last executing test programs: 13.88664746s ago: executing program 2 (id=2830): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x9) (async) r2 = accept(r1, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000007c0)={r4, 0x5}, &(0x7f0000001800)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r4, 0xa}, &(0x7f00000001c0)=0x8) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getpeername$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) connect$bt_l2cap(r6, &(0x7f0000000240)={0x1f, 0x5, @none, 0xc476, 0x2}, 0xe) (async, rerun: 32) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) bind$bt_sco(r7, &(0x7f0000000280)={0x1f, @none}, 0x8) (async) listen(r7, 0x0) (async, rerun: 32) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x13, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0) 13.64025149s ago: executing program 2 (id=2833): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)={@align, {0x4, 0x3, 0x9, 0xc}}, 0x9e, &(0x7f0000000080), &(0x7f00000000c0)=0x1ff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x2000}) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 13.498007142s ago: executing program 2 (id=2835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x4, 0x0, 0x800000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x26, 0x2c0, 0x6, 0x80, 0x4, 0xe5, 0x80, 0x78, 0xac, 0xa3, [0x90, 0x6, 0x5, 0xff, 0x2, 0x88b1, 0x6, 0x8]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x8b}}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.212626498s ago: executing program 2 (id=2875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x98, 0x2, 0xa, 0x604c, 0x1, 0x800}, {0xb2, 0x2, 0x940, 0x0, 0xcca, 0x5}, 0x1, 0xd, 0x1554}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d00000000a1010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.955911554s ago: executing program 2 (id=2883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x1000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) bind$xdp(r2, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x12, r2}, 0x10) accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000001840)={&(0x7f00000001c0)=@qipcrtr, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/131, 0x83}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f0000000780)=""/72, 0x48}], 0x3, &(0x7f0000000840)=""/4096, 0x1000}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x33}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 8.731751417s ago: executing program 2 (id=2887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8, 0x20, 0x10, 0x4, {{0x23, 0x4, 0x0, 0x2e, 0x8c, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x13, 0x9e, [@loopback, @remote, @empty, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x57, 0x1, [{0x2, 0xd, "3947dfe85337efd98eedd4"}, {0x2, 0xf, "91a779478df00aaaef901a0e1f"}, {0x7, 0x10, "f43e965e836f50ca463f80d6e0f6"}, {0x7, 0x11, "0ee96e39f1ac56ee1aa9b03ad415be"}, {0x7, 0xd, "81798b11f0e9ca7f624e49"}, {0x1, 0x7, "7f9b994303"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d6174636800000035e64f5d01068eb1292c00028014000300840011000000000002000f116b61979e0900945b6e2020f7dc76693dbd317aa301006c3274700000000008000240000000000900010073797a30000000000900020073797a3200"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000280)={&(0x7f0000000300)=0x800000005, 0x8001, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001200)}) 7.044354634s ago: executing program 1 (id=2909): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000500)=0x18) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000010c0)}], 0x1, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) 6.950122534s ago: executing program 1 (id=2910): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x5bc, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x5a8, 0x1, [@m_vlan={0x4c, 0xa, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x100, 0x7, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x456a4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0xffff, 0x10000000, 0x2, 0x1}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x88, 0x6, "cf896ad519cf71a8c6b50ac5176b0d05a1b7b9be35d803d0b7e59e16f625197250087b99b9240fa0bbaf171ec5f3ecd4db91fc59de2b1aa3d67b26a59adc5473882e561d8634677a7043d6925f5eeb7f9ba4e18e71eb832223c07f1e0135ca8ce4b65fd3b81f533f67cc74ab432bad39bb01539b9b85edff60af92f95d99366d4eaa0631"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x130, 0xe, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x100, 0xffffffffffffffff, 0x9, 0x1000}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x4, 0x2, 0xff}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x45, 0x0, 0x8, 0x2}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x3, 0x3, 0x5}, 0x75}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0xb3bc, 0x7, 0x6, 0x3ff}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x3, 0x7ff, 0x9}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x80000001, 0x76}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8c20, 0x7, 0x4, 0xd540, 0xffffffff}, 0x64}}]}, {0x21, 0x6, "0fcb57bb2b4175fa8ea929056573ab13f97209c551da54f56b4ea491e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xb0, 0x3, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x973, 0x3, 0x401, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x5, 0x5, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x7, 0x3, 0x2, 0x4}, 0x98}}]}, {0x2c, 0x6, "74fdea128fb7d55f3d836234d102901c0369065442622372f433dff542aebd3cfe277463c0bf64b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xcc, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x95, 0x6, "7f3ba7b486a8724bd2ddd2ed2a640a4f1d339217b18cc9197621c462572815efef3398267c331d82d4401c4155a910714cd0a05053501e27942c53bf5e67efbf613c09b4697e96b7e097890fba0de9bdc1595282477b50230884dad97224b8faf39dd80c91c844cc85e33b6e14e4efc8f1a2dfd79c79ae2eb02e04f8f8e51dac510a2bf248346a575341662848fe0aee8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xf8, 0x1a, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xff01}, @TCA_IFE_DMAC={0xa, 0x3, @random="ae42cf9b2408"}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @random="be6799149285"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x6, 0x7fff, 0x9ea0}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xec}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x25e9}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x44, 0x6, "9f2de20aa648ceb8151410fd8efc716126b8e5dbb0936f1648554c952c532c70415916948a81f049bcea075c86e33fd5cc502164bc3e578b4370dde7c56ac576"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xb4, 0x1d, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x8, 0x40, 0x6, 0x6}, {0x6, 0x8, 0x69, 0x2}, {0x4, 0xd, 0xfd, 0x7}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x50, 0x6, "2a4db50c4e78aa8719dd79759b79c5cfc67a1eb03278edc21299c1665145eca77d1e46731608ada780994c674668bb5c0e57018f109a0cb0db90356c620c65eb953903cc6946592c6aaa25e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x5bc}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31087a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) 6.596355884s ago: executing program 1 (id=2918): r0 = socket$isdn(0x22, 0x3, 0x23) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @private}, &(0x7f00000001c0)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@func={0xf, 0x0, 0x0, 0xc, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0, 0x5f, 0x0, 0x2e, 0x2e, 0x2e]}}, &(0x7f00000002c0)=""/69, 0x39, 0x45, 0x1, 0x2, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1, &(0x7f0000000040)=@raw=[@generic={0x8, 0xf, 0x8, 0xf2, 0x1}], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x42, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x80000000, 0x10}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x1], &(0x7f0000000400)=[{0x4, 0x4, 0xc, 0xa}, {0x0, 0x1, 0x1, 0x6}, {0x1, 0x1, 0x10}, {0x2, 0x5, 0xf, 0x2}, {0x1, 0x4, 0xe, 0x5}, {0x4, 0x5, 0x7}, {0x1, 0x4, 0x10, 0x9}], 0x10, 0x5}, 0x94) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) 6.16081824s ago: executing program 1 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000600"}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0, 0x6}) 4.856277712s ago: executing program 1 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x4000}) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x29, 0x800, 0xc314) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f0000000340)="448b7cff000000000000108a15df", 0xe}, {&(0x7f0000000500)="ce03be93f6b49fe72c169c8dd78f1000000038ef93c403155b", 0x19}], 0x3) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r7, &(0x7f0000000000)={0x2a, 0x1, 0xfffffffe}, 0xc) 4.481030707s ago: executing program 1 (id=2929): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, r0, 0x215eb000) unshare(0x50000900) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) ioctl$sock_TIOCINQ(r1, 0x61d8, 0x0) 2.875664485s ago: executing program 4 (id=2937): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) 2.519136852s ago: executing program 4 (id=2940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x28, r2, 0x1cb59a75dde80c6d, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}}, 0x408d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0x3, 0xffff}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x40, 0x0, 0x3, 0x5, 0x5, 0x1ff, 0x8001}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x20, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@typed={0x8, 0x154, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.223664499s ago: executing program 3 (id=2944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.047759874s ago: executing program 0 (id=2945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10000000}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.046940478s ago: executing program 4 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) pipe(&(0x7f0000000200)) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/228, 0xe4}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}, {0x0}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x102, 0x0) 1.286358467s ago: executing program 3 (id=2947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) clock_gettime(0xfffffffffffffffd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8005, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x0, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r4, &(0x7f00000002c0)=ANY=[], 0xc2) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[], 0xffdd) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.187240641s ago: executing program 0 (id=2948): r0 = socket$phonet(0x23, 0x2, 0x1) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={r0, r1}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) ioctl$SIOCAX25GETINFOOLD(r7, 0x89e9, 0x0) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@generic={0x3, 0x4, 0x48000}) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x1, r6, 0x7fffffff}, 0xc) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.175165375s ago: executing program 4 (id=2949): r0 = socket$inet(0x2, 0x1, 0x6) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x5, 0x4}}, 0x10) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0xffed}, {0x0, 0x3}, {0xd}}}, 0xffffffffffffff70}}, 0x880) (async) close(0x3) 934.238435ms ago: executing program 0 (id=2950): syz_emit_ethernet(0x2a, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e4ffffff000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r1}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r1}, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x150, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "5bc8d66df65764fb4a5e49a3fcc76be6"}}}, @TCA_RATE={0x6, 0x5, {0x6d, 0x7}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7a, 0x6, 0x4, 0x4, 0x0, 0x6, 0x1, 0x4}}, {0xc, 0x2, [0x800, 0x1ff, 0x6, 0x3]}}, {{0x1c, 0x1, {0x8, 0x8, 0xf9, 0x5, 0x1, 0x1, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0x5, 0x2, 0xfff, 0x5]}}]}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf, 0x1000, 0x7, 0x3, 0x1, 0x4, 0x2}}, {0x8, 0x2, [0xf9, 0x8001]}}, {{0x1c, 0x1, {0x4f, 0x8, 0xff5a, 0x8, 0x1, 0x6d, 0x7ff, 0x6}}, {0x10, 0x2, [0x7cf, 0x5, 0x8, 0x9, 0x4, 0x4]}}, {{0x1c, 0x1, {0x9, 0x3e, 0xff, 0x1000, 0x2, 0xf, 0x9, 0x4}}, {0xc, 0x2, [0x5107, 0x0, 0xa0, 0x4]}}, {{0x1c, 0x1, {0xe, 0xac, 0xa37, 0x8, 0x0, 0x40, 0x4, 0x6}}, {0x10, 0x2, [0x5, 0x7, 0x7ff, 0x8, 0x3, 0xdc]}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x200, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x5}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0xd8, 0x6, @multicast}, 0x14) 919.352803ms ago: executing program 4 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4040009}, 0x0) 818.860564ms ago: executing program 3 (id=2952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa20000001e000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 719.908184ms ago: executing program 4 (id=2953): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r7, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r5, 0x0, 0x8a, 0x70, &(0x7f0000000700)="d3615c54f3d0b8125ddcd24554110d8dea147605e21c927d27f9255c78981a86bb9e0051bfb387609dd8623f2290e9414f40014cbb0c7fe789635dd384c60a754235537c095808dd592e5463b56f0fb43f5696221c7ca41a0a2624d66e054c8a9feea84f2a97a9ecc923fa2c7462017672dbf6347de14b6a4655281aeca244dc6966ab69dfd5f783dd96", &(0x7f0000000ac0)=""/112, 0x4, 0x0, 0x7, 0xf6, &(0x7f0000000b40)="6bf24312fe446f", &(0x7f0000000d00)="7de80e1e8b7188533229327377be163d671a81c4969c74c8c981e03bd5ae78d1190586cdd7140e14342ef36d8e3bd74a4eaec91cd68eba0a603af273f7c6682016da3145b0f2fa61c5e12a4c66c5b85df3a0e79004847ea687838b60e1ffd4ac54c6e28ccdd158240494bfb6400b4e03ab45e558e96828358c08d7803da4ddb12343a7eff899edf790cf6344d0b0fdbe3fcc538f635021bf7492364e395c7127ee8454a4f64ab8e82ccff3ada61d435f9069f4e9b7d637b4cc902b7a1d1c64642a363a192faf4a966ff936c3e519e787698e07d60513a1e9659df3f403bd5db5f0233a3182a13f9e9b4b57c873885746725b4ecaff98", 0x5, 0x0, 0xffffffd2}, 0x50) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/286], 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r10, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) r14 = gettid() syz_open_procfs$namespace(r14, &(0x7f0000000040)='ns/uts\x00') splice(r9, 0x0, r13, 0x0, 0x80, 0x4) write(r11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000007f000000000000000a00000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000fcb60300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x0, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 661.590399ms ago: executing program 3 (id=2954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x448d0) 492.449631ms ago: executing program 3 (id=2955): r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @remote, 0x8000, 0x20, 0x7, 0x8}}) 337.228096ms ago: executing program 0 (id=2956): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000006306fffdbca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000018002604fdffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 323.493927ms ago: executing program 0 (id=2957): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020000002400000004000000080000d2", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000600100000001000060050200001c16338a1f503ff0"], 0x48}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008001) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00050400000000da5a15e113"], 0x114}], 0x1, 0x0, 0x0, 0x881}, 0x0) 160.440703ms ago: executing program 0 (id=2958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) pipe(&(0x7f0000000200)) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/228, 0xe4}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}, {0x0}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x102, 0x0) 0s ago: executing program 3 (id=2959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028008a031beff9f7b56"], 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x6) kernel console output (not intermixed with test programs): [ 148.321871][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 148.394217][ T8335] netlink: 'syz.4.625': attribute type 11 has an invalid length. [ 148.412452][ T8335] netlink: 'syz.4.625': attribute type 11 has an invalid length. [ 148.450595][ T8325] bond0: (slave geneve3): making interface the new active one [ 148.463636][ T8325] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 148.473844][ T8332] bond0: ARP target 8.4.0.0 is already present [ 148.485233][ T8332] bond0: option arp_ip_target: invalid value (1032) [ 148.521982][ T3471] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.556981][ T3471] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.593614][ T3471] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.623887][ T3471] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 148.784169][ T8345] xt_cluster: node mask cannot exceed total number of nodes [ 149.245471][ T8369] vlan2: entered allmulticast mode [ 149.263051][ T8369] bond0: entered allmulticast mode [ 149.280315][ T8369] bond_slave_0: entered allmulticast mode [ 149.299089][ T8369] bond_slave_1: entered allmulticast mode [ 149.533372][ T8378] netlink: 'syz.2.637': attribute type 63 has an invalid length. [ 149.582157][ T8383] tc_dump_action: action bad kind [ 149.593375][ T8385] netlink: 'syz.2.637': attribute type 63 has an invalid length. [ 150.122327][ T8409] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 150.152095][ T8408] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 150.306978][ T8413] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 150.358182][ T8413] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 150.386989][ T8413] bond1: (slave ip6gre1): making interface the new active one [ 150.407053][ T8413] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 150.672763][ T8437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.808041][ T8443] : renamed from veth0_to_bond (while UP) [ 150.894980][ T8436] tipc: Enabling of bearer rejected, failed to enable media [ 151.294458][ T8479] netlink: 'syz.1.662': attribute type 1 has an invalid length. [ 151.375016][ T8479] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 152.127846][ T8520] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 152.585949][ T8542] __nla_validate_parse: 8 callbacks suppressed [ 152.585971][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 152.611802][ T8542] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 152.683077][ T8542] team1: entered promiscuous mode [ 152.694646][ T8542] team1: entered allmulticast mode [ 152.773275][ T8552] validate_nla: 1 callbacks suppressed [ 152.773296][ T8552] netlink: 'syz.0.686': attribute type 2 has an invalid length. [ 152.814112][ T8552] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 152.833687][ T50] Bluetooth: hci4: link tx timeout [ 152.841903][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.223344][ T8574] Bluetooth: MGMT ver 1.23 [ 153.251237][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.690'. [ 153.286012][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.690'. [ 153.295900][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.690'. [ 153.320272][ T8578] netlink: 88 bytes leftover after parsing attributes in process `syz.1.690'. [ 153.359688][ T8575] macsec0: entered promiscuous mode [ 153.615106][ T8586] syzkaller0: entered allmulticast mode [ 153.627745][ T8591] bond2: option mode: unable to set because the bond device has slaves [ 153.640975][ T8591] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 153.664859][ T8586] syzkaller0: left allmulticast mode [ 153.777440][ T8598] netlink: 144 bytes leftover after parsing attributes in process `syz.3.701'. [ 153.807089][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.815646][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.930000][ T8591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.947194][ T8591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.091651][ T8591] veth0_macvtap: left allmulticast mode [ 154.101155][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 154.117676][ T1334] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.141732][ T1334] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.164085][ T1334] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.186025][ T1334] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.397542][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 154.440289][ T8619] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.568409][ T8624] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 154.734390][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 154.815499][ T8634] batadv1: entered allmulticast mode [ 154.878547][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.916582][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 154.972019][ T8641] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.714'. [ 154.996215][ T8632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.435719][ T8660] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 155.623642][ T8660] bond3: entered promiscuous mode [ 155.633085][ T8660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.707571][ T8670] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.737916][ T8674] bond3: (slave bridge4): making interface the new active one [ 155.758000][ T8674] bridge4: entered promiscuous mode [ 155.774332][ T8674] bridge4: left promiscuous mode [ 156.095997][ T8691] netlink: 'syz.0.728': attribute type 10 has an invalid length. [ 156.151987][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.188348][ T8691] bridge_slave_1: left allmulticast mode [ 156.223470][ T8691] bridge_slave_1: left promiscuous mode [ 156.248487][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.277647][ T8691] bridge_slave_1: entered allmulticast mode [ 156.281144][ T8704] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.290544][ T8691] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 156.614899][ T8716] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 156.625873][ T8725] IPVS: set_ctl: invalid protocol: 46 172.30.0.5:20002 [ 156.732156][ T8729] netlink: 'syz.0.738': attribute type 7 has an invalid length. [ 156.824484][ T8738] netlink: 'syz.1.740': attribute type 4 has an invalid length. [ 156.853219][ T8738] .`: renamed from  (while UP) [ 157.211205][ T8751] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 157.228335][ T8751] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 157.511048][ T5880] IPVS: starting estimator thread 0... [ 157.576779][ T8782] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.618940][ T8779] IPVS: using max 24 ests per chain, 57600 per kthread [ 157.687809][ T8784] __nla_validate_parse: 9 callbacks suppressed [ 157.687831][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 157.736033][ T8784] netlink: 56 bytes leftover after parsing attributes in process `syz.4.754'. [ 158.249022][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 158.407935][ T8820] netlink: 10 bytes leftover after parsing attributes in process `syz.1.767'. [ 158.453275][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 158.463041][ T8820] lo: entered promiscuous mode [ 158.470736][ T8820] tunl0: entered promiscuous mode [ 158.477678][ T8820] gre0: entered promiscuous mode [ 158.489891][ T8820] gretap0: entered promiscuous mode [ 158.498348][ T8820] erspan0: entered promiscuous mode [ 158.510313][ T8820] ip_vti0: entered promiscuous mode [ 158.518715][ T8825] netlink: 2 bytes leftover after parsing attributes in process `syz.2.768'. [ 158.529241][ T8825] tc_dump_action: action bad kind [ 158.538293][ T8827] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 158.550397][ T8827] netlink: 'syz.0.769': attribute type 2 has an invalid length. [ 158.650224][ T8835] SET target dimension over the limit! [ 158.792822][ T8841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.772'. [ 158.826984][ T8842] netlink: 'syz.1.773': attribute type 2 has an invalid length. [ 158.860900][ T8842] netlink: 'syz.1.773': attribute type 2 has an invalid length. [ 158.894004][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 158.987654][ T8852] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.776'. [ 159.625882][ T8888] netlink: 'syz.3.787': attribute type 25 has an invalid length. [ 159.647406][ T8891] netlink: 'syz.0.788': attribute type 21 has an invalid length. [ 159.666774][ T8889] netlink: 'syz.1.786': attribute type 3 has an invalid length. [ 159.681915][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 159.764009][ T8897] netlink: 'syz.2.790': attribute type 4 has an invalid length. [ 159.833410][ T8897] netlink: 'syz.2.790': attribute type 4 has an invalid length. [ 159.860633][ T8900] netlink: 'syz.4.791': attribute type 7 has an invalid length. [ 159.926582][ T8897] lo: Caught tx_queue_len zero misconfig [ 159.948293][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.981406][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.026195][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.057227][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.084004][ T8910] wg1: entered promiscuous mode [ 160.093052][ T8910] wg1: entered allmulticast mode [ 160.529034][ T8940] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.072699][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.806517][ T8999] syzkaller1: entered promiscuous mode [ 161.821296][ T8999] syzkaller1: entered allmulticast mode [ 161.925505][ T9002] IPVS: sh: FWM 3 0x00000003 - no destination available [ 162.102896][ T9010] syzkaller0: entered promiscuous mode [ 162.108706][ T9010] syzkaller0: entered allmulticast mode [ 164.600500][ T9028] __nla_validate_parse: 12 callbacks suppressed [ 164.600523][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 164.616735][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 164.679219][ T8993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.025236][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 165.107976][ T9033] team0 (unregistering): Port device team_slave_0 removed [ 165.136487][ T9033] team0 (unregistering): Port device team_slave_1 removed [ 165.244483][ T9031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.251231][ T9056] syzkaller0: entered promiscuous mode [ 165.268154][ T9056] syzkaller0: entered allmulticast mode [ 165.351713][ T9059] validate_nla: 1 callbacks suppressed [ 165.351733][ T9059] netlink: 'syz.3.835': attribute type 10 has an invalid length. [ 165.379280][ T9059] netlink: 228 bytes leftover after parsing attributes in process `syz.3.835'. [ 165.411578][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 165.443708][ T9063] netlink: 256 bytes leftover after parsing attributes in process `syz.2.837'. [ 165.474285][ T9063] netlink: 256 bytes leftover after parsing attributes in process `syz.2.837'. [ 165.849294][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 165.898653][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.844'. [ 166.208323][ T9096] syzkaller0: entered promiscuous mode [ 166.214534][ T9096] syzkaller0: entered allmulticast mode [ 166.586480][ T9077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 166.599595][ T9077] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 166.655696][ T9077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.662407][ T9077] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 166.761127][ T9077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.779852][ T9077] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 166.812428][ T9110] can: request_module (can-proto-0) failed. [ 166.845091][ T9077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.854138][ T9077] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 166.877327][ T9077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.887025][ T9077] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 168.491987][ T9110] vcan1: entered promiscuous mode [ 168.497182][ T9110] vcan1: entered allmulticast mode [ 168.807813][ T9125] netlink: 'syz.2.855': attribute type 11 has an invalid length. [ 168.839633][ T9125] netlink: 104 bytes leftover after parsing attributes in process `syz.2.855'. [ 169.358741][ T9148] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 169.466773][ T9148] team1: entered promiscuous mode [ 169.499012][ T9148] team1: entered allmulticast mode [ 169.596824][ T9149] syzkaller0: entered promiscuous mode [ 169.607521][ T9149] syzkaller0: entered allmulticast mode [ 169.890924][ T9167] __nla_validate_parse: 7 callbacks suppressed [ 169.890945][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 170.667808][ T9186] netlink: 10 bytes leftover after parsing attributes in process `syz.0.875'. [ 172.125486][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.873'. [ 172.397822][ T9205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.922316][ T9228] sctp: [Deprecated]: syz.4.889 (pid 9228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.922316][ T9228] Use struct sctp_sack_info instead [ 173.168640][ T9227] syzkaller0: entered promiscuous mode [ 173.190086][ T9227] syzkaller0: entered allmulticast mode [ 173.396840][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 173.607872][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.898'. [ 173.853833][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 175.651738][ T9239] syzkaller0: entered promiscuous mode [ 175.657337][ T9239] syzkaller0: entered allmulticast mode [ 177.918582][ T9294] openvswitch: netlink: Missing key (keys=40, expected=100) [ 177.956162][ T9294] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 178.034703][ T9294] 8021q: VLANs not supported on ip_vti0 [ 178.454538][ T9319] syzkaller0: entered promiscuous mode [ 178.470717][ T9319] syzkaller0: entered allmulticast mode [ 178.524771][ T9338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.919'. [ 178.534378][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 178.557963][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.915'. [ 178.715351][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'. [ 178.744455][ T9342] netlink: 120 bytes leftover after parsing attributes in process `syz.1.921'. [ 178.772340][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 178.856670][ T9342] netlink: 'syz.1.921': attribute type 21 has an invalid length. [ 178.865435][ T9342] netlink: 'syz.1.921': attribute type 22 has an invalid length. [ 178.873748][ T9342] netlink: 'syz.1.921': attribute type 23 has an invalid length. [ 178.882077][ T9342] netlink: 'syz.1.921': attribute type 25 has an invalid length. [ 178.890353][ T9342] netlink: 'syz.1.921': attribute type 26 has an invalid length. [ 178.898477][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.921'. [ 178.911182][ T9342] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 178.919515][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 181.137193][ T9367] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 181.465639][ T9378] syzkaller0: entered promiscuous mode [ 181.488740][ T9378] syzkaller0: entered allmulticast mode [ 181.559638][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 181.757258][ T9388] geneve2: entered promiscuous mode [ 181.764650][ T9388] geneve2: entered allmulticast mode [ 181.770818][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 181.792602][ T6673] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 181.816337][ T6673] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 181.904298][ T175] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 181.924897][ T175] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 181.972714][ T1209] IPVS: starting estimator thread 0... [ 182.017090][ T9404] syzkaller0: entered promiscuous mode [ 182.023092][ T9404] syzkaller0: entered allmulticast mode [ 182.031927][ T9403] lo: MTU too low for tipc bearer [ 182.044465][ T9403] tipc: Enabling of bearer rejected, failed to enable media [ 182.068939][ T9411] IPVS: using max 27 ests per chain, 64800 per kthread [ 182.277352][ T9431] Cannot find set identified by id 0 to match [ 184.797778][ T9415] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 184.813892][ T9431] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 184.856200][ T9464] __nla_validate_parse: 2 callbacks suppressed [ 184.856222][ T9464] netlink: 11 bytes leftover after parsing attributes in process `syz.1.955'. [ 184.901701][ T9464] netlink: 11 bytes leftover after parsing attributes in process `syz.1.955'. [ 185.842051][ T9483] netlink: 64 bytes leftover after parsing attributes in process `syz.2.959'. [ 185.995017][ T9494] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 186.040029][ T9501] ieee802154 phy0 wpan0: encryption failed: -90 [ 186.194162][ T9494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.222503][ T9505] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 186.292812][ T9505] netlink: 96 bytes leftover after parsing attributes in process `syz.2.965'. [ 186.302249][ T9505] netlink: 1 bytes leftover after parsing attributes in process `syz.2.965'. [ 186.356639][ T9503] vlan2: entered promiscuous mode [ 186.370477][ T9503] bond5: entered promiscuous mode [ 186.398522][ T9503] vlan2: entered allmulticast mode [ 186.408987][ T9503] bond5: entered allmulticast mode [ 186.465641][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.962'. [ 186.977155][ T9530] netlink: 76 bytes leftover after parsing attributes in process `syz.4.968'. [ 187.015397][ T9530] syzkaller0: entered promiscuous mode [ 187.027724][ T9530] syzkaller0: entered allmulticast mode [ 187.509516][ T9540] syzkaller0: entered promiscuous mode [ 187.534343][ T9540] syzkaller0: entered allmulticast mode [ 188.213951][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.983'. [ 188.582178][ T9585] syzkaller0: entered promiscuous mode [ 188.615581][ T9585] syzkaller0: entered allmulticast mode [ 189.444674][ T9621] netlink: 830 bytes leftover after parsing attributes in process `syz.0.998'. [ 189.567075][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 190.320211][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 190.547680][ T9674] syzkaller0: entered allmulticast mode [ 190.625903][ T9674] syzkaller0 (unregistering): left allmulticast mode [ 190.730205][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 190.896287][ T9695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.083845][ T9702] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 191.166843][ T9705] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1024'. [ 191.250231][ T9710] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1025'. [ 191.296836][ T9714] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 191.484248][ T9723] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1029'. [ 191.604304][ T9728] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'. [ 192.165914][ T9754] syzkaller0: entered promiscuous mode [ 192.173438][ T9754] syzkaller0: entered allmulticast mode [ 192.192309][ T9754] 0: reclassify loop, rule prio 0, protocol 800 [ 192.483230][ T9763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.724130][ T9773] sctp: [Deprecated]: syz.4.1046 (pid 9773) Use of int in maxseg socket option. [ 192.724130][ T9773] Use struct sctp_assoc_value instead [ 192.756640][ T9775] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1048'. [ 192.824740][ T9780] netlink: 'syz.2.1049': attribute type 25 has an invalid length. [ 192.831702][ T9777] syzkaller1: entered promiscuous mode [ 192.849669][ T9777] syzkaller1: entered allmulticast mode [ 192.870432][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 193.308636][ T9805] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 193.335554][ T9805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1056'. [ 193.476537][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 193.646650][ T9816] netlink: Unknown conntrack attr (0) [ 193.710219][ T9817] syzkaller0: left allmulticast mode [ 194.110737][ T9833] bond2: option fail_over_mac: invalid value (16) [ 194.155382][ T9833] bond2 (unregistering): Released all slaves [ 194.221870][ T9848] netlink: 'syz.4.1067': attribute type 6 has an invalid length. [ 194.377396][ T9838] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 194.486572][ T9856] dvmrp0: entered allmulticast mode [ 194.679858][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.687898][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.342909][ T9889] __nla_validate_parse: 5 callbacks suppressed [ 195.342930][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 195.377189][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1081'. [ 195.387922][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1081'. [ 195.400924][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 195.687762][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1085'. [ 195.786159][ T9912] xt_addrtype: ipv6 does not support BROADCAST matching [ 195.919664][ T9917] macvlan2: entered promiscuous mode [ 195.979020][ T9917] macvlan2: entered allmulticast mode [ 195.992200][ T9917] bond2: entered promiscuous mode [ 196.000596][ T9917] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.021162][ T9917] bond2: left promiscuous mode [ 196.037866][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 196.047246][ T9929] openvswitch: netlink: Missing key (keys=40, expected=80) [ 196.056561][ T9929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1091'. [ 196.657420][ T9949] netem: unknown loss type 0 [ 196.681690][ T9949] netem: change failed [ 196.794686][ T9953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1100'. [ 196.925547][ T9950] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 197.324561][ T9978] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1108'. [ 197.336462][ T9978] 8021q: VLANs not supported on ip_vti0 [ 198.024102][T10011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.468013][T10032] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1126'. [ 199.167428][T10058] netlink: 'syz.4.1133': attribute type 2 has an invalid length. [ 199.231581][T10066] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 199.271134][T10066] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 199.376790][T10082] netlink: 'syz.4.1139': attribute type 3 has an invalid length. [ 199.814064][T10099] syzkaller0: entered promiscuous mode [ 199.829438][T10099] syzkaller0: entered allmulticast mode [ 199.853948][T10099] netlink: 'syz.4.1144': attribute type 2 has an invalid length. [ 200.915925][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 200.957776][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1161'. [ 201.462539][T10155] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1167'. [ 201.481965][T10155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.496830][T10155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.786004][T10180] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 201.845656][T10180] bond2: entered promiscuous mode [ 201.866696][T10180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.016210][T10177] tipc: Enabling of bearer rejected, failed to enable media [ 202.074716][T10188] veth0: entered promiscuous mode [ 202.143560][T10187] veth0: left promiscuous mode [ 202.171484][T10190] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 202.615775][T10205] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 202.684938][T10208] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1182'. [ 202.793753][T10205] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 203.202939][T10239] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1189'. [ 203.386401][T10249] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 203.520914][T10249] bond3: entered promiscuous mode [ 203.551678][T10249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.787162][T10249] bond3: (slave bridge2): making interface the new active one [ 203.830378][T10249] bridge2: entered promiscuous mode [ 203.830943][T10273] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1192'. [ 203.849868][T10249] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 204.246827][T10280] gtp1: entered promiscuous mode [ 204.253287][T10280] gtp1: entered allmulticast mode [ 204.479576][T10293] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1199'. [ 204.540178][T10298] veth1_macvtap: left promiscuous mode [ 204.600926][T10293] 0: renamed from hsr_slave_1 (while UP) [ 204.616887][T10293] 0: entered allmulticast mode [ 204.633895][T10293] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 205.126713][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 205.898480][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 206.013773][T10361] macsec2: entered promiscuous mode [ 206.124813][T10370] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1224'. [ 206.365443][T10376] netlink: 'syz.2.1225': attribute type 21 has an invalid length. [ 206.421960][T10376] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1225'. [ 206.676287][T10387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1230'. [ 207.065125][T10401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1236'. [ 207.138728][T10408] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1238'. [ 207.182504][T10408] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1238'. [ 207.250183][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 207.250954][T10408] GUP no longer grows the stack in syz.0.1238 (10408): 200000003000-20000000a000 (200000001000) [ 207.273663][T10408] CPU: 0 UID: 0 PID: 10408 Comm: syz.0.1238 Not tainted syzkaller #0 PREEMPT(full) [ 207.273697][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.273709][T10408] Call Trace: [ 207.273718][T10408] [ 207.273727][T10408] dump_stack_lvl+0xe8/0x150 [ 207.273765][T10408] __get_user_pages+0x2453/0x29d0 [ 207.273821][T10408] ? __gup_longterm_locked+0xc4e/0x1630 [ 207.273849][T10408] ? down_read_killable+0x1bb/0x340 [ 207.273877][T10408] ? try_get_folio+0xec/0x650 [ 207.273909][T10408] __gup_longterm_locked+0xdcf/0x1630 [ 207.273964][T10408] gup_fast_fallback+0x1d82/0x22e0 [ 207.274024][T10408] ? __pfx_gup_fast_fallback+0x10/0x10 [ 207.274055][T10408] ? is_valid_gup_args+0x11f/0x200 [ 207.274084][T10408] ? get_user_pages_fast+0x4d/0xb0 [ 207.274114][T10408] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 207.274157][T10408] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 207.274201][T10408] iov_iter_get_pages2+0x5e/0xa0 [ 207.274229][T10408] __se_sys_vmsplice+0x7b3/0x1490 [ 207.274282][T10408] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 207.274312][T10408] ? __pfx_futex_wait+0x10/0x10 [ 207.274350][T10408] ? lockdep_hardirqs_on+0x7a/0x110 [ 207.274435][T10408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.274460][T10408] do_syscall_64+0x15f/0xf80 [ 207.274487][T10408] ? clear_bhb_loop+0x40/0x90 [ 207.274515][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.274536][T10408] RIP: 0033:0x7f6a6179c819 [ 207.274557][T10408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.274576][T10408] RSP: 002b:00007f6a62702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 207.274601][T10408] RAX: ffffffffffffffda RBX: 00007f6a61a15fa0 RCX: 00007f6a6179c819 [ 207.274616][T10408] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 207.274629][T10408] RBP: 00007f6a61832c91 R08: 0000000000000000 R09: 0000000000000000 [ 207.274641][T10408] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 207.274654][T10408] R13: 00007f6a61a16038 R14: 00007f6a61a15fa0 R15: 00007fffb80b4768 [ 207.274690][T10408] [ 207.558563][T10397] syzkaller0: entered promiscuous mode [ 207.565972][T10397] syzkaller0: entered allmulticast mode [ 207.965255][T10441] netlink: 'syz.0.1247': attribute type 1 has an invalid length. [ 207.976161][T10441] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1247'. [ 208.074521][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'. [ 208.172200][T10397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.344036][T10453] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 208.368486][T10453] netlink: 'syz.2.1250': attribute type 2 has an invalid length. [ 208.469833][T10460] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1254'. [ 208.787184][T10481] xt_HMARK: spi-set and port-set can't be combined [ 208.936063][T10492] sctp: [Deprecated]: syz.1.1261 (pid 10492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.936063][T10492] Use struct sctp_sack_info instead [ 209.571320][T10522] syzkaller1: entered promiscuous mode [ 209.590270][T10522] syzkaller1: entered allmulticast mode [ 209.943460][T10537] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.633999][T10561] syzkaller0: entered promiscuous mode [ 210.639868][T10561] syzkaller0: entered allmulticast mode [ 211.466345][T10600] xt_TCPMSS: Only works on TCP SYN packets [ 211.562431][T10602] __nla_validate_parse: 1 callbacks suppressed [ 211.562470][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1291'. [ 213.865800][T10618] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1294'. [ 214.127284][T10652] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 214.155484][T10652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.316280][T10660] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1304'. [ 214.518746][T10667] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 214.544750][T10667] CPU: 0 UID: 0 PID: 10667 Comm: syz.0.1307 Not tainted syzkaller #0 PREEMPT(full) [ 214.544781][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.544793][T10667] Call Trace: [ 214.544802][T10667] [ 214.544811][T10667] dump_stack_lvl+0xe8/0x150 [ 214.544848][T10667] sysfs_warn_dup+0x8e/0xa0 [ 214.544877][T10667] sysfs_do_create_link_sd+0xc0/0x110 [ 214.544908][T10667] device_add_class_symlinks+0x1cf/0x240 [ 214.544940][T10667] device_add+0x475/0xb70 [ 214.544972][T10667] wiphy_register+0x1dc5/0x2dc0 [ 214.545015][T10667] ? __pfx_wiphy_register+0x10/0x10 [ 214.545040][T10667] ? __pfx_netdev_run_todo+0x10/0x10 [ 214.545063][T10667] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 214.545100][T10667] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 214.545129][T10667] ieee80211_register_hw+0x3d82/0x4a70 [ 214.545164][T10667] ? ieee80211_register_hw+0x1981/0x4a70 [ 214.545208][T10667] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 214.545232][T10667] ? __asan_memset+0x22/0x50 [ 214.545264][T10667] ? __hrtimer_setup+0x1b7/0x260 [ 214.545289][T10667] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 214.545320][T10667] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 214.545372][T10667] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 214.545394][T10667] ? kstrndup+0xbf/0x160 [ 214.545423][T10667] hwsim_new_radio_nl+0xf6a/0x1c00 [ 214.545468][T10667] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.545500][T10667] ? rcu_is_watching+0x15/0xb0 [ 214.545531][T10667] ? trace_kmalloc+0x2a/0xf0 [ 214.545560][T10667] ? __nla_parse+0x40/0x60 [ 214.545581][T10667] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 214.545599][T10667] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 214.545626][T10667] genl_family_rcv_msg_doit+0x22a/0x330 [ 214.545651][T10667] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 214.545682][T10667] ? bpf_lsm_capable+0x9/0x20 [ 214.545700][T10667] ? security_capable+0x7e/0x2c0 [ 214.545727][T10667] genl_rcv_msg+0x61c/0x7a0 [ 214.545752][T10667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.545769][T10667] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.545793][T10667] ? __pfx_ref_tracker_free+0x10/0x10 [ 214.545828][T10667] netlink_rcv_skb+0x232/0x4b0 [ 214.545852][T10667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.545871][T10667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.545910][T10667] ? down_read+0x270/0x2e0 [ 214.545934][T10667] ? genl_rcv+0xd/0x40 [ 214.545953][T10667] genl_rcv+0x28/0x40 [ 214.545969][T10667] netlink_unicast+0x75c/0x8e0 [ 214.546001][T10667] netlink_sendmsg+0x813/0xb40 [ 214.546034][T10667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.546061][T10667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 214.546085][T10667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.546112][T10667] ____sys_sendmsg+0x972/0x9f0 [ 214.546137][T10667] ? __might_fault+0xaf/0x130 [ 214.546166][T10667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.546199][T10667] ? import_iovec+0x73/0xa0 [ 214.546220][T10667] ___sys_sendmsg+0x2a5/0x360 [ 214.546243][T10667] ? __lock_acquire+0x6b5/0x2cf0 [ 214.546285][T10667] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.546317][T10667] ? futex_wait+0x2a2/0x390 [ 214.546362][T10667] ? __fget_files+0x2a/0x420 [ 214.546382][T10667] ? __fget_files+0x3a0/0x420 [ 214.546413][T10667] __x64_sys_sendmsg+0x1bd/0x2a0 [ 214.546444][T10667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.546478][T10667] ? rcu_is_watching+0x15/0xb0 [ 214.546511][T10667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.546529][T10667] do_syscall_64+0x15f/0xf80 [ 214.546548][T10667] ? trace_irq_disable+0x3b/0x140 [ 214.546566][T10667] ? clear_bhb_loop+0x40/0x90 [ 214.546586][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.546602][T10667] RIP: 0033:0x7f6a6179c819 [ 214.546620][T10667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.546633][T10667] RSP: 002b:00007f6a62702028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.546653][T10667] RAX: ffffffffffffffda RBX: 00007f6a61a15fa0 RCX: 00007f6a6179c819 [ 214.546665][T10667] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 214.546675][T10667] RBP: 00007f6a61832c91 R08: 0000000000000000 R09: 0000000000000000 [ 214.546685][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.546694][T10667] R13: 00007f6a61a16038 R14: 00007f6a61a15fa0 R15: 00007fffb80b4768 [ 214.546723][T10667] [ 215.005545][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1310'. [ 215.015783][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1310'. [ 215.141649][T10679] netlink: 'syz.3.1313': attribute type 9 has an invalid length. [ 215.382848][T10684] pim6reg: entered allmulticast mode [ 215.527905][T10696] vlan0: entered promiscuous mode [ 215.533688][T10696] bridge0: entered promiscuous mode [ 215.733676][T10710] netlink: 'syz.2.1321': attribute type 3 has an invalid length. [ 215.817666][T10710] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 215.830625][T10713] netlink: 'syz.0.1323': attribute type 17 has an invalid length. [ 215.839735][T10710] netlink: 'syz.2.1321': attribute type 3 has an invalid length. [ 215.851393][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 215.860833][T10710] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1321'. [ 215.870973][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1323'. [ 215.886327][T10710] NCSI netlink: No device for ifindex 813332851 [ 216.026424][T10720] PKCS7: Unknown OID: [4] (bad) [ 216.050462][T10720] PKCS7: Only support pkcs7_signedData type [ 216.085675][T10720] netlink: 'syz.1.1325': attribute type 11 has an invalid length. [ 216.095327][T10720] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1325'. [ 216.624517][T10749] IPv6: sit1: Disabled Multicast RS [ 217.160077][T10782] bond2: (slave lo): Releasing backup interface [ 217.197017][T10782] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 217.230584][T10782] bridge_slave_0: left allmulticast mode [ 217.250532][T10782] bridge_slave_0: left promiscuous mode [ 217.268067][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.311823][T10782] bridge_slave_1: left allmulticast mode [ 217.338506][T10782] bridge_slave_1: left promiscuous mode [ 217.358314][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.386642][T10782] bond0: (slave bond_slave_0): Releasing backup interface [ 217.397404][T10782] bond0: (slave bond_slave_1): Releasing backup interface [ 217.409849][T10782] team0: Port device team_slave_0 removed [ 217.417626][T10794] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 217.419171][T10782] team0: Port device team_slave_1 removed [ 217.433660][T10800] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 217.442506][T10782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.451260][T10782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.460212][T10782] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.715427][T10810] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1351'. [ 217.811131][T10817] netlink: 'syz.3.1352': attribute type 2 has an invalid length. [ 218.056970][T10819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.094748][T10820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.109961][T10820] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 218.121181][T10820] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 218.137826][T10820] bond3: (slave xfrm1): making interface the new active one [ 218.147880][T10820] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 218.515895][T10804] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 218.548098][T10804] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 219.623525][T10898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1374'. [ 219.758167][T10903] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1375'. [ 219.792541][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 219.834039][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 219.857024][T10853] infiniband syz0: set down [ 219.873985][T10853] infiniband syz0: added ipvlan0 [ 220.152813][T10853] RDS/IB: syz0: added [ 220.172317][T10853] smc: adding ib device syz0 with port count 1 [ 220.187830][T10853] smc: ib device syz0 port 1 has no pnetid [ 220.852041][T10944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.085715][T10961] netlink: 'syz.2.1391': attribute type 2 has an invalid length. [ 221.109959][T10961] netlink: 'syz.2.1391': attribute type 8 has an invalid length. [ 221.123123][T10961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1391'. [ 221.170457][T10954] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 221.192063][T10954] bond4 (unregistering): Released all slaves [ 221.203827][T10965] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1392'. [ 221.792585][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1400'. [ 221.846826][T10987] netlink: 'syz.1.1399': attribute type 2 has an invalid length. [ 221.972607][T10990] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 221.992953][T10992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 222.009040][T10990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1402'. [ 222.030044][T10990] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 222.047970][T10990] netlink: 'syz.3.1402': attribute type 8 has an invalid length. [ 222.224985][T11001] team_slave_1: Caught tx_queue_len zero misconfig [ 222.385128][T11009] xt_hashlimit: size too large, truncated to 1048576 [ 222.739624][T11023] veth0_to_bond: entered allmulticast mode [ 222.791329][T11023] __nla_validate_parse: 2 callbacks suppressed [ 222.791353][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 222.846726][T11025] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 223.640400][T11069] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1420'. [ 223.809744][T11071] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1423'. [ 223.876319][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 224.530142][T11110] --map-set only usable from mangle table [ 224.780900][T11118] tc_dump_action: action bad kind [ 224.830710][T11120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1436'. [ 225.136246][T11139] netlink: 'syz.0.1443': attribute type 32 has an invalid length. [ 225.154599][T11138] netlink: 'syz.0.1443': attribute type 32 has an invalid length. [ 225.240796][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 225.564509][T11154] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1447'. [ 225.598024][T11156] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1446'. [ 226.422161][T11189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.495386][T11189] Cannot find set identified by id 65534 to match [ 226.528176][T11191] syzkaller0: entered promiscuous mode [ 226.541645][T11191] syzkaller0: entered allmulticast mode [ 226.862612][T11205] vlan2: entered promiscuous mode [ 226.878705][T11205] bridge0: entered promiscuous mode [ 226.892697][T11210] netlink: 'syz.0.1461': attribute type 2 has an invalid length. [ 226.925240][T11210] netlink: 'syz.0.1461': attribute type 2 has an invalid length. [ 227.880993][T11247] vcan0: entered allmulticast mode [ 227.900591][T11245] syzkaller1: entered promiscuous mode [ 227.912436][T11245] syzkaller1: entered allmulticast mode [ 227.956951][T11245] geneve3: entered promiscuous mode [ 227.968981][T11245] geneve3: entered allmulticast mode [ 228.243823][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 228.858661][T11283] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1481'. [ 228.882089][T11278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.897298][T11283] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 228.934749][T11278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.940681][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 228.974595][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 229.063997][T11285] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1482'. [ 229.079102][T11285] bond0: Caught tx_queue_len zero misconfig [ 229.117652][T11288] ip6gre1: entered promiscuous mode [ 229.149041][T11288] ip6gre1: entered allmulticast mode [ 229.252321][T11278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.269446][T11278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.290435][T11296] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.326970][T11291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.348032][T11299] netlink: 'syz.2.1485': attribute type 30 has an invalid length. [ 229.485548][T11278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.523662][T11278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.631422][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'. [ 229.686462][T11278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.717328][T11278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.100832][T11325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.505619][T11325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.546771][ T6683] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.555802][ T6683] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.576285][ T6682] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.584938][ T6682] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.617064][T11325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.709316][T11359] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 230.748615][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.782579][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.830143][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1501'. [ 230.881917][T11325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.925376][ T6683] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.937932][ T6683] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.091912][T11366] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 231.166707][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 231.355245][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 231.582107][ T3471] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.671855][T11396] SET target dimension over the limit! [ 231.688500][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.796789][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 231.927112][ T6682] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.995640][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.102395][T11415] kthread_run failed with err -4 [ 232.261125][T11424] netlink: 'syz.1.1516': attribute type 178 has an invalid length. [ 232.640497][T11440] tipc: Enabling of bearer rejected, failed to enable media [ 232.671374][T11444] tipc: Enabling of bearer rejected, failed to enable media [ 233.764573][T11497] __nla_validate_parse: 2 callbacks suppressed [ 233.764615][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 234.004904][T11513] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 234.016959][T11513] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 234.021145][T11514] syzkaller0: entered promiscuous mode [ 234.058364][T11514] syzkaller0: entered allmulticast mode [ 234.086374][T11513] netlink: 'syz.0.1543': attribute type 32 has an invalid length. [ 234.110554][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1545'. [ 234.131206][T11509] tipc: Started in network mode [ 234.136584][T11509] tipc: Node identity 3a21a76c424b, cluster identity 4711 [ 234.144415][T11509] tipc: Enabled bearer , priority 0 [ 234.166503][T11507] tipc: Resetting bearer [ 234.220600][T11507] tipc: Disabling bearer [ 234.812890][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 235.060390][T11559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1556'. [ 235.152051][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1557'. [ 235.184771][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1557'. [ 235.301051][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 236.012322][T11602] netlink: 'syz.1.1571': attribute type 10 has an invalid length. [ 236.145759][T11613] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 236.174551][T11613] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 236.215234][T11615] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1574'. [ 236.281725][T11617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1575'. [ 236.333855][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 236.448442][T11620] syzkaller1: entered promiscuous mode [ 236.473063][T11620] syzkaller1: entered allmulticast mode [ 238.155568][T11688] netlink: 'syz.3.1596': attribute type 3 has an invalid length. [ 238.665296][T11718] netlink: 'syz.4.1602': attribute type 8 has an invalid length. [ 238.745945][T11718] tipc: Enabled bearer , priority 0 [ 238.851216][T11731] __nla_validate_parse: 7 callbacks suppressed [ 238.851238][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 238.869594][T11730] ip6t_srh: unknown srh match flags 5F28 [ 238.876332][T11727] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1605'. [ 238.951715][T11718] syzkaller0: entered promiscuous mode [ 238.958670][T11718] syzkaller0: entered allmulticast mode [ 238.968201][T11718] tipc: Resetting bearer [ 239.047122][ T3471] tipc: Resetting bearer [ 239.055143][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 239.066158][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 239.083922][T11733] netlink: 'syz.1.1606': attribute type 3 has an invalid length. [ 239.093541][T11716] tipc: Resetting bearer [ 239.262206][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 239.985340][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 241.684140][T11716] tipc: Disabling bearer [ 241.727534][T11746] pimreg: left allmulticast mode [ 241.753743][ T9] tipc: Node number set to 2280363885 [ 242.375304][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 242.603352][T11798] netlink: 'syz.2.1626': attribute type 11 has an invalid length. [ 242.649326][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 242.915553][T11818] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1635'. [ 242.999419][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 243.060313][T11813] batman_adv: batadv0: Adding interface: dummy0 [ 243.097230][T11813] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.153814][T11813] batman_adv: batadv0: Interface activated: dummy0 [ 243.272841][T11811] batadv0: mtu less than device minimum [ 243.291892][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.305869][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.317926][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.331266][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.343377][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.355648][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.367622][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.380320][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.392617][T11811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.626600][T11825] syz.1.1636 (11825) used greatest stack depth: 17560 bytes left [ 243.758581][T11840] syzkaller0: entered allmulticast mode [ 243.862541][T11852] __nla_validate_parse: 4 callbacks suppressed [ 243.862562][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 244.463796][T11877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1650'. [ 244.527762][T11879] ip6tnl2: entered promiscuous mode [ 245.051356][T11909] lo: Caught tx_queue_len zero misconfig [ 245.283980][T11922] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 245.307739][T11923] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 245.480457][T11932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1671'. [ 245.684555][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'. [ 245.867361][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 246.017122][T11960] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 246.048314][T11960] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 246.294755][T11975] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 246.363482][T11978] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1689'. [ 246.453901][T11972] syzkaller0: entered promiscuous mode [ 246.468895][T11972] syzkaller0: entered allmulticast mode [ 246.484747][T11978] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1689'. [ 246.740649][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 249.325196][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 249.666854][T12029] veth0_to_team: entered allmulticast mode [ 249.828041][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1706'. [ 249.873706][T12035] netlink: 'syz.3.1706': attribute type 7 has an invalid length. [ 249.899990][T12035] netlink: 'syz.3.1706': attribute type 8 has an invalid length. [ 249.947716][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 250.348158][T12066] netlink: 'syz.0.1713': attribute type 29 has an invalid length. [ 250.372003][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 250.467203][T12071] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 250.492345][T12071] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 250.751634][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'. [ 250.808000][T12088] netlink: 'syz.0.1719': attribute type 11 has an invalid length. [ 250.815973][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 250.899817][T12097] vlan3: entered allmulticast mode [ 250.914707][T12097] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 251.294374][T12125] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20000 [ 251.534887][T12124] syzkaller0: entered promiscuous mode [ 251.558954][T12124] syzkaller0: entered allmulticast mode [ 251.588595][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.368121][T12155] net_ratelimit: 10 callbacks suppressed [ 254.368142][T12155] openvswitch: netlink: IP tunnel dst address not specified [ 255.036764][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'. [ 255.109007][T12190] netlink: 'syz.4.1749': attribute type 1 has an invalid length. [ 255.344169][T12197] ip6tnl0: Caught tx_queue_len zero misconfig [ 255.377600][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1751'. [ 255.500236][T12198] syzkaller0: entered promiscuous mode [ 255.505901][T12198] syzkaller0: entered allmulticast mode [ 255.678313][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 256.121341][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.446134][T12216] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 258.453464][T12224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.656986][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 258.690312][T12238] netlink: 'syz.2.1761': attribute type 3 has an invalid length. [ 258.742095][T12238] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1761'. [ 259.002748][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 259.033552][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 259.036205][T12253] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 259.043243][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'. [ 259.068256][T12253] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1763'. [ 259.111878][T12253] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1763'. [ 259.484825][T12280] macvtap1: entered promiscuous mode [ 259.520939][T12280] macvtap1: entered allmulticast mode [ 259.549263][T12280] veth1_vlan: entered allmulticast mode [ 259.625075][T12287] macvtap2: entered promiscuous mode [ 259.644502][T12287] macvtap2: entered allmulticast mode [ 259.698905][T12283] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 259.715798][T12283] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 259.988023][T12308] syzkaller0: entered promiscuous mode [ 260.003472][T12308] syzkaller0: entered allmulticast mode [ 260.079593][T12308] tipc: Enabled bearer , priority 0 [ 260.105295][T12305] tipc: Resetting bearer [ 260.163754][T12305] tipc: Disabling bearer [ 260.164572][T12317] netlink: 'syz.0.1782': attribute type 28 has an invalid length. [ 260.177775][T12317] netlink: 'syz.0.1782': attribute type 3 has an invalid length. [ 260.186716][T12317] __nla_validate_parse: 3 callbacks suppressed [ 260.186737][T12317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1782'. [ 260.272543][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 260.347478][T12313] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1780'. [ 260.531698][T12323] syzkaller0: entered promiscuous mode [ 260.539246][T12323] syzkaller0: entered allmulticast mode [ 262.997824][T12344] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 263.018554][T12344] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 263.210143][T12358] IPv6: NLM_F_REPLACE set, but no existing node found! [ 263.298212][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 263.320392][T12362] netlink: 'syz.2.1793': attribute type 18 has an invalid length. [ 263.341722][T12366] tipc: Enabled bearer , priority 0 [ 263.385831][T12368] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 263.566312][T12370] syzkaller0: entered promiscuous mode [ 263.594701][T12370] syzkaller0: entered allmulticast mode [ 263.617165][T12370] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 263.826952][T12390] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 263.902161][T12390] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1803'. [ 263.975459][T12392] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 264.019009][T12394] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 264.076992][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1805'. [ 264.459808][ T10] tipc: Node number set to 868603342 [ 264.947171][T12458] h: entered promiscuous mode [ 265.013316][T12466] netlink: 'syz.1.1823': attribute type 1 has an invalid length. [ 265.035907][T12466] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1823'. [ 265.058243][T12466] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1823'. [ 265.088304][T12466] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1823'. [ 265.447544][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025984000: rx timeout, send abort [ 265.591494][T12493] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 265.948065][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068eca400: rx timeout, send abort [ 265.959925][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025984000: abort rx timeout. Force session deactivation [ 266.145044][T12517] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 266.287007][T12527] tap0: tun_chr_ioctl cmd 1074025672 [ 266.314718][T12527] tap0: ignored: set checksum disabled [ 266.456412][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068eca400: abort rx timeout. Force session deactivation [ 266.701105][T12544] x_tables: unsorted underflow at hook 1 [ 266.927171][T12554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.966940][T12554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.002709][T12554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.045036][T12554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.158059][T12563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.286453][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 267.340600][T12572] netlink: 'syz.2.1855': attribute type 8 has an invalid length. [ 267.886133][T12599] netlink: 'syz.0.1866': attribute type 39 has an invalid length. [ 268.009703][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'. [ 268.055788][T12607] syzkaller0: entered promiscuous mode [ 268.070429][T12607] syzkaller0: entered allmulticast mode [ 268.526876][T12629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.567718][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 268.746526][T12639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.861568][T12654] tipc: Enabling of bearer rejected, failed to enable media [ 268.883893][T12651] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.899732][T12654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.952496][T12658] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1880'. [ 268.971786][T12661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.117087][T12664] syzkaller0: entered promiscuous mode [ 269.137032][T12664] syzkaller0: entered allmulticast mode [ 269.154999][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 269.178031][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 269.197879][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 269.515188][T12676] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 269.608477][T12676] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.637288][T12685] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.714076][T12676] bond5: entered promiscuous mode [ 269.735607][T12676] bond5: entered allmulticast mode [ 269.744115][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 269.819998][T12693] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.840824][T12693] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.854932][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 270.081619][T12715] team0: Caught tx_queue_len zero misconfig [ 270.260889][T12724] syzkaller0: entered promiscuous mode [ 270.284606][T12724] syzkaller0: entered allmulticast mode [ 270.404637][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 270.855050][T12749] netlink: 'syz.4.1908': attribute type 4 has an invalid length. [ 271.609423][ T6678] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.648870][ T6678] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.662595][ T6678] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 271.700159][ T6678] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.720160][ T6678] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.756921][ T6678] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 271.787494][ T6678] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.817479][ T6678] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.844437][ T6678] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 272.000594][ T6678] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.040609][ T6678] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.080995][ T6678] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 272.407166][T12816] __nla_validate_parse: 3 callbacks suppressed [ 272.407187][T12816] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.1920'. [ 272.797676][T12827] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 272.820160][T12827] bond6 (unregistering): Released all slaves [ 272.892347][T12844] lo: left promiscuous mode [ 272.934316][T12844] tunl0: left promiscuous mode [ 272.950717][T12844] gre0: left promiscuous mode [ 272.964425][T12844] gretap0: left promiscuous mode [ 272.970552][T12844] erspan0: left promiscuous mode [ 272.975924][T12844] ip_vti0: left promiscuous mode [ 273.050855][T12844] veth0_to_bond: left allmulticast mode [ 273.080838][T12844] 0: left allmulticast mode [ 273.128063][T12844] macsec0: left promiscuous mode [ 273.159566][T12844] vlan2: left allmulticast mode [ 273.164685][T12844] .`: left allmulticast mode [ 273.173012][T12844] h: left promiscuous mode [ 273.180312][T12844] geneve2: left promiscuous mode [ 273.185598][T12844] geneve2: left allmulticast mode [ 273.194910][T12844] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 273.249978][T12842] tipc: Enabling of bearer rejected, already enabled [ 273.280909][ T6682] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.311824][ T6682] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.342890][ T6682] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 273.373191][ T6682] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.399818][ T6682] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.410626][ T6682] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 273.422331][ T6682] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.433446][ T6682] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.460350][ T6682] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 273.487622][ T6682] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.511143][ T6682] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.543056][ T6682] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 273.848452][T12882] netlink: 'syz.2.1939': attribute type 30 has an invalid length. [ 273.900667][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 274.045219][T12878] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 274.106497][T12873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.183971][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 274.207854][T12900] gtp0: entered promiscuous mode [ 274.218878][T12900] gtp0: entered allmulticast mode [ 274.287385][T12903] syzkaller0: entered promiscuous mode [ 274.293836][T12903] syzkaller0: entered allmulticast mode [ 274.354339][T12903] tipc: Enabled bearer , priority 0 [ 274.380438][T12902] tipc: Resetting bearer [ 274.411517][T12902] tipc: Disabling bearer [ 274.441539][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.464109][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1948'. [ 274.478250][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1948'. [ 274.490269][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1948'. [ 274.510569][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1948'. [ 274.621309][T12913] syzkaller0: entered promiscuous mode [ 274.627377][T12913] syzkaller0: entered allmulticast mode [ 274.813710][T12920] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1954'. [ 274.848662][T12920] netlink: 'syz.1.1954': attribute type 11 has an invalid length. [ 274.873388][T12920] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1954'. [ 274.932404][T12928] SET target dimension over the limit! [ 274.950019][T12930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1956'. [ 274.983788][T12937] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 275.101062][T12941] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 275.145808][T12941] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 275.174290][T12941] tipc: Started in network mode [ 275.187118][T12941] tipc: Node identity fe4a220c4e2, cluster identity 4711 [ 275.210458][T12941] tipc: Enabled bearer , priority 0 [ 275.449922][T12951] syzkaller1: entered promiscuous mode [ 275.469583][T12951] syzkaller1: entered allmulticast mode [ 275.646767][T12964] syzkaller0: entered promiscuous mode [ 275.662495][T12964] syzkaller0: entered allmulticast mode [ 276.164712][T12990] netlink: 'syz.3.1976': attribute type 39 has an invalid length. [ 276.544264][T12987] syzkaller0: entered promiscuous mode [ 276.551162][T12987] syzkaller0: entered allmulticast mode [ 276.621388][ T5897] tipc: Node number set to 2959745548 [ 276.633446][T13003] tipc: Enabled bearer , priority 0 [ 276.656973][T12982] tipc: Resetting bearer [ 276.712725][T12982] tipc: Disabling bearer [ 277.091944][T13023] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 277.226088][T13033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.552785][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.325941][T13047] __nla_validate_parse: 3 callbacks suppressed [ 336.325960][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 336.335073][T13046] syzkaller1: entered promiscuous mode [ 336.347921][T13046] syzkaller1: entered allmulticast mode [ 336.662751][T13066] syzkaller0: entered promiscuous mode [ 336.681681][T13066] syzkaller0: entered allmulticast mode [ 336.888575][T13083] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1999'. [ 336.926015][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 336.955892][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 336.986229][T13083] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1999'. [ 336.997237][T13087] tunl0: Caught tx_queue_len zero misconfig [ 337.323090][T13106] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2006'. [ 337.364133][T13106] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2006'. [ 337.387797][T13106] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2006'. [ 337.398330][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 337.445129][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2006'. [ 337.476846][T13102] syzkaller1: entered promiscuous mode [ 337.490340][T13102] syzkaller1: entered allmulticast mode [ 337.512982][T13115] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 337.763173][T13125] tc_dump_action: action bad kind [ 337.779117][T13129] openvswitch: netlink: IP tunnel dst address not specified [ 337.791173][T13129] openvswitch: netlink: IP tunnel dst address not specified [ 337.933270][T13133] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 337.940836][T13137] netlink: 'syz.0.2015': attribute type 1 has an invalid length. [ 337.955133][T13133] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 337.966364][T13133] tipc: Enabling of bearer rejected, already enabled [ 338.076137][T13140] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 338.624139][T13164] syzkaller1: entered promiscuous mode [ 338.630756][T13164] syzkaller1: entered allmulticast mode [ 338.786944][T13174] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 338.811160][T13172] bridge0: entered allmulticast mode [ 338.838512][T13177] syzkaller0: entered promiscuous mode [ 338.848490][T13177] syzkaller0: entered allmulticast mode [ 338.910115][T13177] tipc: Enabled bearer , priority 0 [ 338.939559][T13176] tipc: Resetting bearer [ 339.020297][T13176] tipc: Disabling bearer [ 339.416844][T13199] pim6reg1: entered promiscuous mode [ 339.433788][T13199] pim6reg1: entered allmulticast mode [ 339.817784][T13214] syzkaller1: entered promiscuous mode [ 339.839795][T13214] syzkaller1: entered allmulticast mode [ 340.072816][T13228] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 340.093610][T13228] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 340.104816][T13228] tipc: Enabling of bearer rejected, already enabled [ 340.192717][T13233] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 340.487086][T13248] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 340.519450][T13250] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 340.905234][T13265] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 340.982540][T13270] syzkaller1: entered promiscuous mode [ 340.999414][T13270] syzkaller1: entered allmulticast mode [ 342.119768][T13303] __nla_validate_parse: 13 callbacks suppressed [ 342.119794][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'. [ 342.354928][T13311] tipc: Enabling of bearer rejected, failed to enable media [ 342.482980][T13303] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 342.571649][T13320] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2067'. [ 342.692527][T13305] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2065'. [ 342.723592][T13324] syzkaller1: entered promiscuous mode [ 342.739374][T13324] syzkaller1: entered allmulticast mode [ 343.063130][T13333] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2071'. [ 343.442460][T13361] validate_nla: 1 callbacks suppressed [ 343.442483][T13361] netlink: 'syz.3.2077': attribute type 4 has an invalid length. [ 343.480322][T13359] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2078'. [ 343.502403][T13360] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 343.519576][T13361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2077'. [ 343.533720][T13364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2080'. [ 343.537530][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 343.544509][T13364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2080'. [ 343.654798][T13360] bond4: entered promiscuous mode [ 343.660497][T13360] bond4: entered allmulticast mode [ 343.666112][T13360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.726295][T13374] syzkaller1: entered promiscuous mode [ 343.738363][T13374] syzkaller1: entered allmulticast mode [ 343.776129][T13377] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2083'. [ 343.899591][T13381] syzkaller0: entered promiscuous mode [ 343.907719][T13381] syzkaller0: entered allmulticast mode [ 344.634099][T13421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.673681][T13419] syzkaller0: entered promiscuous mode [ 344.689309][T13419] syzkaller0: entered allmulticast mode [ 344.835301][T13424] syzkaller1: entered promiscuous mode [ 344.848972][T13424] syzkaller1: entered allmulticast mode [ 344.977695][T13434] syzkaller0: entered promiscuous mode [ 344.992560][T13434] syzkaller0: entered allmulticast mode [ 345.605108][T13456] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.747842][T13464] netlink: 'syz.1.2111': attribute type 13 has an invalid length. [ 345.790491][T13464] netlink: 'syz.1.2111': attribute type 58 has an invalid length. [ 345.831318][T13464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.909620][T13467] syzkaller1: entered promiscuous mode [ 345.919667][T13467] syzkaller1: entered allmulticast mode [ 346.226217][T13486] netlink: 'syz.0.2117': attribute type 25 has an invalid length. [ 346.430615][T13500] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 346.509896][T13501] bond4: Unable to set up delay as MII monitoring is disabled [ 346.532117][T13501] bond4 (unregistering): Released all slaves [ 346.569683][T13500] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 346.574064][T13507] netlink: 'syz.2.2122': attribute type 15 has an invalid length. [ 346.596664][T13510] x9: renamed from bridge_slave_0 (while UP) [ 346.751455][T13513] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 346.907601][T13520] bond5: (slave geneve3): making interface the new active one [ 346.919839][T13520] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 346.931216][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 346.953705][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 347.018294][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 347.059253][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 347.184139][T13528] syzkaller1: entered promiscuous mode [ 347.209707][T13528] syzkaller1: entered allmulticast mode [ 347.361736][T13549] __nla_validate_parse: 10 callbacks suppressed [ 347.361759][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 347.415667][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2134'. [ 347.457858][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 347.520270][ T6683] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.520367][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 347.555287][ T6683] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.570397][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2134'. [ 347.595222][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 347.606840][ T6683] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.633227][ T6683] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.841158][T13574] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2139'. [ 347.852218][T13579] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2140'. [ 347.875356][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 347.891526][T13575] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2139'. [ 347.937904][T13579] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 348.887763][T13630] Unsupported ieee802154 address type: 0 [ 349.063994][T13646] netlink: 'syz.0.2160': attribute type 3 has an invalid length. [ 349.175037][T13650] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 349.896767][T13696] netlink: 'syz.0.2175': attribute type 2 has an invalid length. [ 349.946271][T13696] 9: entered promiscuous mode [ 349.999575][T13700] tipc: Enabled bearer , priority 0 [ 350.016174][T13700] syzkaller0: entered promiscuous mode [ 350.027288][T13700] syzkaller0: entered allmulticast mode [ 350.054007][T13700] tipc: Resetting bearer [ 350.151883][T13704] tipc: Resetting bearer [ 350.186069][T13704] tipc: Disabling bearer [ 350.548609][T13736] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 350.557626][T13736] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 350.566376][T13736] netlink: 'syz.3.2185': attribute type 8 has an invalid length. [ 350.684725][T13739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.079715][T13758] bond6: option min_links: invalid value (18446744073709551614) [ 351.087543][T13758] bond6: option min_links: allowed values 0 - 2147483647 [ 351.096750][T13758] bond6 (unregistering): Released all slaves [ 351.465008][T13777] xt_hashlimit: overflow, try lower: 3/0 [ 351.484642][T13780] xt_HMARK: proto mask must be zero with L3 mode [ 351.697086][T13787] tipc: Enabled bearer , priority 0 [ 351.750925][T13785] tipc: Disabling bearer [ 352.140255][T13807] bridge6: entered promiscuous mode [ 352.166899][T13807] bridge6: entered allmulticast mode [ 352.218406][T13807] team0: Port device bridge6 added [ 352.297799][T13824] netlink: 'syz.2.2216': attribute type 2 has an invalid length. [ 352.395198][ T42] IPVS: starting estimator thread 0... [ 352.413931][T13828] pim6reg1: entered promiscuous mode [ 352.430415][T13829] IPVS: set_ctl: invalid protocol: 51 172.20.20.43:20002 [ 352.437842][T13828] pim6reg1: entered allmulticast mode [ 352.453102][T13829] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 352.506957][T13838] __nla_validate_parse: 20 callbacks suppressed [ 352.506977][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 352.538816][T13831] IPVS: using max 28 ests per chain, 67200 per kthread [ 352.546181][T13838] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 352.577744][T13838] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 352.599010][T13838] netlink: 'syz.2.2221': attribute type 2 has an invalid length. [ 352.611915][T13838] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2221'. [ 352.987007][T13864] netlink: 'syz.0.2230': attribute type 21 has an invalid length. [ 352.989728][T13862] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.000482][T13857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2229'. [ 353.018003][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 353.020160][T13859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2232'. [ 353.040225][T13864] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.165655][T13871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2233'. [ 353.210096][T13871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2233'. [ 353.326914][T13880] ip6erspan0: entered allmulticast mode [ 353.373922][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 354.034373][T13921] tipc: Enabling of bearer rejected, failed to enable media [ 354.181654][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 354.191562][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 354.269050][T13934] vlan2: entered promiscuous mode [ 354.279310][T13934] bridge0: entered promiscuous mode [ 354.302363][T13940] validate_nla: 2 callbacks suppressed [ 354.302383][T13940] netlink: 'syz.2.2255': attribute type 1 has an invalid length. [ 354.345472][T13940] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.629890][T13954] syzkaller0: entered promiscuous mode [ 354.648169][T13954] syzkaller0: entered allmulticast mode [ 354.666499][T13954] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 354.683385][T13957] netlink: 'syz.2.2261': attribute type 10 has an invalid length. [ 354.725108][T13961] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 354.754641][T13957] team0: Port device vxcan1 added [ 354.823270][T13961] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.678623][T14005] netlink: 'syz.2.2273': attribute type 39 has an invalid length. [ 356.014253][T14019] C: renamed from lo [ 356.064577][T14019] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 356.361672][T14026] xt_CT: No such helper "pptp" [ 356.488226][T14035] netlink: 'syz.1.2283': attribute type 12 has an invalid length. [ 356.591474][T14038] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 356.647550][T14040] IPVS: length: 31 != 24 [ 356.739010][T14047] syzkaller0: entered promiscuous mode [ 356.752425][T14047] syzkaller0: entered allmulticast mode [ 356.894740][T14047] tipc: Enabled bearer , priority 0 [ 356.933623][T14045] tipc: Resetting bearer [ 356.994525][T14045] tipc: Disabling bearer [ 357.208666][T14060] bond5: entered allmulticast mode [ 357.335679][T14064] bridge5: entered promiscuous mode [ 357.357407][T14064] bridge5: entered allmulticast mode [ 357.557337][T14079] syzkaller0: entered promiscuous mode [ 357.581092][T14079] syzkaller0: entered allmulticast mode [ 357.946384][T14090] __nla_validate_parse: 17 callbacks suppressed [ 357.946408][T14090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2301'. [ 357.982629][T14091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2301'. [ 358.021451][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2303'. [ 358.375566][T14110] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2307'. [ 358.429152][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2309'. [ 358.593661][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'. [ 358.817269][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 359.132176][T14170] netlink: 'syz.3.2321': attribute type 9 has an invalid length. [ 359.196942][T14171] syzkaller0: entered promiscuous mode [ 359.222825][T14171] syzkaller0: entered allmulticast mode [ 359.247477][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 359.738187][T14201] x_tables: duplicate underflow at hook 2 [ 360.275910][T14222] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 360.452168][T14232] syzkaller0: entered promiscuous mode [ 360.458353][T14232] syzkaller0: entered allmulticast mode [ 360.487236][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2343'. [ 360.969936][T14255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2349'. [ 361.240906][T14264] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.466154][T14270] syzkaller0: entered promiscuous mode [ 361.486971][T14270] syzkaller0: entered allmulticast mode [ 361.694640][T14281] batadv0: entered allmulticast mode [ 362.124748][T14302] netlink: 'syz.4.2367': attribute type 142 has an invalid length. [ 362.571340][T14317] syzkaller0: entered promiscuous mode [ 362.589589][T14317] syzkaller0: entered allmulticast mode [ 362.827034][T14326] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 362.978225][T14326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.125789][T14326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.370433][T14326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.412767][T14346] tipc: Enabling of bearer rejected, already enabled [ 363.492775][T14326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.577413][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'. [ 363.593366][T14356] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 363.606067][T14356] netlink: 'syz.0.2383': attribute type 7 has an invalid length. [ 363.614891][T14356] netlink: 'syz.0.2383': attribute type 8 has an invalid length. [ 363.623988][T14356] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2383'. [ 363.635343][T14356] NCSI netlink: No device for ifindex 65584 [ 363.834901][ T6678] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.883533][ T6682] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.001080][ T6678] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.023718][T14377] macsec2: entered promiscuous mode [ 364.079271][ T43] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.449368][T14399] syzkaller0: entered promiscuous mode [ 364.455766][T14399] syzkaller0: entered allmulticast mode [ 364.535614][T14399] tipc: Enabled bearer , priority 0 [ 364.621523][T14397] tipc: Resetting bearer [ 364.715430][T14397] tipc: Disabling bearer [ 364.769944][T14404] gtp2: entered promiscuous mode [ 364.786663][T14404] gtp2: entered allmulticast mode [ 365.628081][T14445] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 365.645675][T14445] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2413'. [ 365.656281][T14445] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 365.664642][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 365.733861][T14452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2412'. [ 366.023674][T14465] netlink: 'syz.3.2419': attribute type 39 has an invalid length. [ 366.184017][T14474] bond7 (unregistering): Released all slaves [ 366.746045][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 366.764653][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 366.779652][T14499] IPv6: NLM_F_REPLACE set, but no existing node found! [ 367.385250][T14548] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2439'. [ 367.501727][T14553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.665114][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.681502][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.696615][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.712628][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.740627][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.756224][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.780259][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2446'. [ 367.789984][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.797987][T14566] syzkaller1: entered promiscuous mode [ 367.807792][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.826564][T14562] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:88:b8:07:14:f0 [ 367.831516][T14566] syzkaller1: entered allmulticast mode [ 367.964938][T14574] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2449'. [ 368.737586][T14617] __nla_validate_parse: 5 callbacks suppressed [ 368.737605][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 368.783334][T14618] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 368.804526][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 368.835448][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 369.224951][T14641] netlink: 'syz.0.2469': attribute type 14 has an invalid length. [ 369.252706][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 369.276932][T14645] netlink: 'syz.1.2470': attribute type 21 has an invalid length. [ 369.306967][T14646] netlink: 'syz.1.2470': attribute type 21 has an invalid length. [ 369.317466][T14641] netlink: 'syz.0.2469': attribute type 14 has an invalid length. [ 369.335504][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 369.354683][T14645] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.364671][T14646] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.378250][ T1334] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.388630][T14645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.396460][T14645] IPv6: NLM_F_CREATE should be set when creating new route [ 369.404596][T14645] IPv6: NLM_F_CREATE should be set when creating new route [ 369.412232][T14645] IPv6: NLM_F_CREATE should be set when creating new route [ 369.419950][T14646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.421967][T14658] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 369.436743][ T1334] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.454353][ T1334] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.470437][T14658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2472'. [ 369.498834][ T1334] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.588867][T14663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2474'. [ 369.766210][T14671] netlink: 'syz.0.2477': attribute type 13 has an invalid length. [ 369.797561][T14671] gretap0: refused to change device tx_queue_len [ 369.835777][T14676] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 370.058438][T14693] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2484'. [ 370.146861][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2487'. [ 370.193472][T14697] bond0: entered promiscuous mode [ 370.225148][T14697] bond0: left promiscuous mode [ 370.283478][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2491'. [ 370.349721][T14699] syzkaller0: entered promiscuous mode [ 370.376480][T14699] syzkaller0: entered allmulticast mode [ 370.521572][T14699] tipc: Enabled bearer , priority 0 [ 370.544149][T14698] tipc: Resetting bearer [ 370.629879][T14698] tipc: Disabling bearer [ 371.304673][T14769] netlink: 'syz.0.2506': attribute type 11 has an invalid length. [ 371.591898][T14784] validate_nla: 1 callbacks suppressed [ 371.591919][T14784] netlink: 'syz.3.2511': attribute type 1 has an invalid length. [ 371.834468][T14784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.986863][T14791] bond7: (slave geneve3): making interface the new active one [ 372.072517][T14791] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 372.414094][T14803] syzkaller0: entered promiscuous mode [ 372.472569][T14803] syzkaller0: entered allmulticast mode [ 372.553708][T14798] tipc: Enabled bearer , priority 0 [ 372.762684][T14789] tipc: Resetting bearer [ 372.895226][T14789] tipc: Disabling bearer [ 372.942712][T14838] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 373.140881][T14838] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 373.582343][T14861] netlink: 'syz.0.2523': attribute type 21 has an invalid length. [ 373.711452][T14861] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 373.763158][T14864] syzkaller0: entered promiscuous mode [ 373.858097][T14864] syzkaller0: entered allmulticast mode [ 374.437597][T14890] __nla_validate_parse: 1 callbacks suppressed [ 374.437620][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 374.623014][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 374.664466][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 374.892896][T14904] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 374.927129][T14904] netlink: 'syz.0.2534': attribute type 8 has an invalid length. [ 374.961049][T14904] sch_fq: defrate 0 ignored. [ 375.193912][T14919] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2538'. [ 375.222107][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 375.269066][T14922] net_ratelimit: 247 callbacks suppressed [ 375.269090][T14922] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 375.276796][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'. [ 375.430435][T14926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.538173][T14932] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 375.858346][T14948] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 375.944571][T14952] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 376.080391][T14952] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.303839][T14939] tipc: Can't bind to reserved service type 3 [ 376.399200][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 376.424940][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 376.517396][T14939] lec:lec_atm_close: lec0: Shut down! [ 376.625348][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 376.667106][T14975] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.695182][T14972] ip6tnl2: entered promiscuous mode [ 376.822633][T14979] bond9: entered promiscuous mode [ 376.889136][T14979] macvlan2: entered promiscuous mode [ 376.910548][T14979] macvlan2: entered allmulticast mode [ 376.927812][T14979] bond9: (slave macvlan2): Opening slave failed [ 377.303350][T15005] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 377.331568][ T42] IPVS: starting estimator thread 0... [ 377.439203][T15008] IPVS: using max 24 ests per chain, 57600 per kthread [ 377.464915][T15013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2562'. [ 377.848513][T15024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.151919][T15051] netlink: 'syz.2.2569': attribute type 39 has an invalid length. [ 378.839171][ T9] lec:lec_start_xmit: lec0:No lecd attached [ 378.940806][T15085] syzkaller0: entered promiscuous mode [ 378.956349][T15088] netlink: 'syz.2.2579': attribute type 1 has an invalid length. [ 378.967241][T15085] syzkaller0: entered allmulticast mode [ 379.001187][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.010433][T15088] netlink: 'syz.2.2579': attribute type 2 has an invalid length. [ 379.072933][T15090] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 379.089322][T15088] netlink: 'syz.2.2579': attribute type 1 has an invalid length. [ 379.110342][T15088] netlink: 'syz.2.2579': attribute type 3 has an invalid length. [ 379.450769][T15112] __nla_validate_parse: 6 callbacks suppressed [ 379.450792][T15112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2584'. [ 379.770824][T15136] openvswitch: netlink: Multiple metadata blocks provided [ 380.330648][T15163] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 380.574850][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'. [ 380.616399][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 380.659113][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'. [ 380.741386][T15181] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 380.759821][T15181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.857686][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 381.127120][T15209] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 381.150512][T15209] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2608'. [ 381.471013][T15227] openvswitch: netlink: Flow actions attr not present in new flow. [ 381.887564][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2623'. [ 382.032298][T15272] SET target dimension over the limit! [ 382.195749][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 382.397084][T15287] tipc: Enabling of bearer rejected, failed to enable media [ 382.499647][T15293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2636'. [ 382.524561][T15287] syzkaller0: entered promiscuous mode [ 382.541625][T15287] syzkaller0: entered allmulticast mode [ 382.544694][T15297] netlink: 'syz.4.2635': attribute type 10 has an invalid length. [ 382.571131][T15297] bond0: (slave wlan1): Opening slave failed [ 382.594077][T15295] netlink: 'syz.4.2635': attribute type 10 has an invalid length. [ 382.627857][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 383.255199][T15290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.270054][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 384.280023][ C1] lec:lec_tx_timeout: lec0 [ 384.285081][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.530842][T15295] bond0: (slave wlan1): Opening slave failed [ 385.550125][T15301] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 385.725383][T15316] netlink: 'syz.4.2641': attribute type 83 has an invalid length. [ 385.770907][T15322] __nla_validate_parse: 2 callbacks suppressed [ 385.770930][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 385.805532][T15325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.002247][T15334] netlink: 'syz.1.2645': attribute type 1 has an invalid length. [ 386.094402][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 386.194540][T15344] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 386.215998][T15344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2648'. [ 387.681425][T15369] syzkaller0: entered promiscuous mode [ 387.705683][T15369] 0: reclassify loop, rule prio 0, protocol 800 [ 387.749397][T15379] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2656'. [ 387.775384][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2656'. [ 387.820664][T15381] openvswitch: netlink: Key type 343 is out of range max 32 [ 389.180538][T15461] openvswitch: netlink: Flow key attr not present in new flow. [ 389.217662][T15465] Cannot find del_set index 4 as target [ 389.298740][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 389.306869][ C1] lec:lec_tx_timeout: lec0 [ 389.313977][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 389.387242][T15471] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2680'. [ 389.411356][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2680'. [ 389.693404][T15485] tipc: Invalid UDP bearer configuration [ 389.693468][T15485] tipc: Enabling of bearer rejected, failed to enable media [ 390.305321][T15510] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2691'. [ 390.327005][T15511] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2691'. [ 390.507659][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'. [ 390.793738][T15530] __nla_validate_parse: 1 callbacks suppressed [ 390.793762][T15530] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2695'. [ 390.846911][T15536] netlink: 'syz.0.2696': attribute type 3 has an invalid length. [ 391.023644][T15547] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 391.164546][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 391.618396][T15579] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 391.644538][T15582] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 391.652647][T15581] netlink: 'syz.1.2710': attribute type 15 has an invalid length. [ 391.675698][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 391.684730][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'. [ 391.844539][T15594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.214987][T15614] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2719'. [ 392.228174][T15613] netlink: 'syz.0.2718': attribute type 23 has an invalid length. [ 392.448070][T15627] netlink: 6604 bytes leftover after parsing attributes in process `syz.0.2722'. [ 392.582758][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2723'. [ 392.610522][T15631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'. [ 393.206244][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2733'. [ 393.616873][T15648] netlink: 'syz.3.2728': attribute type 20 has an invalid length. [ 393.620059][T15684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2739'. [ 393.637013][T15648] IPv6: NLM_F_CREATE should be specified when creating new route [ 394.338988][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 394.347307][ C1] lec:lec_tx_timeout: lec0 [ 394.352374][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.410722][T15685] netlink: 'syz.1.2735': attribute type 13 has an invalid length. [ 395.255840][T15765] IPVS: set_ctl: invalid protocol: 230 224.0.0.2:20004 [ 395.295709][T15769] netlink: 'syz.3.2759': attribute type 28 has an invalid length. [ 395.322911][T15769] netlink: 'syz.3.2759': attribute type 3 has an invalid length. [ 395.556845][T15786] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 395.838196][T15805] __nla_validate_parse: 7 callbacks suppressed [ 395.838219][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 395.867779][T15811] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2770'. [ 395.875527][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 395.887319][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 395.914163][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 396.091714][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2773'. [ 396.116701][T15821] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2775'. [ 396.159663][T15821] syzkaller1: entered allmulticast mode [ 396.392111][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 396.402830][T15837] xt_cgroup: invalid path, errno=-2 [ 396.587247][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.614603][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.659754][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.684280][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.006099][T15873] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 397.054339][T15873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 397.285198][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2797'. [ 397.670096][T15900] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 397.817430][T15907] block nbd1: Unsupported socket: should be TCP or UNIX. [ 397.866201][T15910] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 398.057224][T15923] xt_l2tp: missing protocol rule (udp|l2tpip) [ 398.595139][T15951] syzkaller1: entered promiscuous mode [ 398.622477][T15951] syzkaller1: entered allmulticast mode [ 398.811836][T15958] 0: renamed from hsr_slave_1 [ 398.849753][T15958] 0: entered allmulticast mode [ 398.858294][T15958] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 399.057886][T15964] gretap0: entered promiscuous mode [ 399.079705][T15964] vlan2: entered promiscuous mode [ 399.093149][T15969] netlink: 'syz.4.2824': attribute type 1 has an invalid length. [ 399.359003][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.367152][ C1] lec:lec_tx_timeout: lec0 [ 399.372840][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.540812][T15975] bond6: (slave geneve3): making interface the new active one [ 399.561482][T15975] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 399.593325][T15981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 399.715445][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 399.861780][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 399.887099][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 399.912433][T16000] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 399.923955][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 400.035900][T16003] syzkaller1: entered promiscuous mode [ 400.055373][T16003] syzkaller1: entered allmulticast mode [ 400.116105][T16021] netlink: 'syz.3.2836': attribute type 1 has an invalid length. [ 400.555728][T16019] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 400.762722][ T5490] veth0_vlan: left promiscuous mode [ 400.865543][ T5490] veth0_vlan: entered promiscuous mode [ 400.922398][T16046] __nla_validate_parse: 8 callbacks suppressed [ 400.922423][T16046] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2838'. [ 401.231852][T16046] bond7 (unregistering): Released all slaves [ 401.605588][T16061] syzkaller0: entered promiscuous mode [ 401.613588][T16061] syzkaller0: entered allmulticast mode [ 402.006412][T16082] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2846'. [ 402.264492][T16096] x_tables: duplicate underflow at hook 1 [ 402.457792][T16100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.515202][T16108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2851'. [ 402.525142][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2853'. [ 402.696631][T16105] bond9: entered promiscuous mode [ 402.734786][T16105] 8021q: adding VLAN 0 to HW filter on device bond9 [ 402.807261][T16125] 8021q: adding VLAN 0 to HW filter on device bond9 [ 402.834211][T16125] bond9: (slave sit2): The slave device specified does not support setting the MAC address [ 402.848008][T16125] bond9: (slave sit2): Error -95 calling set_mac_address [ 403.133379][T16136] veth0: entered promiscuous mode [ 403.149872][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 403.189968][T16136] veth0 (unregistering): left promiscuous mode [ 403.352714][T16147] netlink: 'syz.3.2861': attribute type 142 has an invalid length. [ 403.506184][T16151] openvswitch: netlink: Duplicate key (type 2). [ 403.598920][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 403.615616][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 404.040735][T16179] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2871'. [ 404.155654][T16186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2874'. [ 404.270866][T16188] tipc: Enabling of bearer rejected, already enabled [ 404.284647][T16190] unsupported nlmsg_type 40 [ 404.389012][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.397643][ C1] lec:lec_tx_timeout: lec0 [ 404.402892][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 404.484166][T16206] netlink: 'syz.3.2881': attribute type 8 has an invalid length. [ 404.501240][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'. [ 404.529116][T16206] openvswitch: netlink: Flow key attr not present in new flow. [ 405.157832][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.171343][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.180386][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.192693][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.201377][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.254489][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 405.265003][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 405.276165][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 405.292713][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 405.304424][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.890855][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.211068][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.234533][T16283] __nla_validate_parse: 9 callbacks suppressed [ 406.234557][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 406.285820][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2907'. [ 406.339709][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.385990][T16281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2906'. [ 406.528329][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.631503][T16301] netlink: 'syz.3.2913': attribute type 2 has an invalid length. [ 406.883897][T16313] ieee802154 phy0 wpan0: encryption failed: -22 [ 406.911472][T16314] netlink: 'syz.3.2916': attribute type 21 has an invalid length. [ 406.935575][T16314] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.948491][T16314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.956193][T16314] IPv6: NLM_F_CREATE should be set when creating new route [ 406.964078][T16314] IPv6: NLM_F_CREATE should be set when creating new route [ 406.971825][T16314] IPv6: NLM_F_CREATE should be set when creating new route [ 407.015082][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 407.065976][T16314] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 407.173839][ T35] tipc: Resetting bearer [ 407.390802][ T5146] Bluetooth: hci5: command tx timeout [ 407.490010][ T35] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 407.726387][ T35] bond5 (unregistering): (slave geneve3): Releasing active interface [ 407.802565][ T35] tipc: Disabling bearer [ 407.874049][ T35] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 407.883561][ T35] bridge2 (unregistering): left promiscuous mode [ 408.096712][ T35] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 408.107631][ T35] bond0 (unregistering): Released all slaves [ 408.122162][ T35] bond1 (unregistering): Released all slaves [ 408.147166][ T35] bond2 (unregistering): Released all slaves [ 408.163553][ T35] bond3 (unregistering): Released all slaves [ 408.190750][ T35] bond4 (unregistering): Released all slaves [ 408.206123][ T35] bond5 (unregistering): Released all slaves [ 408.223428][ T35] bond6 (unregistering): Released all slaves [ 408.240105][ T35] bond7 (unregistering): Released all slaves [ 408.266671][ T35] bond8 (unregistering): Released all slaves [ 408.284210][ T35] bond9 (unregistering): Released all slaves [ 408.300638][T16320] syzkaller0: entered allmulticast mode [ 408.345851][T16320] syzkaller0: left allmulticast mode [ 408.555376][ T35] : left promiscuous mode [ 408.631022][T16357] "syz.4.2926" (16357) uses obsolete ecb(arc4) skcipher [ 408.650052][T16233] chnl_net:caif_netlink_parms(): no params data found [ 408.876724][ T35] tipc: Left network mode [ 409.419106][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.429127][ C1] lec:lec_tx_timeout: lec0 [ 409.434313][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.479293][ T5146] Bluetooth: hci5: command 0x041b tx timeout [ 409.493730][T16233] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.535373][T16233] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.555212][T16233] bridge_slave_0: entered allmulticast mode [ 409.563972][T16233] bridge_slave_0: entered promiscuous mode [ 409.609701][T16233] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.638979][T16233] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.658572][T16233] bridge_slave_1: entered allmulticast mode [ 409.687109][T16233] bridge_slave_1: entered promiscuous mode [ 409.853693][T16233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.893311][T16233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.997942][T16233] team0: Port device team_slave_0 added [ 410.017470][T16233] team0: Port device team_slave_1 added [ 410.043775][T16319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.072097][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 410.268505][T16233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.288393][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.318369][T16233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.375786][T16233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.389313][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.417345][T16233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.440078][T16413] syzkaller0: entered promiscuous mode [ 410.446362][T16413] syzkaller0: entered allmulticast mode [ 410.454868][T16414] xt_cgroup: xt_cgroup: no path or classid specified [ 410.650719][T16233] hsr_slave_0: entered promiscuous mode [ 410.666625][T16233] hsr_slave_1: entered promiscuous mode [ 410.779170][T16426] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2937'. [ 411.001029][T16432] : renamed from virt_wifi0 [ 411.132932][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 411.163707][T16435] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 411.553963][ T50] Bluetooth: hci5: command 0x041b tx timeout [ 411.932078][ T35] team0 (unregistering): Port device vxcan1 removed [ 412.004992][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2944'. [ 412.015031][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2944'. [ 412.046192][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2945'. [ 412.057359][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2945'. [ 412.078537][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 412.269788][T16467] syz.0.2948 uses old SIOCAX25GETINFO [ 412.317374][T16464] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 412.342794][T16464] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 412.377295][T16464] tipc: Resetting bearer [ 412.690767][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2950'. [ 412.875813][T16486] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 412.931436][T16486] bond2: (slave lo): Enslaving as an active interface with an up link [ 412.942905][T16486] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 412.989461][ T35] IPVS: stop unused estimator thread 0... [ 413.012215][T16495] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 413.130869][T16506] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2957'. [ 413.269643][T16374] mpoa:mpoad_close: () going down [ 413.427760][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 413.468821][ C1] ================================================================== [ 413.477143][ C1] BUG: KASAN: slab-use-after-free in sock_def_readable+0x1cb/0x550 [ 413.485416][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 413.485688][ C1] Read of size 8 at addr ffff888058a980c0 by task rm/16512 [ 413.502498][ C1] [ 413.504870][ C1] CPU: 1 UID: 0 PID: 16512 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 413.504897][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 413.504910][ C1] Call Trace: [ 413.504919][ C1] [ 413.504927][ C1] dump_stack_lvl+0xe8/0x150 [ 413.504961][ C1] print_report+0xba/0x230 [ 413.504983][ C1] ? sock_def_readable+0x1cb/0x550 [ 413.505006][ C1] kasan_report+0x117/0x150 [ 413.505029][ C1] ? sock_def_readable+0x1cb/0x550 [ 413.505055][ C1] sock_def_readable+0x1cb/0x550 [ 413.505077][ C1] ? sock_def_readable+0xae/0x550 [ 413.505099][ C1] ? send_to_lecd+0x26d/0x830 [ 413.505123][ C1] send_to_lecd+0x3e7/0x830 [ 413.505148][ C1] lec_arp_expire_arp+0x150/0x280 [ 413.505174][ C1] call_timer_fn+0x192/0x5e0 [ 413.505201][ C1] ? __pfx_lec_arp_expire_arp+0x10/0x10 [ 413.505225][ C1] ? call_timer_fn+0xd4/0x5e0 [ 413.505251][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 413.505282][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.505304][ C1] ? __pfx_lec_arp_expire_arp+0x10/0x10 [ 413.505330][ C1] __run_timer_base+0x652/0x8b0 [ 413.505363][ C1] ? ktime_get+0x45/0x220 [ 413.505390][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 413.505423][ C1] run_timer_softirq+0xb7/0x170 [ 413.505448][ C1] handle_softirqs+0x22a/0x840 [ 413.505476][ C1] ? __irq_exit_rcu+0xca/0x220 [ 413.505503][ C1] __irq_exit_rcu+0xca/0x220 [ 413.505527][ C1] irq_exit_rcu+0x9/0x30 [ 413.505551][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 413.505575][ C1] [ 413.505582][ C1] [ 413.505588][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.505610][ C1] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 413.505632][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 413.505650][ C1] RSP: 0018:ffffc900039673a8 EFLAGS: 00000246 [ 413.505670][ C1] RAX: 1ffff1100989d201 RBX: ffffffffffffffff RCX: ffffffff81a1090f [ 413.505685][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802a7f1d78 [ 413.505699][ C1] RBP: ffffc900039674b0 R08: ffff88802a7f1d7f R09: 1ffff110054fe3af [ 413.505713][ C1] R10: dffffc0000000000 R11: ffffed10054fe3af R12: 0000000000000001 [ 413.505727][ C1] R13: 1ffff9200072ce84 R14: ffffed10054fe3b0 R15: 1ffff110054fe3af [ 413.505746][ C1] ? __up_read+0x18f/0x6b0 [ 413.505772][ C1] __up_read+0x18f/0x6b0 [ 413.505795][ C1] ? __pfx___up_read+0x10/0x10 [ 413.505820][ C1] validate_mm+0x25d/0x4c0 [ 413.505844][ C1] ? __pfx_validate_mm+0x10/0x10 [ 413.505868][ C1] ? vma_wants_writenotify+0xb3/0x2a0 [ 413.505893][ C1] ? vma_set_page_prot+0xc3/0x100 [ 413.505916][ C1] ? mmap_action_complete+0x209/0x250 [ 413.505943][ C1] mmap_region+0x1559/0x22a0 [ 413.505973][ C1] ? __pfx_mmap_region+0x10/0x10 [ 413.505994][ C1] ? arch_stack_walk+0xfb/0x150 [ 413.506021][ C1] ? mas_next_slot+0xc20/0xcf0 [ 413.506047][ C1] ? mas_prev_slot+0xb31/0xbb0 [ 413.506112][ C1] ? bpf_lsm_mmap_addr+0x9/0x50 [ 413.506132][ C1] ? security_mmap_addr+0x71/0x240 [ 413.506156][ C1] ? shmem_mapping+0xd/0x50 [ 413.506176][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 413.506203][ C1] do_mmap+0xc39/0x10c0 [ 413.506232][ C1] ? __pfx_do_mmap+0x10/0x10 [ 413.506254][ C1] ? down_write_killable+0x180/0x240 [ 413.506281][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 413.506306][ C1] ? apparmor_mmap_file+0x2da/0x3e0 [ 413.506328][ C1] vm_mmap_pgoff+0x2c9/0x4f0 [ 413.506362][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 413.506386][ C1] ? __fget_files+0x2a/0x420 [ 413.506412][ C1] ? __fget_files+0x3a0/0x420 [ 413.506435][ C1] ? __fget_files+0x2a/0x420 [ 413.506460][ C1] ksys_mmap_pgoff+0x51e/0x760 [ 413.506486][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.506507][ C1] do_syscall_64+0x15f/0xf80 [ 413.506530][ C1] ? trace_irq_disable+0x3b/0x140 [ 413.506551][ C1] ? clear_bhb_loop+0x40/0x90 [ 413.506573][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.506592][ C1] RIP: 0033:0x7f14bdda4242 [ 413.506611][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 413.506628][ C1] RSP: 002b:00007ffd4728c5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 413.506648][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14bdda4242 [ 413.506662][ C1] RDX: 0000000000000001 RSI: 0000000000009088 RDI: 0000000000000000 [ 413.506675][ C1] RBP: 0000000000000802 R08: 0000000000000003 R09: 0000000000000000 [ 413.506687][ C1] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000 [ 413.506700][ C1] R13: 00007f14bda7b0c0 R14: 00007ffd4728ca10 R15: 00000fffa8e518be [ 413.506723][ C1] [ 413.506730][ C1] [ 413.578973][T16514] bond10: entered promiscuous mode [ 413.582410][ C1] Allocated by task 16372: [ 413.582428][ C1] kasan_save_track+0x3e/0x80 [ 413.582463][ C1] __kasan_slab_alloc+0x6c/0x80 [ 414.019530][ C1] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 414.025460][ C1] sock_alloc_inode+0x2c/0x190 [ 414.030598][ C1] alloc_inode+0x6a/0x1b0 [ 414.035025][ C1] __sock_create+0x12d/0x9d0 [ 414.039813][ C1] __sys_socket+0xd6/0x1b0 [ 414.044595][ C1] __x64_sys_socket+0x7a/0x90 [ 414.049684][ C1] do_syscall_64+0x15f/0xf80 [ 414.054430][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.060657][ C1] [ 414.063159][ C1] Freed by task 16511: [ 414.067758][ C1] kasan_save_track+0x3e/0x80 [ 414.072720][ C1] kasan_save_free_info+0x46/0x50 [ 414.078055][ C1] __kasan_slab_free+0x5c/0x80 [ 414.083144][ C1] kmem_cache_free+0x180/0x630 [ 414.088126][ C1] rcu_core+0x7cd/0x1070 [ 414.092660][ C1] handle_softirqs+0x22a/0x840 [ 414.097986][ C1] __irq_exit_rcu+0xca/0x220 [ 414.102777][ C1] irq_exit_rcu+0x9/0x30 [ 414.107117][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 414.113112][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.119295][ C1] [ 414.121710][ C1] Last potentially related work creation: [ 414.127685][ C1] kasan_save_stack+0x3e/0x60 [ 414.132513][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 414.137838][ C1] call_rcu+0xee/0x890 [ 414.141960][ C1] evict+0x95b/0xb10 [ 414.146730][ C1] __dentry_kill+0x1a2/0x5e0 [ 414.151803][ C1] finish_dput+0xc9/0x480 [ 414.156471][ C1] __fput+0x691/0xa60 [ 414.160691][ C1] task_work_run+0x1d9/0x270 [ 414.165696][ C1] get_signal+0x11eb/0x1330 [ 414.170583][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 414.176529][ C1] exit_to_user_mode_loop+0x86/0x480 [ 414.181849][ C1] do_syscall_64+0x33e/0xf80 [ 414.186481][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.192920][ C1] [ 414.195257][ C1] The buggy address belongs to the object at ffff888058a98000 [ 414.195257][ C1] which belongs to the cache sock_inode_cache of size 1408 [ 414.210311][ C1] The buggy address is located 192 bytes inside of [ 414.210311][ C1] freed 1408-byte region [ffff888058a98000, ffff888058a98580) [ 414.224655][ C1] [ 414.227118][ C1] The buggy address belongs to the physical page: [ 414.233962][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58a98 [ 414.243622][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 414.252574][ C1] memcg:ffff88803256c301 [ 414.256911][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 414.264807][ C1] page_type: f5(slab) [ 414.269056][ C1] raw: 00fff00000000040 ffff88801f2c6c80 dead000000000100 dead000000000122 [ 414.278080][ C1] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff88803256c301 [ 414.286768][ C1] head: 00fff00000000040 ffff88801f2c6c80 dead000000000100 dead000000000122 [ 414.295468][ C1] head: 0000000000000000 0000000800150015 00000000f5000000 ffff88803256c301 [ 414.304416][ C1] head: 00fff00000000003 ffffea000162a601 00000000ffffffff 00000000ffffffff [ 414.313269][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 414.322115][ C1] page dumped because: kasan: bad access detected [ 414.328790][ C1] page_owner tracks the page as allocated [ 414.334510][ C1] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5829, tgid 5829 (syz-executor), ts 90513027296, free_ts 28274906376 [ 414.358140][ C1] post_alloc_hook+0x231/0x280 [ 414.362938][ C1] get_page_from_freelist+0x24dc/0x2580 [ 414.368583][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 414.374579][ C1] allocate_slab+0x77/0x660 [ 414.379096][ C1] refill_objects+0x331/0x3c0 [ 414.383876][ C1] __pcs_replace_empty_main+0x2e6/0x730 [ 414.389521][ C1] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 414.395335][ C1] sock_alloc_inode+0x2c/0x190 [ 414.400191][ C1] alloc_inode+0x6a/0x1b0 [ 414.404531][ C1] __sock_create+0x12d/0x9d0 [ 414.409494][ C1] __sys_socket+0xd6/0x1b0 [ 414.414202][ C1] __x64_sys_socket+0x7a/0x90 [ 414.419189][ C1] do_syscall_64+0x15f/0xf80 [ 414.424062][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.430424][ C1] page last free pid 1 tgid 1 stack trace: [ 414.436903][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 414.442345][ C1] free_contig_range+0xbb/0x170 [ 414.447595][ C1] destroy_args+0x4e5/0x570 [ 414.452506][ C1] debug_vm_pgtable+0x3f8/0x410 [ 414.457722][ C1] do_one_initcall+0x250/0x870 [ 414.462939][ C1] do_initcall_level+0x104/0x190 [ 414.468160][ C1] do_initcalls+0x59/0xa0 [ 414.472783][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 414.478541][ C1] kernel_init+0x1d/0x1d0 [ 414.483162][ C1] ret_from_fork+0x514/0xb70 [ 414.487903][ C1] ret_from_fork_asm+0x1a/0x30 [ 414.493309][ C1] [ 414.495730][ C1] Memory state around the buggy address: [ 414.501801][ C1] ffff888058a97f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 414.510223][ C1] ffff888058a98000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 414.518556][ C1] >ffff888058a98080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 414.526895][ C1] ^ [ 414.533070][ C1] ffff888058a98100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 414.541430][ C1] ffff888058a98180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 414.549680][ C1] ================================================================== [ 414.558212][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 414.565790][ C1] CPU: 1 UID: 0 PID: 16512 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 414.574674][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.584842][ C1] Call Trace: [ 414.588245][ C1] [ 414.591213][ C1] vpanic+0x56c/0xa60 [ 414.595851][ C1] ? __pfx_vpanic+0x10/0x10 [ 414.600504][ C1] ? irqentry_exit+0x218/0x730 [ 414.605670][ C1] panic+0xc5/0xd0 [ 414.609538][ C1] ? __pfx_panic+0x10/0x10 [ 414.614093][ C1] ? sock_def_readable+0x1cb/0x550 [ 414.619340][ C1] ? sock_def_readable+0x1cb/0x550 [ 414.624681][ C1] check_panic_on_warn+0x89/0xb0 [ 414.629656][ C1] ? sock_def_readable+0x1cb/0x550 [ 414.634892][ C1] end_report+0x73/0x170 [ 414.639174][ C1] ? sock_def_readable+0x1cb/0x550 [ 414.644334][ C1] kasan_report+0x128/0x150 [ 414.648878][ C1] ? sock_def_readable+0x1cb/0x550 [ 414.654215][ C1] sock_def_readable+0x1cb/0x550 [ 414.659195][ C1] ? sock_def_readable+0xae/0x550 [ 414.664371][ C1] ? send_to_lecd+0x26d/0x830 [ 414.669273][ C1] send_to_lecd+0x3e7/0x830 [ 414.673922][ C1] lec_arp_expire_arp+0x150/0x280 [ 414.678997][ C1] call_timer_fn+0x192/0x5e0 [ 414.683637][ C1] ? __pfx_lec_arp_expire_arp+0x10/0x10 [ 414.689259][ C1] ? call_timer_fn+0xd4/0x5e0 [ 414.694235][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 414.699578][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.705008][ C1] ? __pfx_lec_arp_expire_arp+0x10/0x10 [ 414.710698][ C1] __run_timer_base+0x652/0x8b0 [ 414.716042][ C1] ? ktime_get+0x45/0x220 [ 414.721552][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 414.727109][ C1] run_timer_softirq+0xb7/0x170 [ 414.732068][ C1] handle_softirqs+0x22a/0x840 [ 414.736852][ C1] ? __irq_exit_rcu+0xca/0x220 [ 414.741729][ C1] __irq_exit_rcu+0xca/0x220 [ 414.746504][ C1] irq_exit_rcu+0x9/0x30 [ 414.751021][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 414.756961][ C1] [ 414.760359][ C1] [ 414.763488][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.770117][ C1] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 414.775773][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 414.796813][ C1] RSP: 0018:ffffc900039673a8 EFLAGS: 00000246 [ 414.803304][ C1] RAX: 1ffff1100989d201 RBX: ffffffffffffffff RCX: ffffffff81a1090f [ 414.812004][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802a7f1d78 [ 414.820738][ C1] RBP: ffffc900039674b0 R08: ffff88802a7f1d7f R09: 1ffff110054fe3af [ 414.829180][ C1] R10: dffffc0000000000 R11: ffffed10054fe3af R12: 0000000000000001 [ 414.837454][ C1] R13: 1ffff9200072ce84 R14: ffffed10054fe3b0 R15: 1ffff110054fe3af [ 414.845743][ C1] ? __up_read+0x18f/0x6b0 [ 414.850305][ C1] __up_read+0x18f/0x6b0 [ 414.854738][ C1] ? __pfx___up_read+0x10/0x10 [ 414.860024][ C1] validate_mm+0x25d/0x4c0 [ 414.864747][ C1] ? __pfx_validate_mm+0x10/0x10 [ 414.870251][ C1] ? vma_wants_writenotify+0xb3/0x2a0 [ 414.876152][ C1] ? vma_set_page_prot+0xc3/0x100 [ 414.881296][ C1] ? mmap_action_complete+0x209/0x250 [ 414.887836][ C1] mmap_region+0x1559/0x22a0 [ 414.892749][ C1] ? __pfx_mmap_region+0x10/0x10 [ 414.898654][ C1] ? arch_stack_walk+0xfb/0x150 [ 414.903854][ C1] ? mas_next_slot+0xc20/0xcf0 [ 414.908738][ C1] ? mas_prev_slot+0xb31/0xbb0 [ 414.913645][ C1] ? bpf_lsm_mmap_addr+0x9/0x50 [ 414.918585][ C1] ? security_mmap_addr+0x71/0x240 [ 414.923831][ C1] ? shmem_mapping+0xd/0x50 [ 414.928456][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 414.934292][ C1] do_mmap+0xc39/0x10c0 [ 414.938733][ C1] ? __pfx_do_mmap+0x10/0x10 [ 414.943771][ C1] ? down_write_killable+0x180/0x240 [ 414.949784][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 414.955522][ C1] ? apparmor_mmap_file+0x2da/0x3e0 [ 414.961268][ C1] vm_mmap_pgoff+0x2c9/0x4f0 [ 414.966429][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 414.971724][ C1] ? __fget_files+0x2a/0x420 [ 414.976696][ C1] ? __fget_files+0x3a0/0x420 [ 414.981640][ C1] ? __fget_files+0x2a/0x420 [ 414.986265][ C1] ksys_mmap_pgoff+0x51e/0x760 [ 414.991052][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.997407][ C1] do_syscall_64+0x15f/0xf80 [ 415.002253][ C1] ? trace_irq_disable+0x3b/0x140 [ 415.007299][ C1] ? clear_bhb_loop+0x40/0x90 [ 415.012428][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.018594][ C1] RIP: 0033:0x7f14bdda4242 [ 415.023110][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 415.043863][ C1] RSP: 002b:00007ffd4728c5d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 415.053108][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14bdda4242 [ 415.061698][ C1] RDX: 0000000000000001 RSI: 0000000000009088 RDI: 0000000000000000 [ 415.070132][ C1] RBP: 0000000000000802 R08: 0000000000000003 R09: 0000000000000000 [ 415.078222][ C1] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000 [ 415.086495][ C1] R13: 00007f14bda7b0c0 R14: 00007ffd4728ca10 R15: 00000fffa8e518be [ 415.095018][ C1] [ 415.098281][ C1] Kernel Offset: disabled [ 415.103056][ C1] Rebooting in 86400 seconds..