T10170] tipc: Disabling bearer [ 194.075041][T10188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.288069][T10203] syzkaller1: entered promiscuous mode [ 194.296228][T10203] syzkaller1: entered allmulticast mode [ 194.519259][T10212] netlink: 'syz.3.1252': attribute type 22 has an invalid length. [ 194.548724][T10212] __nla_validate_parse: 7 callbacks suppressed [ 194.548747][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 194.619669][T10214] sit1: entered promiscuous mode [ 194.627922][T10214] sit1: entered allmulticast mode [ 194.647901][T10212] netlink: 'syz.3.1252': attribute type 22 has an invalid length. [ 194.656155][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 194.668147][ T9463] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.677545][ T9463] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.695138][ T9870] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.718570][ T9870] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.750350][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'. [ 194.785810][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 194.810324][T10225] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 194.833002][T10227] FAULT_INJECTION: forcing a failure. [ 194.833002][T10227] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 194.848143][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 194.860030][T10227] CPU: 0 UID: 0 PID: 10227 Comm: syz.1.1259 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 194.860064][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.860085][T10227] Call Trace: [ 194.860094][T10227] [ 194.860107][T10227] dump_stack_lvl+0x189/0x250 [ 194.860135][T10227] ? __pfx____ratelimit+0x10/0x10 [ 194.860167][T10227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.860189][T10227] ? __pfx__printk+0x10/0x10 [ 194.860216][T10227] ? __might_fault+0xb0/0x130 [ 194.860262][T10227] should_fail_ex+0x414/0x560 [ 194.860302][T10227] _copy_from_user+0x2d/0xb0 [ 194.860334][T10227] ___sys_recvmsg+0x12e/0x510 [ 194.860374][T10227] ? __pfx____sys_recvmsg+0x10/0x10 [ 194.860429][T10227] ? __fget_files+0x3a0/0x420 [ 194.860463][T10227] __x64_sys_recvmsg+0x198/0x260 [ 194.860490][T10227] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 194.860525][T10227] ? __pfx_ksys_write+0x10/0x10 [ 194.860553][T10227] ? rcu_is_watching+0x15/0xb0 [ 194.860593][T10227] ? do_syscall_64+0xbe/0x3b0 [ 194.860629][T10227] do_syscall_64+0xfa/0x3b0 [ 194.860659][T10227] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.860689][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.860714][T10227] ? clear_bhb_loop+0x60/0xb0 [ 194.860740][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.860759][T10227] RIP: 0033:0x7fb357f8eb69 [ 194.860783][T10227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.860801][T10227] RSP: 002b:00007fb358ece038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 194.860829][T10227] RAX: ffffffffffffffda RBX: 00007fb3581b5fa0 RCX: 00007fb357f8eb69 [ 194.860844][T10227] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000003 [ 194.860857][T10227] RBP: 00007fb358ece090 R08: 0000000000000000 R09: 0000000000000000 [ 194.860870][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.860882][T10227] R13: 0000000000000000 R14: 00007fb3581b5fa0 R15: 00007ffe70cc45e8 [ 194.860916][T10227] [ 195.066904][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 195.077868][T10232] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 195.086657][T10232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.415881][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 195.453376][T10256] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 195.523574][T10263] netlink: 736 bytes leftover after parsing attributes in process `syz.1.1265'. [ 195.570455][T10256] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 195.589708][T10256] gretap3: entered promiscuous mode [ 195.595416][T10256] gretap3: entered allmulticast mode [ 195.609183][T10259] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 196.292064][T10299] netlink: zone id is out of range [ 196.299978][T10299] netlink: zone id is out of range [ 196.338675][T10299] netlink: zone id is out of range [ 196.358298][T10299] netlink: zone id is out of range [ 196.383053][T10299] netlink: zone id is out of range [ 196.401349][T10299] netlink: zone id is out of range [ 196.421379][T10306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1281'. [ 196.430651][T10299] netlink: zone id is out of range [ 196.437108][T10299] netlink: zone id is out of range [ 196.467388][T10306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 196.478605][T10299] netlink: zone id is out of range [ 196.484322][T10299] netlink: zone id is out of range [ 196.495902][T10306] gretap3: entered promiscuous mode [ 196.514838][T10306] gretap3: entered allmulticast mode [ 196.690189][T10315] syzkaller0: entered promiscuous mode [ 196.726378][T10315] syzkaller0: entered allmulticast mode [ 197.170315][T10347] syz.1.1295: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.200520][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.1.1295 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 197.200554][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.200567][T10347] Call Trace: [ 197.200576][T10347] [ 197.200586][T10347] dump_stack_lvl+0x189/0x250 [ 197.200618][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.200641][T10347] ? __pfx__printk+0x10/0x10 [ 197.200669][T10347] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.200695][T10347] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.200726][T10347] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 197.200753][T10347] warn_alloc+0x214/0x310 [ 197.200782][T10347] ? __pfx_warn_alloc+0x10/0x10 [ 197.200813][T10347] ? __get_vm_area_node+0x28f/0x300 [ 197.200847][T10347] ? packet_set_ring+0x6f4/0x2350 [ 197.200877][T10347] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 197.200929][T10347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.200952][T10347] ? alloc_pages_mpol+0x3cd/0x4a0 [ 197.200985][T10347] ? packet_set_ring+0x6f4/0x2350 [ 197.201010][T10347] vzalloc_noprof+0xb2/0xf0 [ 197.201030][T10347] ? packet_set_ring+0x6f4/0x2350 [ 197.201055][T10347] packet_set_ring+0x6f4/0x2350 [ 197.201100][T10347] ? __pfx_packet_set_ring+0x10/0x10 [ 197.201147][T10347] ? _copy_from_user+0x94/0xb0 [ 197.201182][T10347] packet_setsockopt+0xc5a/0x12c0 [ 197.201211][T10347] ? __pfx_packet_setsockopt+0x10/0x10 [ 197.201243][T10347] ? __lock_acquire+0xab9/0xd20 [ 197.201279][T10347] ? aa_sk_perm+0x81e/0x950 [ 197.201313][T10347] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.201342][T10347] ? __fget_files+0x2a/0x420 [ 197.201363][T10347] ? aa_sock_opt_perm+0x74/0x110 [ 197.201407][T10347] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 197.201431][T10347] ? __pfx_packet_setsockopt+0x10/0x10 [ 197.201459][T10347] do_sock_setsockopt+0x179/0x1b0 [ 197.201486][T10347] __x64_sys_setsockopt+0x13f/0x1b0 [ 197.201513][T10347] do_syscall_64+0xfa/0x3b0 [ 197.201544][T10347] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.201574][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.201596][T10347] ? clear_bhb_loop+0x60/0xb0 [ 197.201623][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.201644][T10347] RIP: 0033:0x7fb357f8eb69 [ 197.201663][T10347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.201682][T10347] RSP: 002b:00007fb358ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.201705][T10347] RAX: ffffffffffffffda RBX: 00007fb3581b6080 RCX: 00007fb357f8eb69 [ 197.201720][T10347] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000006 [ 197.201732][T10347] RBP: 00007fb358011df1 R08: 000000000000001c R09: 0000000000000000 [ 197.201745][T10347] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.201758][T10347] R13: 0000000000000000 R14: 00007fb3581b6080 R15: 00007ffe70cc45e8 [ 197.201789][T10347] [ 197.511096][T10347] Mem-Info: [ 197.514356][T10347] active_anon:4418 inactive_anon:0 isolated_anon:0 [ 197.514356][T10347] active_file:1392 inactive_file:39866 isolated_file:0 [ 197.514356][T10347] unevictable:768 dirty:69 writeback:0 [ 197.514356][T10347] slab_reclaimable:11592 slab_unreclaimable:99096 [ 197.514356][T10347] mapped:28899 shmem:1359 pagetables:977 [ 197.514356][T10347] sec_pagetables:0 bounce:0 [ 197.514356][T10347] kernel_misc_reclaimable:0 [ 197.514356][T10347] free:1318898 free_pcp:28600 free_cma:0 [ 197.565776][T10347] Node 0 active_anon:17672kB inactive_anon:0kB active_file:5568kB inactive_file:159264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115596kB dirty:272kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12596kB pagetables:3756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.601048][T10347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.648777][T10347] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.678130][T10347] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 197.684363][T10347] Node 0 DMA32 free:1359900kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17628kB inactive_anon:0kB active_file:5568kB inactive_file:157452kB unevictable:1536kB writepending:272kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:94836kB local_pcp:72928kB free_cma:0kB [ 197.689441][T10366] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 197.725501][T10347] lowmem_reserve[]: 0 0 1 1 1 [ 197.779064][T10347] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 197.808862][T10347] lowmem_reserve[]: 0 0 0 0 0 [ 197.813782][T10347] Node 1 Normal free:3900304kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19360kB local_pcp:8224kB free_cma:0kB [ 197.851246][T10347] lowmem_reserve[]: 0 0 0 0 0 [ 197.856178][T10347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.869278][T10347] Node 0 DMA32: 1048*4kB (UME) 307*8kB (UME) 270*16kB (UM) 457*32kB (UM) 98*64kB (UM) 41*128kB (UM) 6*256kB (UM) 12*512kB (UME) 5*1024kB (ME) 7*2048kB (UM) 317*4096kB (UM) = 1362680kB [ 197.904958][T10347] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 197.939522][T10347] Node 1 Normal: 196*4kB (UME) 58*8kB (UME) 39*16kB (UME) 128*32kB (UME) 27*64kB (UME) 7*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3900304kB [ 197.967737][T10347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.979091][T10347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.988088][T10378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1302'. [ 197.998348][T10347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.042209][T10347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.087237][T10347] 42664 total pagecache pages [ 198.104201][T10347] 0 pages in swap cache [ 198.117705][T10347] Free swap = 124996kB [ 198.143538][T10347] Total swap = 124996kB [ 198.156401][T10347] 2097051 pages RAM [ 198.161087][T10347] 0 pages HighMem/MovableOnly [ 198.165965][T10347] 424872 pages reserved [ 198.170259][T10347] 0 pages cma reserved [ 199.598002][T10479] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 199.679302][T10479] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1324'. [ 200.109519][T10505] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1330'. [ 200.372934][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1335'. [ 200.383015][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1335'. [ 200.549354][T10540] netlink: 'syz.1.1340': attribute type 3 has an invalid length. [ 200.668235][T10554] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 200.774613][T10554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.188423][T10586] sctp: [Deprecated]: syz.1.1353 (pid 10586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.188423][T10586] Use struct sctp_sack_info instead [ 201.215489][T10588] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1354'. [ 201.246323][T10588] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1354'. [ 201.268738][T10586] netlink: 'syz.1.1353': attribute type 3 has an invalid length. [ 201.303859][T10586] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1353'. [ 201.403548][T10593] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 201.418805][T10593] netlink: 'syz.4.1355': attribute type 3 has an invalid length. [ 201.467777][T10593] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 201.488107][T10593] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 201.496429][T10593] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 201.510810][T10593] netlink: 'syz.4.1355': attribute type 2 has an invalid length. [ 201.542648][T10593] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1355'. [ 201.652562][T10600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1359'. [ 201.863626][T10609] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1363'. [ 201.894934][T10609] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 202.179532][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.200325][T10625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.245122][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.270544][T10625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.370033][T10625] bridge0: port 2(batadv0) entered disabled state [ 202.648910][T10652] netlink: 'syz.4.1375': attribute type 11 has an invalid length. [ 202.700295][T10652] netlink: 'syz.4.1375': attribute type 11 has an invalid length. [ 202.862965][ T5159] Bluetooth: hci4: link tx timeout [ 202.869906][ T5159] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.566896][T10708] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 203.707806][T10718] tipc: Enabling of bearer rejected, failed to enable media [ 203.732204][T10712] bridge_slave_1: left allmulticast mode [ 203.738010][T10712] bridge_slave_1: left promiscuous mode [ 203.768370][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.826350][T10712] bridge_slave_0: left allmulticast mode [ 203.845210][T10712] bridge_slave_0: left promiscuous mode [ 203.861324][T10712] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.126973][T10737] tipc: Enabled bearer , priority 0 [ 204.177350][T10730] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.294751][T10744] syzkaller0: entered promiscuous mode [ 204.300415][T10744] syzkaller0: entered allmulticast mode [ 204.345946][T10761] net_ratelimit: 420 callbacks suppressed [ 204.345967][T10761] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 204.379332][T10730] tipc: Resetting bearer [ 204.397608][T10763] openvswitch: netlink: nsh attribute has 32766 unknown bytes. [ 204.405679][T10763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.451946][T10727] tipc: Resetting bearer [ 204.529158][T10727] tipc: Disabling bearer [ 204.610313][T10776] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 204.702987][T10769] __nla_validate_parse: 12 callbacks suppressed [ 204.703011][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 204.891790][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 204.926924][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 204.937884][T10794] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1418'. [ 205.514118][T10820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1424'. [ 205.946140][T10840] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.104924][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'. [ 206.449059][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'. [ 206.589855][T10880] validate_nla: 3 callbacks suppressed [ 206.589875][T10880] netlink: 'syz.1.1446': attribute type 10 has an invalid length. [ 206.609286][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1447'. [ 206.637230][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'. [ 206.667093][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 206.722153][T10880] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 206.758653][T10888] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1449'. [ 206.808131][T10889] netlink: 'syz.2.1450': attribute type 4 has an invalid length. [ 207.709784][T10925] bond2: entered promiscuous mode [ 207.715062][T10925] bond2: entered allmulticast mode [ 207.721058][T10925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.855812][T10925] bond2 (unregistering): Released all slaves [ 208.478497][T10952] xt_socket: unknown flags 0xe4 [ 208.642135][T10966] netlink: 'syz.1.1472': attribute type 3 has an invalid length. [ 208.937074][T10965] bridge_slave_0: left allmulticast mode [ 208.948888][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.195449][T10978] bridge_slave_0: left allmulticast mode [ 209.217141][T10978] bridge_slave_0: left promiscuous mode [ 209.241576][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.293065][T10978] bridge_slave_1: left allmulticast mode [ 209.298928][T10978] bridge_slave_1: left promiscuous mode [ 209.315883][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.336067][T10978] bond0: (slave bond_slave_0): Releasing backup interface [ 209.359007][T10978] bond0: (slave bond_slave_1): Releasing backup interface [ 209.392667][T10978] team_slave_0: left promiscuous mode [ 209.408041][T10978] team0: Port device team_slave_0 removed [ 209.424083][T10978] team_slave_1: left promiscuous mode [ 209.433819][T10978] team0: Port device team_slave_1 removed [ 209.443419][T10978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.451268][T10978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.460069][T10978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.468400][T10978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.547907][T10999] tunl0: left promiscuous mode [ 209.612177][T10999] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.619481][T10999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.683763][T10999] tipc: Resetting bearer [ 209.712017][T10999] tipc: Resetting bearer [ 209.738481][T10999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.789379][ T9463] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.875669][ T9463] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.916626][T11010] __nla_validate_parse: 9 callbacks suppressed [ 209.916648][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1481'. [ 209.950266][ T9463] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.973076][ T9463] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.991765][T11022] openvswitch: netlink: Message has 4 unknown bytes. [ 209.999119][T11022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.076651][T11027] netlink: 'syz.1.1486': attribute type 33 has an invalid length. [ 210.333656][T11033] netlink: 'syz.2.1489': attribute type 11 has an invalid length. [ 210.352814][T11033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1489'. [ 210.397012][T11043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 210.440947][T11043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1492'. [ 210.519442][T11050] sctp: [Deprecated]: syz.1.1491 (pid 11050) Use of int in max_burst socket option deprecated. [ 210.519442][T11050] Use struct sctp_assoc_value instead [ 210.585303][T11043] netlink: 'syz.4.1492': attribute type 4 has an invalid length. [ 210.648363][T11053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 210.692230][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 211.007111][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 211.142081][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 211.219469][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 211.246482][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 211.284923][T11087] netlink: 'syz.1.1505': attribute type 14 has an invalid length. [ 211.296607][T11087] netlink: 'syz.1.1505': attribute type 13 has an invalid length. [ 211.325794][T11088] netlink: 'syz.1.1505': attribute type 29 has an invalid length. [ 211.538352][T11112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.580407][T11118] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 212.106691][T11146] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 212.154397][T11146] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.236030][T11146] gretap2: entered promiscuous mode [ 212.315939][T11146] bond7: (slave gretap2): making interface the new active one [ 212.339084][T11146] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 212.368819][T11152] macvlan2: entered promiscuous mode [ 212.376543][T11152] macvlan2: entered allmulticast mode [ 212.395022][T11152] bond7: entered promiscuous mode [ 212.407590][T11152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.419033][T11152] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 212.444396][T11152] bond7: left promiscuous mode [ 212.817296][T11174] syzkaller1: entered promiscuous mode [ 212.828933][T11174] syzkaller1: entered allmulticast mode [ 213.002264][T11183] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 213.020509][T11183] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 213.511217][T11204] netlink: 'syz.2.1539': attribute type 11 has an invalid length. [ 213.581056][T11212] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 213.780103][T11221] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 213.795560][T11223] netlink: 'syz.2.1544': attribute type 1 has an invalid length. [ 214.360999][T11255] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 214.458858][T11258] v: renamed from dummy0 (while UP) [ 215.077039][ T9463] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 215.082030][T11294] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 215.164846][T11294] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.164861][ T9112] IPVS: starting estimator thread 0... [ 215.184192][T11294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.195607][T11294] __nla_validate_parse: 14 callbacks suppressed [ 215.195629][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 215.263357][T11299] IPVS: using max 25 ests per chain, 60000 per kthread [ 215.346122][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'. [ 215.432020][T11305] syzkaller1: entered promiscuous mode [ 215.438849][T11305] syzkaller1: entered allmulticast mode [ 215.474376][T11316] netlink: 'syz.4.1576': attribute type 1 has an invalid length. [ 215.488195][T11316] netlink: 'syz.4.1576': attribute type 10 has an invalid length. [ 215.498042][T11316] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1576'. [ 215.690609][T11325] netlink: 'syz.2.1580': attribute type 64 has an invalid length. [ 215.709799][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1580'. [ 215.784157][T11329] tipc: Enabled bearer , priority 0 [ 215.824373][T11329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 215.867510][T11329] tipc: Resetting bearer [ 215.882428][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 215.904914][T11337] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 215.912498][T11337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.912919][T11326] tipc: Disabling bearer [ 215.994332][T11339] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1586'. [ 216.005064][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 216.712993][T11390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1602'. [ 216.785027][T11393] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1603'. [ 216.810039][T11393] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1603'. [ 216.939570][T11400] C: renamed from lo [ 217.149183][T11400] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 217.348752][T11424] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.438951][T11428] netlink: 'syz.4.1613': attribute type 2 has an invalid length. [ 217.707790][T11448] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 217.987227][T11464] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 217.999581][T11467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.214979][T11475] hsr0: entered promiscuous mode [ 218.223714][T11475] hsr0: entered allmulticast mode [ 218.232840][T11475] hsr_slave_0: entered allmulticast mode [ 219.130956][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 219.972347][T11578] netlink: 'syz.0.1654': attribute type 7 has an invalid length. [ 220.006600][T11578] netlink: 'syz.0.1654': attribute type 8 has an invalid length. [ 220.157626][T11585] netlink: 'syz.0.1656': attribute type 2 has an invalid length. [ 220.268250][T11592] IPv6: Can't replace route, no match found [ 220.344461][T11594] openvswitch: netlink: IPv4 tun info is not correct [ 220.458501][T11604] __nla_validate_parse: 31 callbacks suppressed [ 220.458521][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 220.500357][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 220.598515][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'. [ 221.467189][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 221.508462][T11658] netlink: 'syz.2.1677': attribute type 10 has an invalid length. [ 221.620089][T11658] team0: Port device dummy0 added [ 221.662337][T11658] netlink: 'syz.2.1677': attribute type 10 has an invalid length. [ 221.706718][T11658] team0: Port device dummy0 removed [ 221.725806][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 221.744315][T11658] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 221.784222][T11658] syzkaller1: entered promiscuous mode [ 221.790158][T11658] syzkaller1: entered allmulticast mode [ 221.807073][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 222.087840][T11686] smc: net device erspan0 applied user defined pnetid SYZ0 [ 222.171170][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 222.210108][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1685'. [ 222.220285][T11691] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1685'. [ 222.250994][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 222.251064][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 222.258884][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 222.357748][T11698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1688'. [ 222.807443][T11721] sit0: entered promiscuous mode [ 222.835189][T11721] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 223.089909][T11730] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 224.812434][T11839] nbd: must specify an index to disconnect [ 225.433957][T11865] netlink: 'syz.3.1737': attribute type 2 has an invalid length. [ 225.726208][T11875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.887047][T11889] __nla_validate_parse: 22 callbacks suppressed [ 225.887071][T11889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1746'. [ 226.301388][T11919] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1751'. [ 226.350413][T11919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1751'. [ 226.455853][T11929] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 226.471954][T11929] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 226.556217][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 226.600849][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 226.881274][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 227.209565][T11971] netlink: 'syz.1.1770': attribute type 1 has an invalid length. [ 227.231678][T11971] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1770'. [ 227.271267][T11971] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.850903][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 227.931143][T12014] netlink: 'syz.3.1784': attribute type 33 has an invalid length. [ 227.946263][T12024] netlink: 'syz.3.1784': attribute type 33 has an invalid length. [ 227.982337][T12018] team0 (unregistering): Port device team_slave_0 removed [ 227.992052][T12029] netlink: 'syz.1.1785': attribute type 9 has an invalid length. [ 227.993053][ T9477] nci: nci_rx_work: unknown MT 0x6 [ 228.009554][T12018] team0 (unregistering): Port device team_slave_1 removed [ 228.019916][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1786'. [ 228.068079][T12028] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1787'. [ 228.754476][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1795'. [ 229.249107][T12084] bond4: entered allmulticast mode [ 229.255189][T12084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.265844][T12084] bridge0: port 1(bond4) entered blocking state [ 229.275199][T12084] bridge0: port 1(bond4) entered disabled state [ 229.286423][T12084] bond4: entered promiscuous mode [ 229.293439][T12084] bridge0: port 1(bond4) entered blocking state [ 229.300336][T12084] bridge0: port 1(bond4) entered forwarding state [ 229.313866][ T9460] bridge0: port 1(bond4) entered disabled state [ 229.497753][T12101] tap0: tun_chr_ioctl cmd 1074025676 [ 229.503375][T12101] tap0: owner set to 0 [ 229.762280][T12112] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.014063][T12130] unsupported nlmsg_type 40 [ 230.218725][T12150] tipc: Enabling of bearer rejected, already enabled [ 230.435136][T12158] gtp0: entered promiscuous mode [ 230.440246][T12158] gtp0: entered allmulticast mode [ 230.510493][T12166] netlink: 'syz.3.1824': attribute type 8 has an invalid length. [ 230.551774][T12163] xfrm1: entered promiscuous mode [ 230.557293][T12163] xfrm1: entered allmulticast mode [ 230.699182][T12175] tipc: Enabling of bearer rejected, already enabled [ 230.834155][T12181] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.117937][T12198] netlink: 'syz.2.1834': attribute type 12 has an invalid length. [ 231.155056][T12198] __nla_validate_parse: 10 callbacks suppressed [ 231.155076][T12198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1834'. [ 231.238504][T12205] tipc: Enabled bearer , priority 0 [ 231.247487][T12206] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 231.262849][T12206] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 231.274330][T12205] tipc: Resetting bearer [ 231.306361][T12208] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1837'. [ 231.400652][T12213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 231.786098][T12236] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 231.810632][T12236] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 231.831683][T12236] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 231.883492][T12240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1848'. [ 231.894382][T12236] netlink: 'syz.2.1847': attribute type 2 has an invalid length. [ 231.918892][T12236] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 232.027244][T12246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1850'. [ 232.225313][T12258] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 232.306225][T12258] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 232.922156][T12298] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20002 [ 233.165719][T12307] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1864'. [ 233.404422][T12313] validate_nla: 4 callbacks suppressed [ 233.404443][T12313] netlink: 'syz.0.1867': attribute type 13 has an invalid length. [ 233.545061][T12320] netlink: 'syz.0.1869': attribute type 83 has an invalid length. [ 233.741651][T12334] tipc: Enabling of bearer rejected, already enabled [ 233.814148][T12334] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1873'. [ 234.133885][T12359] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 234.187357][T12359] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1881'. [ 234.350485][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 234.458789][T12377] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1885'. [ 234.829073][T12404] netlink: 'syz.4.1893': attribute type 11 has an invalid length. [ 235.602557][T12438] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 235.726508][T12450] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.743497][T12450] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 236.233582][ T5827] hid-generic 0005:0458:0009.0002: item fetching failed at offset 0/1 [ 236.242034][T12480] __nla_validate_parse: 7 callbacks suppressed [ 236.242057][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 236.291291][ T5827] hid-generic 0005:0458:0009.0002: probe with driver hid-generic failed with error -22 [ 236.383102][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 236.393435][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 236.467950][T12497] netlink: 'syz.3.1919': attribute type 10 has an invalid length. [ 236.492154][T12497] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 236.618009][T12499] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 237.229203][T12541] netlink: 'syz.0.1930': attribute type 16 has an invalid length. [ 237.260258][T12541] netlink: 'syz.0.1930': attribute type 17 has an invalid length. [ 237.400656][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 237.433003][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 237.482102][T12541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.651241][T12562] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 237.678880][T12562] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1935'. [ 237.712843][T12562] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 237.720648][T12562] netlink: 'syz.1.1935': attribute type 2 has an invalid length. [ 237.745416][T12562] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1935'. [ 237.785645][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 237.993761][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 238.200179][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1949'. [ 238.995234][T12646] validate_nla: 3 callbacks suppressed [ 238.995254][T12646] netlink: 'syz.4.1963': attribute type 1 has an invalid length. [ 240.316503][T12699] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 240.422244][T12701] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 240.470105][T12701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.315258][T12749] __nla_validate_parse: 13 callbacks suppressed [ 241.315283][T12749] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1991'. [ 241.506379][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1995'. [ 241.534521][T12758] geneve3: entered promiscuous mode [ 241.657656][T12761] veth1_macvtap: left promiscuous mode [ 241.681563][T12761] macsec0: entered promiscuous mode [ 241.700990][T12761] macsec0: entered allmulticast mode [ 241.786688][T12766] veth1_macvtap: entered promiscuous mode [ 241.797220][T12766] veth1_macvtap: entered allmulticast mode [ 241.808749][T12766] macsec0: left promiscuous mode [ 241.815883][T12766] macsec0: left allmulticast mode [ 241.826556][T12766] veth1_macvtap: left allmulticast mode [ 242.330852][ T5856] Bluetooth: hci0: command tx timeout [ 242.386970][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.417418][T12809] sctp: [Deprecated]: syz.1.2009 (pid 12809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.417418][T12809] Use struct sctp_sack_info instead [ 242.441012][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 242.487553][ T9460] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.501605][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.517290][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 242.525428][ T9460] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.543715][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.565592][ T9460] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.584329][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 242.612076][ T9460] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.636316][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.660891][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 242.678593][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.708225][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 242.735607][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.764693][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 242.830493][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 242.838424][T12828] netlink: 'syz.0.2015': attribute type 1 has an invalid length. [ 242.847045][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 242.985534][T12828] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.998045][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 243.028017][T12811] netlink: 'syz.2.2010': attribute type 20 has an invalid length. [ 243.134721][T12834] bond8: (slave veth7): Enslaving as an active interface with a down link [ 243.225360][T12828] bond8: (slave veth0_to_bond): making interface the new active one [ 243.265019][T12828] veth0_to_bond: entered promiscuous mode [ 243.286971][T12828] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 243.364176][T12834] vlan2: entered allmulticast mode [ 243.369550][T12834] veth1: entered allmulticast mode [ 243.510523][T12853] tipc: Enabling of bearer rejected, failed to enable media [ 243.558006][T12823] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 243.874504][T12877] 8021q: adding VLAN 0 to HW filter on device bond9 [ 243.988997][T12882] bond_slave_0: entered promiscuous mode [ 243.995337][T12882] bond_slave_1: entered promiscuous mode [ 244.001990][T12882] bridge_slave_1: entered promiscuous mode [ 244.019527][T12882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.029738][T12882] bond9: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 244.041010][T12882] bond9: (slave macvlan2): speed changed to 0 on port 1 [ 244.056826][T12882] bond9: (slave macvlan2): Enslaving as a backup interface with an up link [ 245.131413][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 245.697891][T12965] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 246.259912][T13002] validate_nla: 9 callbacks suppressed [ 246.259934][T13002] netlink: 'syz.4.2060': attribute type 11 has an invalid length. [ 246.581274][ T30] audit: type=1800 audit(1754413818.353:2): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2064" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2027 res=0 errno=0 [ 246.697544][T13026] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 246.708918][T13029] __nla_validate_parse: 14 callbacks suppressed [ 246.708940][T13029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2068'. [ 246.714142][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 246.715809][T13029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2068'. [ 246.762333][T13027] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2067'. [ 246.787929][T13027] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 246.802835][T13027] netlink: 'syz.1.2067': attribute type 3 has an invalid length. [ 246.868540][T13035] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2070'. [ 246.938471][T13039] netlink: 'syz.3.2071': attribute type 29 has an invalid length. [ 246.959304][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 247.163507][T13053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2073'. [ 247.302752][ T5856] block nbd1: Receive control failed (result -32) [ 247.483764][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 247.525470][T13062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2077'. [ 247.546366][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 248.159589][T13102] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.167556][T13102] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.242709][T13107] erspan0: entered allmulticast mode [ 248.667498][T13136] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 248.796964][T13148] netlink: 'syz.1.2094': attribute type 3 has an invalid length. [ 248.811775][ T5856] Bluetooth: hci0: command tx timeout [ 249.469587][T13183] netlink: 'syz.3.2102': attribute type 12 has an invalid length. [ 250.052711][T13209] IPVS: length: 60 != 24 [ 250.157535][T13205] gretap1: entered promiscuous mode [ 250.174582][T13205] gretap1: entered allmulticast mode [ 251.348766][T13289] tunl0: entered promiscuous mode [ 251.406405][T13289] netlink: 'syz.0.2138': attribute type 3 has an invalid length. [ 252.514501][T13300] __nla_validate_parse: 14 callbacks suppressed [ 252.514525][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 252.546360][T13301] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2141'. [ 252.566404][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 252.580287][T13301] hsr_slave_0: left promiscuous mode [ 252.629717][T13301] hsr_slave_1: left promiscuous mode [ 252.690659][T13311] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.741509][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 252.769146][T13311] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 252.813437][T13311] team0: Device veth1_macvtap failed to register rx_handler [ 252.823342][T13318] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.148361][T13335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 253.238758][T13340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2156'. [ 253.392306][T13348] syzkaller1: entered promiscuous mode [ 253.399034][T13348] syzkaller1: entered allmulticast mode [ 253.417359][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 253.677974][T13366] syzkaller0: entered promiscuous mode [ 253.688730][T13365] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2164'. [ 253.700316][T13366] syzkaller0: entered allmulticast mode [ 253.928986][T13363] pim6reg1: entered promiscuous mode [ 253.934609][T13363] pim6reg1: entered allmulticast mode [ 254.046612][T13374] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 254.089005][T13378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2167'. [ 254.179475][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2167'. [ 254.195932][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 254.545758][ T9473] veth0_to_bond: left promiscuous mode [ 254.689841][T13404] netlink: 'syz.3.2177': attribute type 4 has an invalid length. [ 254.817501][T13408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.825207][T13408] IPv6: NLM_F_CREATE should be set when creating new route [ 254.870005][T13413] xt_limit: Overflow, try lower: 604147548/4200216962 [ 255.029571][T13421] netlink: 'syz.3.2182': attribute type 8 has an invalid length. [ 255.203826][T13426] openvswitch: netlink: Message has 4 unknown bytes. [ 255.496397][T13445] netlink: 'syz.1.2189': attribute type 2 has an invalid length. [ 255.829389][T13455] openvswitch: netlink: IPv6 tunnel dst address is zero [ 255.878093][T13465] netlink: 'syz.2.2198': attribute type 1 has an invalid length. [ 256.374367][T13492] xt_socket: unknown flags 0xd0 [ 257.808972][T13527] __nla_validate_parse: 11 callbacks suppressed [ 257.808996][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 258.144068][T13536] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2218'. [ 258.296606][T13538] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 258.327900][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'. [ 258.537188][T13548] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 258.554177][T13547] tap0: tun_chr_ioctl cmd 1074025678 [ 258.568308][T13547] tap0: group set to 0 [ 259.032224][T13559] v: renamed from dummy0 (while UP) [ 259.098202][T13560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.151770][T13562] dvmrp0: entered allmulticast mode [ 259.507750][T13578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2230'. [ 260.180543][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055dd5000: rx timeout, send abort [ 260.189590][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055dd7400: rx timeout, send abort [ 260.198028][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055dd5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 260.213491][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055dd7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 260.523064][T13615] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2240'. [ 260.547458][T13615] gretap0: entered promiscuous mode [ 260.567538][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'. [ 260.604693][T13615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.626621][T13624] netlink: 'syz.4.2242': attribute type 5 has an invalid length. [ 260.646288][T13624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2242'. [ 260.746791][T13624] geneve3: entered promiscuous mode [ 260.775948][T13624] geneve3: entered allmulticast mode [ 260.825381][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2240'. [ 260.868778][ T61] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 260.886130][ T61] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 260.932583][T13626] geneve3: entered promiscuous mode [ 261.015570][ T61] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 261.035049][T13646] IPVS: Error connecting to the multicast addr [ 261.058487][ T61] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 261.144838][T13651] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 261.201112][T13653] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 261.230241][T13656] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2251'. [ 261.365799][T13670] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2253'. [ 261.488649][T13674] geneve3: entered promiscuous mode [ 261.802130][T13691] netlink: 'syz.0.2260': attribute type 4 has an invalid length. [ 262.114813][T13704] netlink: 'syz.4.2265': attribute type 4 has an invalid length. [ 262.124231][T13710] netlink: 'syz.3.2266': attribute type 13 has an invalid length. [ 262.138243][T13704] netlink: 'syz.4.2265': attribute type 4 has an invalid length. [ 262.148097][T13710] veth0_macvtap: left promiscuous mode [ 262.159592][T13710] macvtap0: entered allmulticast mode [ 262.180542][T13710] macvtap0: refused to change device tx_queue_len [ 262.347024][T13718] : renamed from bridge_slave_0 (while UP) [ 262.403192][T13715] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 262.651568][T13739] netlink: 'syz.2.2274': attribute type 1 has an invalid length. [ 262.666666][T13728] bond4 (unregistering): Released all slaves [ 263.132893][T13765] __nla_validate_parse: 5 callbacks suppressed [ 263.132916][T13765] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2282'. [ 263.263508][T13776] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 263.522927][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 263.822721][T13787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2287'. [ 263.913140][T13790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 266.210385][T13787] geneve0: entered promiscuous mode [ 266.446236][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 266.481812][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 266.493297][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 266.511528][T13813] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20001 [ 266.519711][T13811] validate_nla: 4 callbacks suppressed [ 266.519732][T13811] netlink: 'syz.2.2294': attribute type 15 has an invalid length. [ 266.573291][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'. [ 266.623081][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2292'. [ 266.931001][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2297'. [ 267.151612][T13834] netlink: 'syz.3.2299': attribute type 29 has an invalid length. [ 267.181959][T13834] netlink: 'syz.3.2299': attribute type 29 has an invalid length. [ 267.345347][T13836] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 267.567093][T13854] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2307'. [ 267.601562][T13856] netlink: 'syz.1.2306': attribute type 2 has an invalid length. [ 268.795434][T13935] __nla_validate_parse: 4 callbacks suppressed [ 268.795457][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 268.832080][T13937] netlink: 64807 bytes leftover after parsing attributes in process `syz.1.2327'. [ 268.873450][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 269.520479][T13962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2334'. [ 269.559574][T13959] gtp0: entered promiscuous mode [ 269.565599][T13959] gtp0: entered allmulticast mode [ 269.585448][T13969] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2337'. [ 269.598181][T13959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2332'. [ 269.767533][T13974] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 269.776347][T13976] netlink: 'syz.2.2339': attribute type 4 has an invalid length. [ 269.801838][T13974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2340'. [ 269.816950][T13976] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2339'. [ 269.837747][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2339'. [ 269.902571][T13982] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2339'. [ 269.985636][T13989] netlink: 'syz.0.2343': attribute type 1 has an invalid length. [ 270.039765][T13989] netlink: 'syz.0.2343': attribute type 2 has an invalid length. [ 270.299935][T14004] nbd: illegal input index -8454144 [ 270.523080][T14020] netlink: 'syz.0.2353': attribute type 3 has an invalid length. [ 270.577161][T14025] netlink: 'syz.3.2354': attribute type 6 has an invalid length. [ 270.814157][T14044] tipc: Enabling of bearer rejected, already enabled [ 271.568150][T14083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.788440][T14094] netlink: 'syz.0.2373': attribute type 39 has an invalid length. [ 272.116048][T14106] openvswitch: netlink: Multiple metadata blocks provided [ 272.515560][T14121] tipc: Enabling of bearer rejected, already enabled [ 273.249813][T14167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.460476][T14186] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 273.470039][T14177] veth7: entered promiscuous mode [ 273.507177][T14177] veth7: entered allmulticast mode [ 274.012534][T14208] syzkaller1: entered promiscuous mode [ 274.012910][T14212] netlink: 'syz.1.2408': attribute type 13 has an invalid length. [ 274.018081][T14208] syzkaller1: entered allmulticast mode [ 274.040893][T14212] netlink: 'syz.1.2408': attribute type 58 has an invalid length. [ 274.048963][T14212] __nla_validate_parse: 17 callbacks suppressed [ 274.048983][T14212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2408'. [ 274.250979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.635161][T14220] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2411'. [ 274.649768][T14220] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2411'. [ 274.666954][T14242] netlink: 'syz.1.2417': attribute type 10 has an invalid length. [ 274.669428][T14220] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2411'. [ 274.731975][T14220] netlink: 4368 bytes leftover after parsing attributes in process `syz.0.2411'. [ 274.743496][T14237] ip6_vti0: entered promiscuous mode [ 274.760808][T14237] ip6_vti0: entered allmulticast mode [ 274.797892][T14242] team0: Port device dummy0 added [ 274.867447][T14246] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2419'. [ 274.988718][T14264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2421'. [ 275.130574][T14276] Bluetooth: MGMT ver 1.23 [ 275.300141][T14289] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2429'. [ 275.309519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.414742][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'. [ 275.426045][T14295] tc_dump_action: action bad kind [ 275.508614][T14303] delete_channel: no stack [ 275.924665][T14321] 8021q: VLANs not supported on syzkaller1 [ 275.936622][T14310] veth1_macvtap: left promiscuous mode [ 275.943062][T14310] macsec0: entered promiscuous mode [ 275.948324][T14310] macsec0: entered allmulticast mode [ 276.251732][T14333] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 276.451972][T14340] vlan2: entered promiscuous mode [ 276.471227][T14340] bridge0: entered promiscuous mode [ 276.658420][T14354] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2450'. [ 276.869274][T14358] veth1: entered allmulticast mode [ 276.921672][T14367] block nbd2: not configured, cannot reconfigure [ 276.928734][T14368] block nbd2: not configured, cannot reconfigure [ 277.224057][T14380] tipc: Enabling of bearer rejected, already enabled [ 277.234098][T14380] tipc: Enabling of bearer rejected, already enabled [ 277.333221][T14380] tipc: Enabling of bearer rejected, already enabled [ 277.588789][T14398] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 278.039757][T14430] openvswitch: netlink: Key type 85 is out of range max 32 [ 278.145517][T14432] pim6reg1: entered promiscuous mode [ 278.157373][T14432] pim6reg1: entered allmulticast mode [ 278.397142][T14447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.693174][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.032558][T14522] __nla_validate_parse: 6 callbacks suppressed [ 281.032581][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2495'. [ 281.102527][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'. [ 281.982066][T14557] hsr_slave_0 (unregistering): left promiscuous mode [ 282.118692][T14570] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 282.617440][T14587] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2511'. [ 282.727430][T14592] batadv_slave_1: entered promiscuous mode [ 282.736558][T14591] batadv_slave_1: left promiscuous mode [ 282.882656][T14595] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 282.890536][T14595] netlink: 'syz.0.2514': attribute type 8 has an invalid length. [ 283.526153][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.566025][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.581344][T14625] netlink: 'syz.1.2523': attribute type 24 has an invalid length. [ 283.581989][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.617596][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.640002][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.655218][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.672648][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.673000][T14627] netlink: 'syz.4.2524': attribute type 1 has an invalid length. [ 283.686471][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.711604][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.812666][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 284.352258][T14660] tipc: Enabled bearer , priority 0 [ 284.367044][T14660] syzkaller0: entered promiscuous mode [ 284.375353][T14660] syzkaller0: entered allmulticast mode [ 284.424873][T14660] tipc: Resetting bearer [ 284.569970][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2533'. [ 284.585522][T14668] netlink: 'syz.4.2533': attribute type 21 has an invalid length. [ 284.595727][T14668] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2533'. [ 284.606854][T14668] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2533'. [ 284.654633][T14652] tipc: Resetting bearer [ 284.698637][T14652] tipc: Disabling bearer [ 284.714910][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 284.764150][T14672] tipc: Enabled bearer , priority 0 [ 284.771889][T14672] syzkaller0: entered promiscuous mode [ 284.778152][T14672] syzkaller0: entered allmulticast mode [ 284.826861][T14671] tipc: Resetting bearer [ 284.896861][T14671] tipc: Disabling bearer [ 284.975595][T14682] bridge9: entered allmulticast mode [ 285.176303][T14697] netlink: 'syz.0.2542': attribute type 2 has an invalid length. [ 285.317639][T14702] tipc: Enabled bearer , priority 0 [ 285.325599][T14702] syzkaller0: entered promiscuous mode [ 285.331417][T14702] syzkaller0: entered allmulticast mode [ 285.339327][ T9473] syzkaller0: tun_net_xmit 70 [ 285.349165][T14702] tipc: Resetting bearer [ 285.373891][T14702] syzkaller0: tun_net_xmit 90 [ 285.403168][T14702] netlink: 'syz.1.2544': attribute type 1 has an invalid length. [ 285.416410][T14701] tipc: Resetting bearer [ 285.463207][T14701] tipc: Disabling bearer [ 285.477401][T14712] netlink: 'syz.3.2546': attribute type 23 has an invalid length. [ 285.665841][T14717] raw_sendmsg: syz.0.2549 forgot to set AF_INET. Fix it! [ 286.198398][T14745] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2559'. [ 286.300301][T14751] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 286.308541][T14751] veth0_vlan: entered allmulticast mode [ 286.321159][T14751] veth0_vlan: left promiscuous mode [ 286.338171][T14751] veth0_vlan: entered promiscuous mode [ 286.425874][T14751] team0: Device veth0_vlan failed to register rx_handler [ 286.773062][T14780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2566'. [ 287.077956][T14791] netlink: 'syz.1.2570': attribute type 6 has an invalid length. [ 287.250206][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2572'. [ 287.771549][T14809] syz.0.2574 (14809) used greatest stack depth: 17864 bytes left [ 288.087151][T14826] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2580'. [ 288.410181][T14826] hsr_slave_1: left promiscuous mode [ 288.481294][ T9462] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.517353][ T9462] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.540962][ T9462] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 1] type 2 family 0 port 256 - 0 [ 288.549556][ T9462] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 2] type 2 family 0 port 20000 - 0 [ 288.601109][ T9462] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.610061][ T9462] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.646754][ T9462] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 288.676142][ T9462] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 288.708907][ T9462] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.747839][ T9462] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.775958][ T9462] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 288.790074][ T9462] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 288.845626][ T9462] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.867142][ T9462] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.892396][ T9462] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 288.909694][ T9462] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 288.951737][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2591'. [ 289.038945][T14862] netlink: 'syz.3.2592': attribute type 32 has an invalid length. [ 289.058964][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 289.190056][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2592'. [ 289.233140][T14863] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 289.273793][T14863] bond10: (slave vcan0): Error -95 calling set_mac_address [ 289.338704][T14862] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 289.406659][T14878] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2592'. [ 290.045995][T14904] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.2602'. [ 290.376348][T14915] tipc: Resetting bearer [ 290.428691][T14915] team0: Port device dummy0 removed [ 290.447870][T14915] bridge_slave_0: left allmulticast mode [ 290.464241][T14915] bridge_slave_0: left promiscuous mode [ 290.496966][T14915] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.650397][T14915] bond0: (slave bond_slave_0): Releasing backup interface [ 290.680080][T14915] bond0: (slave bond_slave_1): Releasing backup interface [ 290.713304][T14915] team0: Port device team_slave_0 removed [ 290.733432][T14915] team0: Port device team_slave_1 removed [ 290.793614][T14915] bond2: (slave gretap2): Releasing backup interface [ 290.837302][T14921] team0: Mode changed to "loadbalance" [ 290.846062][T14928] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 290.849868][T14925] vlan0: entered promiscuous mode [ 290.853978][T14928] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2606'. [ 290.920876][ T9867] tipc: Resetting bearer [ 291.408074][T14972] team0: Device vti0 is of different type [ 291.720466][T14987] netlink: 'syz.0.2621': attribute type 2 has an invalid length. [ 291.721717][T14986] __nla_validate_parse: 1 callbacks suppressed [ 291.721739][T14986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2622'. [ 291.730339][T14987] net_ratelimit: 26 callbacks suppressed [ 291.730358][T14987] netlink: zone id is out of range [ 291.794366][T14995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2621'. [ 291.808109][T14987] netlink: zone id is out of range [ 291.838006][T14995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.961612][T14987] netlink: zone id is out of range [ 291.987982][T14987] netlink: zone id is out of range [ 292.000091][T14987] netlink: zone id is out of range [ 292.009076][T15002] tipc: Enabling of bearer rejected, already enabled [ 292.011675][T14987] netlink: zone id is out of range [ 292.042343][T14987] netlink: zone id is out of range [ 292.047827][T14984] netlink: 'syz.0.2621': attribute type 4 has an invalid length. [ 292.098455][T14987] netlink: zone id is out of range [ 292.153356][T14987] netlink: zone id is out of range [ 292.322015][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.356308][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.378790][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.413879][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2630'. [ 292.431434][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.442296][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.454282][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.504101][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 292.970554][T15047] netlink: 'syz.0.2639': attribute type 29 has an invalid length. [ 292.986713][T15047] netlink: 'syz.0.2639': attribute type 29 has an invalid length. [ 293.084883][T15057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.092451][T15057] IPv6: NLM_F_CREATE should be set when creating new route [ 293.273523][T15070] netlink: 'syz.0.2646': attribute type 32 has an invalid length. [ 293.283813][T15070] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 294.145297][T15109] netlink: 'syz.4.2656': attribute type 3 has an invalid length. [ 294.366634][T15127] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20001 [ 294.721238][T15149] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 294.737300][T15149] 0ªî{X¹¦: entered allmulticast mode [ 294.754292][T15146] 0ªî{X¹¦: entered promiscuous mode [ 294.769787][T15146] 0ªî{X¹¦: left allmulticast mode [ 296.006137][T15214] bridge6: entered promiscuous mode [ 296.017909][T15214] bridge6: entered allmulticast mode [ 296.408538][T15234] bridge0: port 1(batadv1) entered blocking state [ 296.420112][T15234] bridge0: port 1(batadv1) entered disabled state [ 296.429785][T15234] batadv1: entered allmulticast mode [ 296.444689][T15234] batadv1: entered promiscuous mode [ 296.896624][T15264] __nla_validate_parse: 79 callbacks suppressed [ 296.896646][T15264] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2701'. [ 296.910949][ T9463] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 296.923010][ T9463] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 297.140336][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2705'. [ 297.342524][T15283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2708'. [ 297.362225][T15284] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2707'. [ 297.383947][T15285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2707'. [ 297.421244][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 297.539142][T15294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2712'. [ 297.552906][T15294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2712'. [ 297.678816][T15300] tipc: Enabling of bearer rejected, already enabled [ 297.971025][T15320] pimreg: entered allmulticast mode [ 297.978676][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2718'. [ 298.022078][T15314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.342289][T15329] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2720'. [ 298.473497][T15292] ip6_vti0: left promiscuous mode [ 298.489657][T15292] ip6_vti0: left allmulticast mode [ 298.523258][T15292] net_ratelimit: 17 callbacks suppressed [ 298.523272][T15292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.206105][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.214796][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.243331][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.262408][T15371] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 299.327132][ T9869] nci: nci_rx_work: unknown MT 0x6 [ 299.336048][T15371] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 299.456926][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.483411][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.505421][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.531735][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.549580][T15371] syzkaller0 speed is unknown, defaulting to 1000 [ 299.892489][T15401] erspan0: entered allmulticast mode [ 300.123745][T15410] tipc: Invalid UDP bearer configuration [ 300.123806][T15410] tipc: Enabling of bearer rejected, failed to enable media [ 300.193215][T15412] syzkaller0 speed is unknown, defaulting to 1000 [ 300.243214][T15418] netlink: 'syz.0.2741': attribute type 1 has an invalid length. [ 300.639134][T15440] delete_channel: no stack [ 301.211754][T15480] team_slave_0: mtu greater than device maximum [ 301.556092][T15499] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 301.789118][T15507] syzkaller0 speed is unknown, defaulting to 1000 [ 302.136064][T15519] netlink: 'syz.3.2772': attribute type 21 has an invalid length. [ 302.165388][T15520] __nla_validate_parse: 42 callbacks suppressed [ 302.165412][T15520] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2772'. [ 302.335077][T15534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.705359][T15520] bond0 (unregistering): Released all slaves [ 302.752575][T15542] 8021q: VLANs not supported on ip6_vti0 [ 303.027577][T15564] IPVS: length: 28 != 24 [ 303.054240][T15563] netlink: 'syz.4.2784': attribute type 9 has an invalid length. [ 303.159782][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 303.188592][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2785'. [ 303.194926][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'. [ 303.370030][T15579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 303.445899][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.555418][T15586] 8021q: VLANs not supported on wg1 [ 303.681351][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.716889][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 304.014640][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2803'. [ 304.142500][T15627] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 304.589217][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2812'. [ 304.599320][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2812'. [ 304.775559][ T9112] IPVS: starting estimator thread 0... [ 304.834632][T15667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2819'. [ 304.881117][T15665] IPVS: using max 31 ests per chain, 74400 per kthread [ 304.902487][T15672] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 305.585705][T15703] netlink: 'syz.4.2834': attribute type 4 has an invalid length. [ 306.625947][T15761] ip6gre3: entered allmulticast mode [ 306.787537][T15767] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 306.833429][T15767] netlink: 'syz.0.2862': attribute type 10 has an invalid length. [ 306.856735][T15767] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 306.865082][T15767] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.990316][T15777] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.033321][T15780] tipc: Enabled bearer , priority 0 [ 307.062349][T15780] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 307.094633][T15780] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 307.112177][T15780] tipc: Resetting bearer [ 307.155388][T15780] tipc: Resetting bearer [ 307.280203][T15787] netlink: 'syz.3.2870': attribute type 1 has an invalid length. [ 307.304118][ T9462] tipc: Resetting bearer [ 307.318552][T15787] __nla_validate_parse: 3 callbacks suppressed [ 307.318575][T15787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2870'. [ 307.355771][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'. [ 307.382601][T15791] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 307.394553][T15791] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 307.404265][T15791] CPU: 1 UID: 0 PID: 15791 Comm: modprobe Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 307.416015][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.426203][T15791] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 307.432048][T15791] Code: 01 48 c7 c7 40 51 98 8b be 4b 03 00 00 48 c7 c2 80 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62 [ 307.451770][T15791] RSP: 0018:ffffc9001c5276f8 EFLAGS: 00010206 [ 307.457863][T15791] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 880dad22b8888c00 [ 307.465937][T15791] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0 [ 307.473921][T15791] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619 [ 307.482186][T15791] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: dffffc0000000000 [ 307.490458][T15791] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000 [ 307.498530][T15791] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 307.507469][T15791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.514069][T15791] CR2: 00007f15d0ab8f98 CR3: 000000004f456000 CR4: 00000000003526f0 [ 307.522145][T15791] Call Trace: [ 307.525460][T15791] [ 307.528402][T15791] refill_obj_stock+0x254/0x850 [ 307.533273][T15791] ? refill_obj_stock+0x116/0x850 [ 307.538391][T15791] __memcg_slab_free_hook+0x127/0x3d0 [ 307.544032][T15791] ? unlink_anon_vmas+0x614/0x670 [ 307.549160][T15791] kmem_cache_free+0x223/0x400 [ 307.553952][T15791] unlink_anon_vmas+0x614/0x670 [ 307.558835][T15791] free_pgtables+0x7bf/0xaf0 [ 307.563465][T15791] ? __pfx_free_pgtables+0x10/0x10 [ 307.568683][T15791] ? __pfx_down_write+0x10/0x10 [ 307.573567][T15791] ? __mas_set_range+0x12f/0x3c0 [ 307.578607][T15791] exit_mmap+0x444/0xb50 [ 307.583004][T15791] ? uprobe_clear_state+0x20f/0x290 [ 307.588227][T15791] ? __pfx_exit_mmap+0x10/0x10 [ 307.593120][T15791] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 307.599007][T15791] ? __pfx_exit_aio+0x10/0x10 [ 307.603750][T15791] ? uprobe_clear_state+0x274/0x290 [ 307.609056][T15791] __mmput+0x118/0x420 [ 307.613153][T15791] exit_mm+0x1da/0x2c0 [ 307.617411][T15791] ? __pfx_exit_mm+0x10/0x10 [ 307.622105][T15791] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 307.627618][T15791] ? rcu_is_watching+0x15/0xb0 [ 307.632420][T15791] do_exit+0x648/0x22e0 [ 307.636625][T15791] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.642026][T15791] ? __pfx_do_exit+0x10/0x10 [ 307.646766][T15791] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.652276][T15791] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.657585][T15791] do_group_exit+0x21c/0x2d0 [ 307.662302][T15791] __x64_sys_exit_group+0x3f/0x40 [ 307.667514][T15791] x64_sys_call+0x21f7/0x2200 [ 307.672203][T15791] do_syscall_64+0xfa/0x3b0 [ 307.676771][T15791] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.682180][T15791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.688347][T15791] ? clear_bhb_loop+0x60/0xb0 [ 307.693125][T15791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.699243][T15791] RIP: 0033:0x7f4ce2c766c5 [ 307.703669][T15791] Code: Unable to access opcode bytes at 0x7f4ce2c7669b. [ 307.710791][T15791] RSP: 002b:00007fff0c2c2ec8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 307.719321][T15791] RAX: ffffffffffffffda RBX: 00007f4ce2d77fe8 RCX: 00007f4ce2c766c5 [ 307.727401][T15791] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 307.735400][T15791] RBP: 0000000000000001 R08: 00007fff0c2c2e58 R09: 0000000000000000 [ 307.743396][T15791] R10: 00007fff0c2c2cf0 R11: 0000000000000202 R12: 0000000000000000 [ 307.751562][T15791] R13: 0000000000000001 R14: 00007f4ce2d76680 R15: 00007f4ce2d78000 [ 307.759642][T15791] [ 307.762682][T15791] Modules linked in: [ 307.767712][T15791] ---[ end trace 0000000000000000 ]--- [ 307.773331][T15791] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 307.779275][T15791] Code: 01 48 c7 c7 40 51 98 8b be 4b 03 00 00 48 c7 c2 80 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62 [ 307.799396][T15791] RSP: 0018:ffffc9001c5276f8 EFLAGS: 00010206 [ 307.805713][T15791] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 880dad22b8888c00 [ 307.813975][T15791] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0 [ 307.822375][T15791] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619 [ 307.830709][T15791] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: dffffc0000000000 [ 307.838832][T15791] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000 [ 307.847205][T15791] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 307.856829][T15791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.863828][T15791] CR2: 00007f15d0ab8f98 CR3: 000000004f456000 CR4: 00000000003526f0 [ 307.872202][T15791] Kernel panic - not syncing: Fatal exception [ 307.878848][T15791] Kernel Offset: disabled [ 307.883623][T15791] Rebooting in 86400 seconds..