last executing test programs: 9.075681886s ago: executing program 2 (id=2966): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x2}, 0x10}, 0x94) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f, 0x10}, 0x20) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) (rerun: 64) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async, rerun: 32) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async, rerun: 32) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848148000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) (async) read(r6, &(0x7f0000000000)=""/4, 0x4) 8.980283154s ago: executing program 2 (id=2967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000880)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x5c, 0xfffe, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x6, 0x15, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, {[@cipso={0x86, 0x29, 0xffffffffffffffff, [{0x0, 0x11, "0cdfc194ded429624d2fab2ba1f248"}, {0x6, 0x9, "adc86cf87f8711"}, {0x6, 0x5, "5069eb"}, {0x5, 0x4, "c807"}]}]}}}}}}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'dvmrp1\x00', &(0x7f0000000800)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@private, @dev}, {0x0, @link_local}, @usr_ip4_spec={@multicast1, @remote}, {0x0, @remote}}}}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080003400000000008000140000000000800024000000000080004400000000008000540000000000900010073797a30000000000900020073797a32000000002221be7247b770f900000000000000000000000a"], 0x98}}, 0x0) 8.786582136s ago: executing program 2 (id=2971): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000)=0x87f4, 0x4) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010042) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001bc0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xe2b}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x1}}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r8, {0x9, 0xb}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0001000002"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8001) 8.605115518s ago: executing program 2 (id=2974): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockname$ax25(r4, &(0x7f00000002c0)={{0x3, @bcast}, [@remote, @rose, @rose, @rose, @netrom, @null, @bcast, @default]}, &(0x7f00000000c0)=0x48) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x1}) r6 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@alg, &(0x7f0000000240)=0x80, 0x80800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r8, 0x303, 0x70bd29, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48890}, 0x20000804) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x90}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc090) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000080)={0x10000000}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x4848e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x80035}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) (async) epoll_create1(0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x100) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) (async) getsockname$ax25(r4, &(0x7f00000002c0)={{0x3, @bcast}, [@remote, @rose, @rose, @rose, @netrom, @null, @bcast, @default]}, &(0x7f00000000c0)=0x48) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x1}) (async) accept4(0xffffffffffffffff, &(0x7f0000000340)=@alg, &(0x7f0000000240)=0x80, 0x80800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r8, 0x303, 0x70bd29, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48890}, 0x20000804) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x90}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc090) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000080)={0x10000000}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x4848e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x80035}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) 7.736011534s ago: executing program 2 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x3c, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}, @generic="000000000000000b01558ca3d3096ec248f44239"]}, 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r7, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r9], 0x24}}, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x64, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2da0ef4d4f08ef1678917de3de3d7b4cd008d35eb8557ec3ee777de774fc7987cca41989"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r13, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000003f40)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0xe4, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @CTA_TUPLE_ORIG={0x4}]}, 0xe4}}, 0x800) r15 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r15, 0x10c, 0x2, &(0x7f0000000140), 0x4) (async) r16 = socket$netlink(0x10, 0x3, 0x15) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r16, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x100, 0x1403, 0x100, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8014}, 0x4040011) (async) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x40, 0x107, 0xfffffffe, 0x4, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7.443455179s ago: executing program 2 (id=2983): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.015997456s ago: executing program 3 (id=3052): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r3, 0x1, 0x7}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d00)={0x5c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {}, @broadcast, @device_a, @initial, {0x0, 0xb}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x1, 0x9, @void, @val=0x6, @val="7142004749285faa7af20766504aac8b"}}}}}}]}, 0x5c}}, 0x20000080) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000e00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)={0x3ac, r6, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x12c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x128, 0x4, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x36, 0x2, "3b9ead60270e6ceabd42a7cefb92dba56fe539c9b7ebbce2bd478034f85df7560f9f3f46687726f2c79bc10b913ab9827c11"}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6a3a7e86}, @NL80211_PKTPAT_PATTERN={0xc1, 0x2, "6adb611c5bfdf3ba029cd4a90b23b96812e228936191f9a4c13ba246ed5a8ea47a57f6eb8d599c168752f7bc5a64f3f9c65943af5772428885317ca788b9e9accb35bbe85edb0323500cbd61139c1e66280f650309709c76ab3f189c9d401fb120853a720574586228bfc21191295249b617e38c4b00ef27fc982434377bfc4e04266565abfc5dbc847c5eed986392f19b25bad67da045fd371c01281d0af1fbd13fd3901cac039cbf1a85d1dca245abfb82aa96f0752a2972f83bf094"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x17c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x170, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_IE={0x14, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @cf={0x4, 0x6, {0x9, 0x3, 0xfc00, 0x1}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x5d}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0xa9fb}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x118, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x73}, 0x7, 0x40, @broadcast, 0x6, 0x9, 0x100}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random_vendor={0xdd, 0xa2, "978ac982081b62bd3b1e929de3b19cb07905fe2bd5472a690ab0cff9edf654b66dfd499e50cd2894690fb4cbe8103fcdccde82e93b7b5ddcc2b0bf3eefd5f6fefe9e02786d779c4592961c874421e918e99be0a7bd2ebd7dcb098896fe834ba6f77280020f2bc61a738b13fdcbefe716e859ebfa7bf8691d394dbc25c75c30df7dfd54d2f74120d0f4e080ff76f8959413820241170010ad520d30341245c641e989"}, @perr={0x84, 0x42, {0x0, 0x4, [{{}, @device_a, 0x400, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x38}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x1}, {{}, @device_b, 0x200, @void, 0x42}]}}, @mic={0x8c, 0x10, {0x45a, "570114893650", @short="ff40bc00983bab42"}}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xb4, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0xb0, 0x2a, [@mesh_chsw={0x76, 0x6, {0x9, 0x9, 0x97e7, 0x2}}, @dsss={0x3, 0x1, 0x6}, @supported_rates={0x1, 0x3, [{0x9, 0x1}, {0x30, 0x1}, {0x48}]}, @mesh_chsw={0x76, 0x6, {0x81, 0xfa, 0x3c, 0xfc01}}, @fast_bss_trans={0x37, 0x92, {0x6, 0x5, "163d86595176394467c353bff15563fb", "831d66a8355e2ad307bf6219c10e158783849f3ee89043e79eee311ed9b1c9a7", "ef32f6a314a9e0c86c95a2eb602d8878c68f13fe8ba718d25f8e178efb8d758d", [{0x4, 0xb, "9fb0efa6d1370019c0beb5"}, {0x4, 0x1, "b3"}, {0x2, 0x5, "a660c498b5"}, {0x4, 0x21, "447c2b99894adea330e58bff02be8013e15db00af485d2f5027cf9d7695cb35526"}, {0x4, 0x4, "822235fb"}]}}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x84}, 0x5) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r11 = accept4(r8, 0x0, 0x0, 0x80000) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet(r12, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r12, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r11) 1.735337998s ago: executing program 1 (id=3056): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x4, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x40, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_FAST_LEAVE={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.525193958s ago: executing program 1 (id=3060): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, &(0x7f0000000080)) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x5f, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xdc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_getnexthop={0x48, 0x6a, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.200833495s ago: executing program 4 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x464, 0x100, 0x70bd27, 0xf2, "9dfc85169560224c34212d694cdcfc61aa7a69eff6743691958d8960784136227f7875b8c67c0486f593a428725a62e5dae8015fe320854f95a116a6ecc108491a3d99eae2bf68a8fbebad27ed1a00384f7049fb1d3596bed49162fce343aa6a0b0bc679f7feebc2c56552908a90c2d1d23d7643b9b136b711562e76", ["", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.18526096s ago: executing program 1 (id=3065): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x2, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) 1.123079309s ago: executing program 4 (id=3067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) (async) r3 = socket(0x10, 0x2, 0x6) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4}, 0xe) (async) r6 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000500)={0x0, 'ipvlan1\x00', {0x2}}) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r7}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001b1252a83478bdef9422b897df08b4d778d11e88e091dd932d633800a8dbb5730064b1553689a55f43165279ade734dc8ce608f9223427663baee9054bd64312b84bd0ce82e408162df790487c41f6fcf029575722230788c924bf643a3ee7b0a512021756b7189c84e95d9e6eec852cd143cdc7910a3970858e00386205f8b492aa5cb2ba33db018f673ca51b0d34ae2b32ef6722fe4aff5c4be682fc36778db9ee78db6c95b0f76a10a0ffd0da0fc5e956d4f25de605f304f6de4191c2f51daf6ed8af7d1bd2c64f6484123116d1ae65533d53f7f095768579e9dfe394b3ea37f8f5a7a74db"], 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf2505000000280001801400020069705f7674693000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000300000000000500020002000000ffff00000e00000008000500ff010000"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4040041) 1.115509672s ago: executing program 3 (id=3068): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf250700000006001c00ff07000006001a004e230000080011000000000005001400070000000c000f00ffffffffffffff7f0c000f00030000000000000006001d000000000008001700", @ANYRES32=r5, @ANYBLOB="cf226cad419dae764736aa3807de3a1db10215096c6bfdf4866e1e31b8733b05febce46b6abb3729ee71235f163e1e651a20dae34cd74af66d9fee7e777ad8bd329ae46f79af6b197b58a116aa3220eda6a41ad08a4838b1f30310a19c9e6d413ebb8e4b8d"], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x80) 1.029437756s ago: executing program 3 (id=3069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r2, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x101, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa133e4d2279dc63f}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000080) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) recvmmsg(r9, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 947.662446ms ago: executing program 1 (id=3070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000004600), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000046c0)={0x0, 0x72d3c73b4cbc199e, &(0x7f0000004680)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="0100258dddc87c2cbd7000fcdbdf250100000000000000014100000018001700000002100000066574683a6970766c616e311c58b9952f228ca587c7b341124bad8f4962060865dc6d0000000000000062b9d0663a278682628fe73584cfba06000000d48135719939c01b54298fcc2dad94cd00fc27fbb1ba815a6d7a365e9f66a6ab49010ce180fed9474ce1b49f34769ac92eec4261a840d8"], 0x34}, 0x1, 0x0, 0x0, 0x24008010}, 0x40080) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @empty}, @generic={0x2c, "22bb8361bdc6da7b5e947405eeb4"}, @l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x1}, 0x7, 0x0, 0x0, 0x0, 0xe0, &(0x7f0000000100)='dvmrp1\x00', 0x7, 0x8, 0xeb}) 906.698558ms ago: executing program 4 (id=3071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000010480)={0x0, 0x0, &(0x7f0000010440)={&(0x7f00000102c0)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1406}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x88c0) 887.247512ms ago: executing program 3 (id=3072): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) r1 = socket$kcm(0x11, 0x5, 0x0) tee(r1, 0xffffffffffffffff, 0x8000000000000000, 0x2) close(r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40810) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfffffcebfff, 0x800, 0x80}, 0x20) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xd3f, 0x4ed, 0x8, 0x8, 0x9]}, &(0x7f0000000100)=0x54) 832.11842ms ago: executing program 1 (id=3073): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) 819.482698ms ago: executing program 0 (id=3074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e, 0x2e, 0x61, 0x30]}}, 0x0, 0x39}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000030c0), 0x2) 732.583532ms ago: executing program 1 (id=3075): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000737e3c94e62c3a2e93e558000000000100000400000000010000000000000000000000005f306000e330762617e01f3822"], 0x0, 0x35}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/29, 0x1d, 0x0, &(0x7f00000007c0)=""/77, 0x4d}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000680)={r1, 0xfffffffffffffffc, 0x9, 0x5d18}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x1e, &(0x7f0000000200)=@raw=[@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @printk={@d}, @jmp={0x5, 0x0, 0x1, 0x9, 0x0, 0x50}, @jmp={0x5, 0x1, 0xd, 0x0, 0x9, 0x4, 0x8}, @alu={0x4, 0x0, 0x2, 0x2, 0x6, 0xffffffffffffffe8, 0x8}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}], &(0x7f0000000340)='GPL\x00', 0x0, 0xe6, &(0x7f0000000380)=""/230, 0x40f00, 0x38, '\x00', r7, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x9, 0x5, 0xff8}, 0x10, r8, r9, 0x4, 0x0, &(0x7f00000006c0)=[{0x0, 0x1, 0xb, 0xa}, {0x3, 0x4, 0x6}, {0x3, 0x1, 0xf, 0x5}, {0x0, 0x2, 0x1, 0x5}], 0x10, 0x5}, 0x94) sendto$packet(r6, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x30, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x30}]}, 0x0) 656.070812ms ago: executing program 0 (id=3076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) 655.685427ms ago: executing program 4 (id=3077): r0 = socket(0x400000000010, 0x3, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x1}}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r2, {0x9, 0xb}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 602.297188ms ago: executing program 3 (id=3078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000440)="0b0000000980ffff", 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async, rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000080a0b0400000000000000000200000028000480240001800b00010072656a656374000014000200080001400000009205000200000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) (rerun: 64) 517.124928ms ago: executing program 0 (id=3079): r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000000000000000000000380000000000000", @ANYRES32, @ANYBLOB="0000000d000000f5fffff8ffffff00a0b3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000000000000000000000380000000000000", @ANYRES32, @ANYBLOB="0000000d000000f5fffff8ffffff00a0b3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) connect$inet(r0, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040), 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000c8dd00000000000004000000181100006da451058f7247b9fc2f1f1bf18161617585a2c040e7906506a836e3423dd833dc3985231334b2a10b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000046000000186800000300000000000000020000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000185300000000000000000000000000000033060008000000c76b200001000000034f3ebf050000001f7b9d0100000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 345.5769ms ago: executing program 3 (id=3080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x309}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x20001, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4890}, 0x4040) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8dcacfa1c6c2afd6, 0xc9100120, 0x0, 0xfffffffffffffd25) 343.601794ms ago: executing program 4 (id=3081): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c26bd7000fddbdf254300000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x24004811}, 0x40880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000100"/20], 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) readv(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 207.210519ms ago: executing program 0 (id=3082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r1, 0x4, r1}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x8, 0x70bd26, 0x25dfdbfc, {0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 167.123733ms ago: executing program 0 (id=3083): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) 148.535362ms ago: executing program 4 (id=3084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="4cf7", 0x2}], 0x1}}], 0x1, 0x4040001) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100fcff06ee04000000010000000400488014000180100003800c000b8008001e80040001800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd70008c2dc7c35b22a10bf9e19e0605ebfddbdf250100000000000000014100000018001700000020ffff6c92f41407c13ab7c7a5fdcd2642a916e18e17ace6ccfb3313985cba60e0aacb589d72d5cb5fe24f96777bef22a16a60ee724e6a227785252b810b0665db7b9d5d9d3a33d3cc7dd87c933ee4e050f105156fa874019af5c5d26ae428e4093d2a36bb8a041f85f30f00026ce4e3bfc655ea4a746dcb725cfc6bade8f82cb49caefee3ff2dfd451e798892a70a0e73a5b1547b25076b8350a72002d79f96525f012a7157ca90694d885dbcab2893d62f165fd46a2a821c7b16558bf8b6c7a90dfef92d74a99622773c15df52baf4f8c4c5175167a84fb314255b6342a1d18cc1a2d84e277ed7a69273ce9fbbd0b3d7874d3ddac4b3d839ee77f1f894a850930e36a15ed7a3bfa474e7bb482c727955c46eb0651d0b0dc3d726b72a3dd3eb83c25e18bd0265bbfc135d87825a3539b08373e5ddd8f48446cd3aac74b290af2d8ea6d8e2a97f1d3537b284a835bae87c6dcf2aab02"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004095) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6016721e8886d6}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)=@newchain={0x4d0, 0x64, 0x8, 0x70bd2a, 0x5, {0x0, 0x0, 0x0, r7, {0x8, 0xb}, {0xf, 0x10}, {0x3, 0x9}}, [@f_rsvp={{0x9}, {0x458, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2, 0x4}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7bc, 0x1, 0x8, 0xd3, 0x6, {0xe, 0x0, 0x82e0, 0x2, 0x7, 0x36}, {0x6a, 0x0, 0x18, 0x8, 0x0, 0x9}, 0x3, 0x1000, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8001, 0x1, 0x0, 0x10000, 0x0, 0xfffffffa, 0xff, 0x8, 0x4, 0x40, 0x9, 0x6, 0x6, 0x0, 0x6, 0x4, 0xfffffff9, 0x7, 0x8, 0xfffffff6, 0x8, 0xfffffffd, 0xfffffff8, 0xb1d3, 0x6, 0x9, 0x1, 0xc, 0x40, 0xffffffff, 0x3, 0x7, 0x8000, 0x4, 0x2, 0x3, 0x400, 0x4, 0x7ff, 0x80, 0x10000, 0xb, 0x4, 0x6, 0xfe, 0x9, 0x201, 0x8, 0x1, 0x8, 0x1, 0x9, 0x1, 0x0, 0x8000, 0x8, 0xf1e, 0xbb, 0xee, 0x1ff, 0x8, 0x7ff, 0xa, 0xc3a, 0x3, 0x8, 0x6, 0xffff, 0x10000, 0x0, 0x4, 0x7, 0x61f, 0x4, 0x1, 0x8, 0x44b, 0x100, 0x0, 0xc527, 0x3, 0xfff, 0x4, 0x6, 0x0, 0x5, 0x4, 0x4, 0x9, 0x3, 0x5, 0x7fffffff, 0x554, 0xf5, 0xc99, 0x1ca, 0x14, 0x5, 0x5, 0x4, 0xd349, 0x5, 0xd, 0x9, 0x0, 0x1, 0x4, 0x8, 0x6, 0xfff, 0xfffffffc, 0x2, 0x80, 0xffffffff, 0xc, 0x5, 0x7fff, 0x1afe, 0x2, 0xe7f915c3, 0xf350, 0x8, 0x0, 0x2, 0x5, 0x5, 0x4010000, 0xffffffff, 0x80000000, 0x5, 0x3, 0xf3b1, 0x6, 0xc, 0x5, 0x5, 0x40000000, 0x7, 0x7, 0x8, 0x0, 0x10, 0x5, 0xf, 0x7f, 0x8a2c, 0x9, 0x19735589, 0x0, 0x5, 0x3, 0x0, 0x9, 0x80000000, 0x0, 0x401, 0x3, 0x7, 0x9c21, 0x2, 0x2, 0x2, 0x9, 0x8, 0x1, 0x401, 0xfffffff8, 0x5, 0xfffffffa, 0x9d57, 0x0, 0x2, 0x2, 0x2, 0x6, 0x8, 0x5, 0x7, 0x4, 0x5, 0xffffd17b, 0x3af, 0x2d, 0x3, 0x8000, 0xfffffff9, 0x80, 0x7, 0x76, 0x976b, 0x3, 0x7, 0x4, 0x0, 0x2237, 0x8, 0xb, 0xd5ef, 0x350, 0x8, 0xd, 0x80000000, 0x7, 0xa, 0x10b, 0x3, 0x2, 0x4, 0x200, 0x2, 0xba, 0xbb, 0x6, 0x2, 0x9, 0xd4, 0x2, 0x9, 0xfd58, 0x3, 0xf2, 0x3, 0x8, 0x5, 0x8, 0x2, 0x3, 0x5, 0x2, 0xfff, 0xf8, 0x2, 0xfffff001, 0xffffff93, 0x101, 0x3, 0x74cc, 0x9a, 0x2, 0x6a93, 0xcb7, 0x8, 0x3, 0x10001, 0xa3, 0xfff, 0x2, 0x5fc1, 0x1, 0x0, 0x9, 0x5, 0x1, 0x1, 0x400]}]}]}}, @f_rsvp={{0x9}, {0x3c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0xa4d6, 0x1}, {0x401, 0x7, 0xd}, 0x2f, 0xd1, 0x5}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb}}, @TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}]}, 0x4d0}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 0s ago: executing program 0 (id=3085): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000380)={0x20002004}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.2.333'. [ 102.934077][ T7144] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.082873][ T7152] netlink: 'syz.4.336': attribute type 2 has an invalid length. [ 103.232153][ T5844] Bluetooth: hci4: command tx timeout [ 103.357769][ T7173] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.521875][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 103.536197][ T7184] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 103.555946][ T7184] netlink: 224 bytes leftover after parsing attributes in process `syz.0.346'. [ 103.763069][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 103.783457][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 103.832675][ T7206] ip6t_srh: unknown srh match flags 5F28 [ 103.914319][ T7214] netlink: 'syz.1.356': attribute type 11 has an invalid length. [ 103.925430][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 103.954010][ T7216] xfrm1: entered promiscuous mode [ 103.965416][ T7216] xfrm1: entered allmulticast mode [ 104.050040][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 104.145318][ T7235] netlink: 'syz.1.363': attribute type 11 has an invalid length. [ 104.153895][ T7234] netlink: 'syz.1.363': attribute type 11 has an invalid length. [ 104.307763][ T7252] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.366'. [ 104.432064][ T7258] netlink: 'syz.3.369': attribute type 39 has an invalid length. [ 104.515183][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 104.791962][ T7282] IPv6: sit1: Disabled Multicast RS [ 104.809977][ T7282] sit1: entered allmulticast mode [ 105.362617][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 105.516805][ T7357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.618189][ T7361] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 105.726017][ T7361] bond3 (unregistering): Released all slaves [ 105.749145][ T7377] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003 [ 105.981155][ T7388] netlink: 'syz.3.392': attribute type 9 has an invalid length. [ 106.080792][ T7397] netlink: 'syz.3.392': attribute type 3 has an invalid length. [ 106.394679][ T7410] netlink: 'syz.0.399': attribute type 2 has an invalid length. [ 106.429526][ T7415] tipc: Started in network mode [ 106.446247][ T7415] tipc: Node identity 9ead5d9cb7b9, cluster identity 4711 [ 106.478699][ T7415] tipc: Enabled bearer , priority 0 [ 106.585579][ T7419] syzkaller0: entered promiscuous mode [ 106.594642][ T7419] syzkaller0: entered allmulticast mode [ 106.601177][ T7419] tipc: Resetting bearer [ 106.651087][ T7429] tipc: Resetting bearer [ 107.697748][ T7429] tipc: Disabling bearer [ 107.715838][ T5884] tipc: Node number set to 689200540 [ 107.842356][ T7447] netlink: 'syz.0.412': attribute type 3 has an invalid length. [ 107.852664][ T7447] syzkaller0: entered promiscuous mode [ 107.859523][ T7447] syzkaller0: entered allmulticast mode [ 108.147764][ T7472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.254036][ T7484] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 108.578184][ T7506] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 108.601058][ T7508] __nla_validate_parse: 3 callbacks suppressed [ 108.601077][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 108.667613][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 108.744012][ T7515] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 108.759228][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 108.807870][ T7518] hsr_slave_0: left promiscuous mode [ 108.819336][ T7518] hsr_slave_1: left promiscuous mode [ 108.995572][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 109.091044][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 109.117453][ T7547] netlink: 'syz.3.433': attribute type 4 has an invalid length. [ 109.494998][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.435'. [ 109.568718][ T7567] netlink: 'syz.4.440': attribute type 2 has an invalid length. [ 109.577408][ T7567] netlink: 44 bytes leftover after parsing attributes in process `syz.4.440'. [ 109.653861][ T7571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'. [ 109.753303][ T7583] openvswitch: netlink: Flow key attr not present in new flow. [ 109.765551][ T7580] syzkaller0: entered promiscuous mode [ 109.771295][ T7580] syzkaller0: entered allmulticast mode [ 109.822736][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.447'. [ 110.212628][ T7621] netlink: 'syz.3.455': attribute type 2 has an invalid length. [ 110.286625][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.457'. [ 110.299089][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.308991][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.330279][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.554908][ T5899] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.574484][ T7626] infiniband syz2: set down [ 110.579463][ T7626] infiniband syz2: added ip6_vti0 [ 110.588952][ T7626] syz2: rxe_create_cq: returned err = -12 [ 110.603237][ T7626] infiniband syz2: Couldn't create ib_mad CQ [ 110.615370][ T7626] infiniband syz2: Couldn't open port 1 [ 110.663046][ T7626] RDS/IB: syz2: added [ 110.675265][ T7626] smc: adding ib device syz2 with port count 1 [ 110.683706][ T7626] smc: ib device syz2 port 1 has no pnetid [ 110.700877][ T5829] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.718274][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.089997][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.314108][ T7671] netlink: 'syz.1.471': attribute type 33 has an invalid length. [ 111.408032][ T7671] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 111.472062][ T7671] bond1 (unregistering): Released all slaves [ 111.510134][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.977403][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.397205][ T7626] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.511737][ T7738] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 112.891065][ T7772] syzkaller0: entered promiscuous mode [ 112.913267][ T7772] syzkaller0: entered allmulticast mode [ 113.008904][ T7777] syzkaller0: entered promiscuous mode [ 113.020134][ T7777] syzkaller0: entered allmulticast mode [ 113.209646][ T7789] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 113.241016][ T7791] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 113.278428][ T7790] syzkaller0: entered promiscuous mode [ 113.283945][ T7790] syzkaller0: entered allmulticast mode [ 113.344646][ T7798] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 113.354360][ T7798] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 113.888151][ T7830] syzkaller1: entered promiscuous mode [ 113.900234][ T7830] syzkaller1: entered allmulticast mode [ 113.901739][ T7836] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 113.971596][ T7830] __nla_validate_parse: 45 callbacks suppressed [ 113.971615][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 114.038241][ T7842] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 114.239761][ T7857] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.530'. [ 114.313661][ T7863] netlink: 'syz.0.532': attribute type 21 has an invalid length. [ 114.363455][ T7863] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 114.366729][ T7868] sctp: [Deprecated]: syz.1.534 (pid 7868) Use of int in maxseg socket option. [ 114.366729][ T7868] Use struct sctp_assoc_value instead [ 114.398429][ T7863] bond4 (unregistering): Released all slaves [ 114.405032][ T7868] sctp: [Deprecated]: syz.1.534 (pid 7868) Use of int in max_burst socket option deprecated. [ 114.405032][ T7868] Use struct sctp_assoc_value instead [ 114.909418][ T7917] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.911977][ T7915] tipc: Enabling of bearer rejected, failed to enable media [ 114.974385][ T7918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.189892][ T7934] xt_hashlimit: size too large, truncated to 1048576 [ 115.284145][ T7943] x_tables: duplicate underflow at hook 3 [ 115.349133][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.421195][ T7953] netlink: 'syz.1.562': attribute type 4 has an invalid length. [ 115.430509][ T7953] netlink: 240 bytes leftover after parsing attributes in process `syz.1.562'. [ 115.465412][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 115.529916][ T7961] netlink: 'syz.1.562': attribute type 4 has an invalid length. [ 115.540219][ T7961] netlink: 240 bytes leftover after parsing attributes in process `syz.1.562'. [ 115.601137][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 115.612413][ T7965] netlink: 156 bytes leftover after parsing attributes in process `syz.4.564'. [ 115.613852][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.566'. [ 115.642785][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.566'. [ 115.682296][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.568'. [ 115.756924][ T7977] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 115.764341][ T7977] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 115.838479][ T7980] netlink: 'syz.0.571': attribute type 83 has an invalid length. [ 115.947367][ T7991] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 116.056189][ T7993] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 116.481785][ T8033] syzkaller0: entered promiscuous mode [ 116.497379][ T8033] syzkaller0: entered allmulticast mode [ 116.614306][ T8035] bridge_slave_0: left allmulticast mode [ 116.630890][ T8035] bridge_slave_0: left promiscuous mode [ 116.648576][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.659656][ T8035] bridge_slave_1: left allmulticast mode [ 116.668566][ T8035] bridge_slave_1: left promiscuous mode [ 116.687423][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.702525][ T8035] bond0: (slave bond_slave_0): Releasing backup interface [ 116.710906][ T8035] bond_slave_0: left allmulticast mode [ 116.728702][ T8051] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 116.739379][ T8035] bond0: (slave bond_slave_1): Releasing backup interface [ 116.752974][ T8035] bond_slave_1: left allmulticast mode [ 116.781354][ T8035] team0: Port device team_slave_0 removed [ 116.801166][ T8035] team0: Port device team_slave_1 removed [ 116.808224][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.835876][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.855456][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.882231][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.912695][ T8035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.041309][ T8068] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 117.061909][ T8072] netlink: 'syz.4.601': attribute type 4 has an invalid length. [ 117.074886][ T8069] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 117.090121][ T8072] trusted_key: syz.4.601 sent an empty control message without MSG_MORE. [ 117.225012][ T8070] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.249459][ T8070] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 117.270540][ T8070] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 117.355016][ T8095] tipc: Failed to obtain node identity [ 117.371224][ T8095] tipc: Enabling of bearer rejected, failed to enable media [ 117.499316][ T8105] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 117.575422][ T8108] hsr_slave_0: left promiscuous mode [ 117.584147][ T8108] hsr_slave_1: left promiscuous mode [ 117.798738][ T8136] syzkaller0: entered promiscuous mode [ 117.804274][ T8136] syzkaller0: entered allmulticast mode [ 118.435451][ T8136] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 118.449154][ T8144] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 119.168724][ T8166] __nla_validate_parse: 17 callbacks suppressed [ 119.168745][ T8166] netlink: 56 bytes leftover after parsing attributes in process `syz.4.626'. [ 119.461614][ T8166] bond4 (unregistering): Released all slaves [ 119.622145][ T8180] netlink: 'syz.2.630': attribute type 2 has an invalid length. [ 119.811248][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 120.441408][ T8228] tipc: Enabling of bearer rejected, failed to enable media [ 120.547641][ T8228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.645'. [ 120.632442][ T8243] netlink: 'syz.4.647': attribute type 11 has an invalid length. [ 120.802810][ T8229] syzkaller0: entered promiscuous mode [ 120.818282][ T8229] syzkaller0: entered allmulticast mode [ 122.226939][ T8250] tipc: Enabling of bearer rejected, media not registered [ 122.565900][ T8280] tipc: MTU too low for tipc bearer [ 122.921317][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 123.012156][ T8300] netlink: 'syz.4.663': attribute type 9 has an invalid length. [ 123.029079][ T8300] netlink: 'syz.4.663': attribute type 11 has an invalid length. [ 123.046179][ T8300] netlink: 'syz.4.663': attribute type 12 has an invalid length. [ 123.078365][ T8300] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.663'. [ 123.097248][ T8304] netlink: 'syz.3.667': attribute type 12 has an invalid length. [ 123.129080][ T8304] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.153135][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 123.289483][ T8311] Bluetooth: MGMT ver 1.23 [ 123.305436][ T8311] Bluetooth: hci1: too big key_count value 32778 [ 123.634837][ T8326] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 124.547302][ T8378] block nbd0: not configured, cannot reconfigure [ 124.722984][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 124.897740][ T8404] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 125.100830][ T8410] bond2: (slave bridge1): making interface the new active one [ 125.110459][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 125.131858][ T8410] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 125.234311][ T8412] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 125.455600][ T8424] xt_connbytes: Forcing CT accounting to be enabled [ 125.524506][ T8428] netlink: 'syz.2.693': attribute type 1 has an invalid length. [ 125.614869][ T8428] bond3: entered promiscuous mode [ 125.668986][ T8428] bond3: entered allmulticast mode [ 125.674595][ T8428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.701115][ T8438] netlink: 'syz.4.698': attribute type 53 has an invalid length. [ 125.709586][ T8439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.794324][ T8430] macvlan2: entered promiscuous mode [ 125.815770][ T8430] macvlan2: entered allmulticast mode [ 125.830923][ T8430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.217208][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.706'. [ 126.256627][ T8472] dvmrp0: entered allmulticast mode [ 126.292855][ T8478] xt_cgroup: xt_cgroup: no path or classid specified [ 126.452079][ T8489] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 126.514790][ T8494] netlink: 288 bytes leftover after parsing attributes in process `syz.3.714'. [ 126.714843][ T8505] bridge3: entered promiscuous mode [ 126.720379][ T8505] bridge3: entered allmulticast mode [ 126.803605][ T8513] netlink: 'syz.0.721': attribute type 2 has an invalid length. [ 126.931800][ T8521] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.725'. [ 127.014555][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 127.918313][ T8589] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 128.092987][ T8592] v: renamed from vlan0 (while UP) [ 128.106177][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 128.330434][ T8615] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.758'. [ 128.337288][ T8607] IPv6: sit1: Disabled Multicast RS [ 128.349546][ T8607] sit1: entered allmulticast mode [ 128.362808][ T8613] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.758'. [ 128.575872][ T8629] delete_channel: no stack [ 128.602859][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 128.604688][ T8632] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 128.651105][ T8632] team1: entered promiscuous mode [ 128.661425][ T8632] team1: entered allmulticast mode [ 128.919523][ T8660] C: entered allmulticast mode [ 129.286412][ T8684] syzkaller0: entered promiscuous mode [ 129.320848][ T8684] syzkaller0: entered allmulticast mode [ 129.759162][ T8718] bridge1: entered promiscuous mode [ 129.764536][ T8718] bridge1: entered allmulticast mode [ 129.794794][ T8720] __nla_validate_parse: 4 callbacks suppressed [ 129.794916][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 129.802293][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.782'. [ 129.823556][ T8722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.782'. [ 129.838829][ T8721] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.782'. [ 130.213235][ T8738] bond4: Removing last ns target with arp_interval on [ 130.290576][ T8746] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.457944][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 130.513391][ T8768] validate_nla: 2 callbacks suppressed [ 130.513408][ T8768] netlink: 'syz.2.795': attribute type 2 has an invalid length. [ 130.527917][ T8768] netlink: 80 bytes leftover after parsing attributes in process `syz.2.795'. [ 130.618654][ T8778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.652510][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 130.689001][ T8778] team1: entered promiscuous mode [ 130.711645][ T8778] team1: entered allmulticast mode [ 131.197563][ T8806] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 131.244771][ T8806] netlink: 232 bytes leftover after parsing attributes in process `syz.3.804'. [ 131.339159][ T8811] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 131.376054][ T8817] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 131.388610][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 131.463821][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 131.501219][ T8817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.584664][ T8837] netlink: 'syz.0.813': attribute type 3 has an invalid length. [ 131.594436][ T8835] tipc: Started in network mode [ 131.620447][ T8835] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 131.653079][ T8835] tipc: Enabled bearer , priority 10 [ 131.679323][ T8841] gtp0: entered promiscuous mode [ 131.684287][ T8841] gtp0: entered allmulticast mode [ 132.003857][ T8864] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:32789 [ 132.170695][ T8876] ip6_vti0 speed is unknown, defaulting to 1000 [ 132.207979][ T5912] IPVS: starting estimator thread 0... [ 132.305780][ T8884] IPVS: using max 32 ests per chain, 76800 per kthread [ 132.420477][ T8892] bond4: Unable to set down delay as MII monitoring is disabled [ 132.442091][ T8892] bond4 (unregistering): Released all slaves [ 132.526554][ T8902] bridge_slave_0: left allmulticast mode [ 132.532744][ T8902] bridge_slave_0: left promiscuous mode [ 132.539273][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.587523][ T8902] bridge_slave_1: left allmulticast mode [ 132.605312][ T8902] bridge_slave_1: left promiscuous mode [ 132.626678][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.638457][ T8902] bond0: (slave bond_slave_0): Releasing backup interface [ 132.652653][ T8902] bond0: (slave bond_slave_1): Releasing backup interface [ 132.672719][ T8902] team0: Port device team_slave_0 removed [ 132.698928][ T8902] team0: Port device team_slave_1 removed [ 132.712354][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.722301][ T8902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.731947][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.740440][ T8902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.795346][ T8903] team0: Mode changed to "loadbalance" [ 132.830582][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.846219][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.862130][ T5899] tipc: Node number set to 4269801492 [ 133.142222][ T8934] bridge0: entered allmulticast mode [ 133.155560][ T8932] syzkaller1: entered promiscuous mode [ 133.184829][ T8932] syzkaller1: entered allmulticast mode [ 133.405277][ T8944] bond2: Unable to set down delay as MII monitoring is disabled [ 133.478797][ T8944] bond2 (unregistering): Released all slaves [ 133.889001][ T8970] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 134.412425][ T8991] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 134.417379][ T9001] netlink: 'syz.2.858': attribute type 3 has an invalid length. [ 134.927290][ T9044] __nla_validate_parse: 5 callbacks suppressed [ 134.927307][ T9044] netlink: 204 bytes leftover after parsing attributes in process `syz.1.866'. [ 135.017939][ T9052] netlink: 68 bytes leftover after parsing attributes in process `syz.2.864'. [ 135.061613][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 135.231249][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 135.258137][ T9066] netlink: 'syz.0.873': attribute type 3 has an invalid length. [ 135.262788][ T9067] netlink: 56 bytes leftover after parsing attributes in process `syz.1.870'. [ 135.293347][ T9055] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.346945][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 135.369101][ T9055] bond4: (slave lo): Enslaving as a backup interface with an up link [ 135.406196][ T9055] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 135.813026][ T9115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.865112][ T9116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.945279][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 136.213363][ T9149] openvswitch: netlink: IPv6 tunnel dst address is zero [ 136.244101][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 136.254799][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 136.291825][ T9149] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.891'. [ 136.331578][ T9149] openvswitch: netlink: Missing key (keys=40, expected=100) [ 136.660299][ T9177] netlink: 'syz.2.896': attribute type 1 has an invalid length. [ 136.766919][ T9177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.857125][ T9182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.866617][ T9182] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 136.896895][ T9182] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 136.975493][ T9205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.012994][ T9177] gretap2: entered promiscuous mode [ 137.029052][ T9177] bond5: (slave gretap2): making interface the new active one [ 137.040238][ T9177] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 137.090045][ T9185] macvlan2: entered promiscuous mode [ 137.105878][ T9185] macvlan2: entered allmulticast mode [ 137.141591][ T9185] bond5: entered promiscuous mode [ 137.158058][ T9185] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.187733][ T9185] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 137.201039][ T9185] bond5: left promiscuous mode [ 137.274217][ T9217] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 137.468738][ T9229] C: renamed from team_slave_0 [ 137.496365][ T9229] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 137.514367][ T9229] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 137.543193][ T9236] netlink: 'syz.0.905': attribute type 4 has an invalid length. [ 137.553467][ T9233] netlink: 'syz.4.904': attribute type 1 has an invalid length. [ 137.631996][ T9233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.045922][ T9279] IPv6: Can't replace route, no match found [ 138.677857][ T9318] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 139.536605][ T9355] bond4: Removing last ns target with arp_interval on [ 139.610622][ T9355] bond5: Removing last ns target with arp_interval on [ 139.913469][ T9373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.932545][ T9373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.081227][ T9373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.106867][ T9373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.150223][ T9396] __nla_validate_parse: 12 callbacks suppressed [ 140.150240][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 140.182175][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 140.183769][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 140.202209][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 140.251772][ T9373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.262390][ T9373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.349369][ T7330] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.380095][ T7330] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.401185][ T7330] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.423451][ T7330] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.442939][ T9373] batman_adv: batadv0: Interface deactivated: [ 140.515966][ T9373] batman_adv: batadv0: Removing interface: [ 140.529272][ T9373] netdevsim netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.540287][ T9373] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.555467][ T9407] netlink: 666 bytes leftover after parsing attributes in process `syz.4.938'. [ 140.588390][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 140.695020][ T9426] netlink: 'syz.1.942': attribute type 21 has an invalid length. [ 140.738251][ T9426] netlink: 'syz.1.942': attribute type 6 has an invalid length. [ 140.747033][ T9426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.942'. [ 140.758124][ T7322] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.782069][ T7322] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.822473][ T9435] tipc: Can't bind to reserved service type 0 [ 140.838163][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.857116][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.880503][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.909827][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.952615][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.961275][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.963984][ T9441] netlink: 'syz.4.945': attribute type 83 has an invalid length. [ 140.972792][ T9436] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.052727][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 141.325540][ T9466] netlink: 'syz.3.954': attribute type 30 has an invalid length. [ 141.741211][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.959'. [ 141.762541][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 141.938363][ T9499] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 142.188204][ T9526] syzkaller0: entered promiscuous mode [ 142.193952][ T9526] syzkaller0: entered allmulticast mode [ 142.799598][ T9566] ip6_vti0 speed is unknown, defaulting to 1000 [ 142.803744][ T9574] syzkaller1: entered promiscuous mode [ 142.815776][ T9574] syzkaller1: entered allmulticast mode [ 142.852723][ T9576] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 143.370103][ T9588] bond0: (slave bond_slave_1): Releasing backup interface [ 143.670671][ T9607] syzkaller0: entered promiscuous mode [ 143.695975][ T9607] syzkaller0: entered allmulticast mode [ 143.873293][ T9619] pim6reg1: entered promiscuous mode [ 143.880754][ T9619] pim6reg1: entered allmulticast mode [ 144.690575][ T9669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.697879][ T9669] IPv6: NLM_F_CREATE should be set when creating new route [ 144.772308][ T9672] bridge0: entered allmulticast mode [ 144.859796][ T9681] Bluetooth: MGMT ver 1.23 [ 144.923318][ T9689] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 145.100408][ T9695] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 145.113019][ T9695] bridge_slave_1: left allmulticast mode [ 145.119096][ T9695] bridge_slave_1: left promiscuous mode [ 145.134432][ T9695] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.169342][ T9695] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 145.291996][ T9707] __nla_validate_parse: 7 callbacks suppressed [ 145.292014][ T9707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1020'. [ 145.325759][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 145.854103][ T9725] sctp: [Deprecated]: syz.3.1024 (pid 9725) Use of int in maxseg socket option. [ 145.854103][ T9725] Use struct sctp_assoc_value instead [ 145.966101][ T9735] netlink: 'syz.2.1027': attribute type 10 has an invalid length. [ 146.018753][ T9737] netlink: 'syz.2.1027': attribute type 10 has an invalid length. [ 146.038921][ T9735] team0: Port device dummy0 added [ 146.089606][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1030'. [ 146.139896][ T9737] team0: Port device dummy0 removed [ 146.157941][ T9737] dummy0: entered allmulticast mode [ 146.163700][ T9737] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.310562][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 146.320519][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 146.340416][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 146.353038][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 146.489704][ T9764] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1038'. [ 146.634432][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 146.728630][ T9772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1039'. [ 147.292640][ T9816] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 147.362633][ T9816] bond6: option xmit_hash_policy: invalid value (64) [ 147.391612][ T9816] bond6 (unregistering): Released all slaves [ 148.080130][ T9875] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 148.521827][ T9908] netlink: 'syz.2.1074': attribute type 10 has an invalid length. [ 148.572249][ T9908] team0: Port device geneve0 added [ 149.054404][ T9926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.816983][T10007] __nla_validate_parse: 10 callbacks suppressed [ 150.817002][T10007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1103'. [ 151.494439][T10059] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1121'. [ 151.536131][T10062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.642925][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 151.652357][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 151.902072][T10080] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1126'. [ 151.999580][T10089] netlink: 'syz.0.1129': attribute type 83 has an invalid length. [ 152.036915][T10087] netlink: 'syz.4.1128': attribute type 21 has an invalid length. [ 152.044805][T10087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1128'. [ 152.462084][T10127] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 152.540111][T10130] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.561559][T10130] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 152.582192][T10130] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 152.594437][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 152.668142][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 152.761045][T10145] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1146'. [ 152.902361][T10159] netlink: 'syz.4.1150': attribute type 2 has an invalid length. [ 153.153178][T10178] xt_hashlimit: size too large, truncated to 1048576 [ 153.195798][T10180] netlink: 'syz.1.1157': attribute type 3 has an invalid length. [ 153.218660][T10183] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1158'. [ 153.249432][T10186] netlink: 'syz.1.1157': attribute type 3 has an invalid length. [ 153.621686][T10211] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 153.661363][T10210] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 153.693559][T10210] bond6 (unregistering): Released all slaves [ 153.743890][T10208] netlink: 'syz.1.1164': attribute type 22 has an invalid length. [ 153.852891][T10208] netlink: 'syz.1.1164': attribute type 22 has an invalid length. [ 153.862026][ T7330] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.880984][ T7330] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.921569][ T7325] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.965858][ T7325] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.197861][T10248] openvswitch: netlink: Message has 8 unknown bytes. [ 154.205545][T10248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.054210][T10309] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 188.073344][T10309] __nla_validate_parse: 14 callbacks suppressed [ 188.073363][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 188.091716][T10307] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1196'. [ 188.114136][T10314] ipvlan2: entered promiscuous mode [ 188.134913][T10309] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .qMs%#\\cӡp[ [ 188.240324][T10327] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1200'. [ 188.294645][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 188.310039][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 188.464835][T10336] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1204'. [ 188.773958][T10362] netlink: 'syz.2.1214': attribute type 6 has an invalid length. [ 188.798208][T10355] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 188.809271][T10355] bond4: option packets_per_slave: allowed values 0 - 65535 [ 188.823632][T10355] bond4 (unregistering): Released all slaves [ 188.854507][T10365] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 188.866271][T10370] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 189.182041][T10400] veth3: entered promiscuous mode [ 189.216876][T10400] veth3: entered allmulticast mode [ 189.222837][T10401] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1221'. [ 189.233661][T10401] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1221'. [ 189.251869][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1221'. [ 189.318271][T10407] team0: Cannot enslave team device to itself [ 189.360141][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 189.372003][T10414] netlink: 'syz.4.1226': attribute type 3 has an invalid length. [ 189.390876][T10409] veth0_macvtap: left promiscuous mode [ 190.027998][T10436] syz.0.1233 uses old SIOCAX25GETINFO [ 190.130637][T10440] tipc: Enabling of bearer rejected, failed to enable media [ 190.158239][T10445] netlink: 'syz.3.1235': attribute type 12 has an invalid length. [ 190.166332][T10445] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 190.174296][T10445] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 190.192434][T10445] netlink: 'syz.3.1235': attribute type 2 has an invalid length. [ 190.440666][T10463] netlink: 'syz.3.1242': attribute type 10 has an invalid length. [ 190.459583][T10459] netlink: 'syz.4.1241': attribute type 1 has an invalid length. [ 190.839502][T10490] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 190.904618][T10495] veth0_to_bond: entered allmulticast mode [ 190.964049][T10496] xt_TCPMSS: Only works on TCP SYN packets [ 191.084869][T10500] veth0: entered promiscuous mode [ 191.226671][T10507] netlink: 'syz.3.1257': attribute type 1 has an invalid length. [ 191.290849][T10508] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.344080][T10507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.619320][T10540] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 191.636249][T10540] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 192.643037][T10624] : renamed from veth1_vlan (while UP) [ 192.765093][T10632] xt_time: unknown flags 0xf4 [ 192.970884][T10650] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 193.119817][T10663] x_tables: duplicate entry at hook 1 [ 193.214833][T10672] __nla_validate_parse: 75 callbacks suppressed [ 193.214853][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1301'. [ 193.427639][T10689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1306'. [ 193.626791][T10698] tipc: Enabling of bearer rejected, failed to enable media [ 193.652064][T10704] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 193.687393][T10705] validate_nla: 2 callbacks suppressed [ 193.687408][T10705] netlink: 'syz.4.1310': attribute type 10 has an invalid length. [ 193.717051][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1310'. [ 193.729407][T10705] team0: Device geneve0 is up. Set it down before adding it as a team port [ 193.761948][T10705] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 194.271961][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.280557][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.458071][T10751] : renamed from bridge_slave_0 [ 194.598336][T10772] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 194.782700][T10789] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 194.797205][T10791] openvswitch: netlink: Tunnel attr 288 out of range max 16 [ 194.818614][T10789] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 195.745404][T10852] sctp: [Deprecated]: syz.3.1341 (pid 10852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.745404][T10852] Use struct sctp_sack_info instead [ 195.959250][T10873] tipc: Enabling of bearer rejected, failed to enable media [ 196.302855][T10901] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 196.348794][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.348864][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 196.354950][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 196.368202][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.549712][T10912] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1354'. [ 196.621413][T10916] netlink: 'syz.1.1355': attribute type 21 has an invalid length. [ 196.640589][T10916] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1355'. [ 196.678267][T10916] netlink: 'syz.1.1355': attribute type 4 has an invalid length. [ 196.713044][T10916] netlink: 'syz.1.1355': attribute type 5 has an invalid length. [ 196.722200][T10916] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1355'. [ 197.210823][T10950] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 197.513974][T10968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1366'. [ 197.544112][T10969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1366'. [ 197.647064][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 197.745054][T10985] netlink: 'syz.1.1369': attribute type 8 has an invalid length. [ 197.788685][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 197.954716][T10997] openvswitch: netlink: Message has 6 unknown bytes. [ 198.233756][T11019] __nla_validate_parse: 3 callbacks suppressed [ 198.233775][T11019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1382'. [ 198.263932][T11019] xt_SECMARK: invalid mode: 9 [ 198.289398][T11025] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1385'. [ 198.305500][ T6386] nci: nci_ntf_packet: unknown ntf opcode 0x806 [ 198.538548][T11045] syzkaller0: entered promiscuous mode [ 198.544148][T11045] syzkaller0: entered allmulticast mode [ 199.129917][T11050] xfrm1: entered allmulticast mode [ 199.192645][T11059] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 199.203136][T11059] netlink: 'syz.4.1393': attribute type 39 has an invalid length. [ 199.260479][T11061] x_tables: duplicate underflow at hook 1 [ 199.732838][T11098] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 199.838617][T11106] syzkaller1: entered promiscuous mode [ 199.844212][T11106] syzkaller1: entered allmulticast mode [ 200.054662][T11118] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 200.071670][T11118] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 200.235025][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 200.245085][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1418'. [ 200.353579][T11140] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1422'. [ 200.423250][T11144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1424'. [ 200.521747][T11149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1426'. [ 200.792816][T11174] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1434'. [ 200.809544][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 200.878129][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1434'. [ 202.112766][T11217] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 202.130747][T11217] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 202.147182][T11217] gretap1: entered promiscuous mode [ 202.152646][T11217] gretap1: entered allmulticast mode [ 202.169275][T11217] veth0: entered promiscuous mode [ 202.190837][T11217] team0: Unable to change to the same mode the team is in [ 202.203827][T11216] veth0: left promiscuous mode [ 202.465531][T11244] netlink: 'syz.1.1457': attribute type 1 has an invalid length. [ 203.025409][T11283] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 203.050110][T11284] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 203.067445][T11284] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 203.076030][T11284] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 203.084140][T11284] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 203.093040][T11284] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 203.187745][T11290] xt_CT: No such helper "pptp" [ 203.262078][T11297] __nla_validate_parse: 9 callbacks suppressed [ 203.262090][T11297] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1475'. [ 203.333623][T11301] tipc: Enabled bearer , priority 0 [ 203.339441][T11302] sctp: [Deprecated]: syz.3.1477 (pid 11302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.339441][T11302] Use struct sctp_sack_info instead [ 203.365411][T11301] tipc: Resetting bearer [ 203.449364][T11304] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 203.469553][T11304] syzkaller0: entered promiscuous mode [ 203.475063][T11304] syzkaller0: entered allmulticast mode [ 203.496881][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 203.633368][T11312] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.812027][T11321] : entered promiscuous mode [ 203.819434][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1484'. [ 203.880958][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1484'. [ 204.177858][T11336] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1489'. [ 205.544667][T11350] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 205.664179][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 205.727111][T11366] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1498'. [ 205.940316][T11379] validate_nla: 61 callbacks suppressed [ 205.940333][T11379] netlink: 'syz.3.1503': attribute type 13 has an invalid length. [ 206.048775][T11379] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 206.071508][T11379] syzkaller0: entered promiscuous mode [ 206.095750][T11379] syzkaller0: entered allmulticast mode [ 206.154694][T11379] tipc: Started in network mode [ 206.178104][T11379] tipc: Node identity fa85da0971f, cluster identity 4711 [ 206.198174][T11379] tipc: Enabled bearer , priority 0 [ 206.208971][T11396] tipc: Enabling of bearer rejected, failed to enable media [ 206.220376][T11377] tipc: Resetting bearer [ 206.270711][T11377] tipc: Disabling bearer [ 206.518693][T11416] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 206.544122][T11419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1512'. [ 206.623668][T11423] bond4: (slave gretap2): making interface the new active one [ 206.639018][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 206.659143][T11423] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 206.670046][T11431] 1k: renamed from bond_slave_0 (while UP) [ 206.684686][T11416] bond4 (unregistering): (slave gretap2): Releasing active interface [ 206.702697][T11416] bond4 (unregistering): Released all slaves [ 206.745961][T11419] batadv1: entered allmulticast mode [ 206.863873][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd7 [ 207.067280][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 207.122644][T11455] hsr_slave_1 (unregistering): left promiscuous mode [ 207.398180][T11465] veth0: entered promiscuous mode [ 207.593887][T11480] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.839364][T11491] veth7: entered promiscuous mode [ 207.847635][T11491] veth7: entered allmulticast mode [ 207.885026][T11497] sctp: [Deprecated]: syz.0.1532 (pid 11497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.885026][T11497] Use struct sctp_sack_info instead [ 207.992728][T11501] nft_compat: unsupported protocol 0 [ 208.016001][T11503] openvswitch: netlink: IP tunnel dst address not specified [ 208.230035][T11464] veth0: left promiscuous mode [ 208.251655][T11521] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 208.277558][T11521] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.285417][T11521] gretap2: entered promiscuous mode [ 208.297648][T11521] gretap2: entered allmulticast mode [ 208.484622][T11546] __nla_validate_parse: 4 callbacks suppressed [ 208.484640][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 208.543901][T11546] vlan0: entered allmulticast mode [ 208.557027][T11546] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 208.896393][T11565] netlink: 'syz.3.1556': attribute type 13 has an invalid length. [ 208.904373][T11565] macvtap0: entered allmulticast mode [ 208.911405][T11565] macvtap0: refused to change device tx_queue_len [ 209.083696][T11571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1557'. [ 209.359450][T11583] veth1_to_bond: entered allmulticast mode [ 209.369027][T11582] veth1_to_bond: left allmulticast mode [ 209.690989][T11604] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1567'. [ 209.697846][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 209.707669][T11606] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 209.720980][T11598] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1569'. [ 209.741258][T11604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1567'. [ 209.798093][T11616] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.807124][T11616] bond6: (slave bond7): making interface the new active one [ 209.817589][T11616] bond6: (slave bond7): Enslaving as an active interface with an up link [ 209.828279][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 209.851490][T11606] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 209.861677][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1570'. [ 209.945430][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'. [ 209.960297][T11623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1575'. [ 210.027285][T11631] openvswitch: netlink: IP tunnel dst address not specified [ 210.048113][T11631] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 210.245120][T11652] lo: Caught tx_queue_len zero misconfig [ 210.353400][T11656] syz.1.1581 (11656) used greatest stack depth: 17656 bytes left [ 210.374509][T11663] vlan2: entered allmulticast mode [ 210.403080][T11663] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 210.462158][T11668] netlink: 'syz.4.1585': attribute type 13 has an invalid length. [ 210.482425][T11668] netlink: 'syz.4.1585': attribute type 17 has an invalid length. [ 210.514385][T11674] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 210.654547][T11668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.736337][T11682] veth1: entered promiscuous mode [ 210.909254][T11695] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 210.935298][T11699] ipt_REJECT: ECHOREPLY no longer supported. [ 210.973478][T11691] 8021q: VLANs not supported on ip6tnl0 [ 210.974109][T11699] openvswitch: netlink: Missing valid actions attribute. [ 210.988437][T11699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.422663][T11823] sit1: entered promiscuous mode [ 212.558225][T11834] netlink: 'syz.0.1636': attribute type 58 has an invalid length. [ 212.585092][T11836] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 212.672308][T11833] syzkaller0: entered promiscuous mode [ 212.679142][T11833] syzkaller0: entered allmulticast mode [ 212.688840][T11838] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.966911][T11864] tipc: Enabled bearer , priority 0 [ 214.144153][T11878] gretap1: left promiscuous mode [ 214.193495][T11878] block nbd0: Unsupported socket: should be TCP or UNIX. [ 214.260343][ T30] audit: type=1800 audit(1765373080.381:3): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1653" name="memory.events" dev="tmpfs" ino=1883 res=0 errno=0 [ 214.327891][ T30] audit: type=1804 audit(1765373080.431:4): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1653" name="/newroot/365/memory.events" dev="tmpfs" ino=1883 res=1 errno=0 [ 214.517764][T11898] veth0: entered promiscuous mode [ 214.524346][T11896] veth0: left promiscuous mode [ 214.539660][T11900] raw_sendmsg: syz.4.1659 forgot to set AF_INET. Fix it! [ 214.681248][T11911] __nla_validate_parse: 26 callbacks suppressed [ 214.681267][T11911] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1663'. [ 214.744398][T11914] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1664'. [ 214.845436][T11922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'. [ 214.855359][T11921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'. [ 214.868646][T11923] tipc: Enabling of bearer rejected, already enabled [ 215.177796][T11950] netlink: 'syz.4.1674': attribute type 1 has an invalid length. [ 215.211188][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 215.228908][T11950] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.243821][T11956] gtp0: entered promiscuous mode [ 215.275866][T11956] gtp0: entered allmulticast mode [ 215.335444][T11958] bond7: (slave veth1): Enslaving as an active interface with a down link [ 215.361713][T11950] veth0_to_bond: left allmulticast mode [ 215.371110][T11950] bond7: (slave veth0_to_bond): making interface the new active one [ 215.381066][T11950] veth0_to_bond: entered promiscuous mode [ 215.390416][T11950] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 215.412898][T11964] bond7: entered promiscuous mode [ 215.419553][T11964] bond7: entered allmulticast mode [ 215.435938][T11964] veth0_to_bond: entered allmulticast mode [ 215.551154][T11972] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1680'. [ 215.576922][T11972] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1680'. [ 215.594185][T11972] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1680'. [ 215.660405][T11972] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1680'. [ 215.674001][T11972] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1680'. [ 215.747825][T11989] netlink: 'syz.4.1684': attribute type 39 has an invalid length. [ 215.944776][T12001] openvswitch: netlink: Missing key (keys=40, expected=80) [ 215.944785][T11999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.915578][T12021] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 217.395810][T12021] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.433002][T12024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.571891][T12043] bond0: Caught tx_queue_len zero misconfig [ 217.657358][T12037] ip6tnl0: Caught tx_queue_len zero misconfig [ 217.990865][T12066] bridge3: entered promiscuous mode [ 217.996415][T12066] bridge3: entered allmulticast mode [ 218.005026][T12066] team0: Port device bridge3 added [ 218.026987][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 218.110448][T12072] netlink: 'syz.4.1708': attribute type 4 has an invalid length. [ 218.430241][T12097] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 218.442050][T12097] netlink: 'syz.2.1716': attribute type 4 has an invalid length. [ 218.454578][T12097] netlink: 'syz.2.1716': attribute type 5 has an invalid length. [ 218.903948][T12118] bond8: option miimon: invalid value (18446744073709551585) [ 218.912862][T12118] bond8: option miimon: allowed values 0 - 2147483647 [ 219.053352][T12118] bond8 (unregistering): Released all slaves [ 219.164151][T12128] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 219.182639][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.191389][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.202203][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 219.210696][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 220.105764][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 220.263135][T12154] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 220.315283][T12160] __nla_validate_parse: 12 callbacks suppressed [ 220.315300][T12160] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1735'. [ 220.331345][T12160] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 220.496242][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 220.554999][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 220.566162][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 220.577805][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 220.594300][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 220.949651][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 220.961084][T12195] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1742'. [ 221.159051][T12216] sctp: [Deprecated]: syz.2.1750 (pid 12216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.159051][T12216] Use struct sctp_sack_info instead [ 221.183403][T12216] sctp: [Deprecated]: syz.2.1750 (pid 12216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.183403][T12216] Use struct sctp_sack_info instead [ 221.210597][T12220] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1752'. [ 221.271414][T12223] netlink: 'syz.2.1753': attribute type 3 has an invalid length. [ 221.279547][T12223] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1753'. [ 221.420052][T12235] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 221.442957][T12235] netlink: 'syz.1.1755': attribute type 2 has an invalid length. [ 221.453484][T12235] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 221.467107][T12237] netlink: 'syz.2.1757': attribute type 13 has an invalid length. [ 221.892027][T12257] lo: Caught tx_queue_len zero misconfig [ 221.898115][T12257] netem: unknown loss type 0 [ 221.903304][T12257] netem: change failed [ 221.942705][T12261] Cannot find add_set index 1 as target [ 222.094191][T12270] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 222.544353][T12297] team0 (unregistering): Port device team_slave_0 removed [ 222.554410][T12297] team0 (unregistering): Port device team_slave_1 removed [ 222.841841][T12326] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 222.857180][T12326] tipc: Resetting bearer [ 222.871942][T12326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.420663][T12336] validate_nla: 2 callbacks suppressed [ 223.420679][T12336] netlink: 'syz.2.1785': attribute type 16 has an invalid length. [ 223.434596][T12347] netlink: 'syz.2.1785': attribute type 16 has an invalid length. [ 223.485815][T12336] netlink: 'syz.2.1785': attribute type 17 has an invalid length. [ 223.495981][T12347] netlink: 'syz.2.1785': attribute type 17 has an invalid length. [ 223.520320][T12358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.544183][T12347] bond0: left allmulticast mode [ 223.591822][T12347] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 223.599975][T12347] dummy0: left allmulticast mode [ 223.656370][T12347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.738655][T12336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.811927][T12377] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 223.820758][T12377] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 223.908144][T12381] vlan0: entered promiscuous mode [ 223.913226][T12381] bridge0: entered promiscuous mode [ 223.922690][T12384] gre0: entered promiscuous mode [ 223.928413][T12384] gre0: entered allmulticast mode [ 224.070645][T12394] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 224.079039][T12394] dummy0: entered promiscuous mode [ 224.090536][T12394] bond0: (slave dummy0): Releasing backup interface [ 224.110102][T12394] bridge0: port 1(dummy0) entered blocking state [ 224.116983][T12394] bridge0: port 1(dummy0) entered disabled state [ 224.124721][T12394] dummy0: entered allmulticast mode [ 224.324227][T12417] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 224.732877][T12448] ksmbd: Unknown IPC event: 3, ignore. [ 224.739772][T12449] openvswitch: netlink: Message has -2 unknown bytes. [ 224.897339][T12456] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 225.121579][T12462] nbd: device at index 2 is going down [ 225.236804][T12466] nbd: socks must be embedded in a SOCK_ITEM attr [ 225.442081][T12473] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.773577][T12486] xt_CT: No such helper "snmp_trap" [ 225.926737][T12504] __nla_validate_parse: 32 callbacks suppressed [ 225.926754][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 225.948928][T12504] tipc: Enabling of bearer rejected, failed to enable media [ 225.970575][T12509] openvswitch: netlink: Tunnel attr 75 out of range max 16 [ 226.260976][T12526] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001 [ 226.392440][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 226.539128][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1847'. [ 226.894545][T12561] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1854'. [ 226.911265][T12560] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1852'. [ 226.930129][T12561] syzkaller1: entered promiscuous mode [ 226.940128][T12561] syzkaller1: entered allmulticast mode [ 226.984563][T12560] vlan2: entered allmulticast mode [ 226.990486][T12560] gretap0: entered allmulticast mode [ 227.299008][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 227.315070][T12589] netlink: 'syz.4.1861': attribute type 30 has an invalid length. [ 227.324286][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1861'. [ 227.424965][T12595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.523266][T12595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.679736][T12595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.721622][T12609] bond0: (slave caif0): Error: Device type is different from other slaves [ 227.809308][T12595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.964316][ T3662] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.998239][ T3662] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.022610][T12633] netlink: 'syz.0.1873': attribute type 6 has an invalid length. [ 228.025128][ T3662] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.044418][T12633] netlink: 'syz.0.1873': attribute type 6 has an invalid length. [ 228.054937][ T3662] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.074059][T12635] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1872'. [ 228.323386][T12652] netlink: 'syz.2.1880': attribute type 5 has an invalid length. [ 228.427419][T12657] bridge0: port 1(veth0_to_bridge) entered blocking state [ 228.436370][T12657] bridge0: port 1(veth0_to_bridge) entered disabled state [ 228.445552][T12657] veth0_to_bridge: entered allmulticast mode [ 228.453342][T12657] veth0_to_bridge: entered promiscuous mode [ 228.521553][T12664] sctp: [Deprecated]: syz.2.1886 (pid 12664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.521553][T12664] Use struct sctp_sack_info instead [ 228.671685][T12674] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1890'. [ 228.712081][T12679] syzkaller0: entered promiscuous mode [ 228.727245][T12679] syzkaller0: entered allmulticast mode [ 228.747817][T12678] tipc: Enabled bearer , priority 0 [ 228.773612][T12683] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 228.804905][T12678] tipc: Resetting bearer [ 228.850058][T12678] tipc: Disabling bearer [ 229.055097][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 229.161449][T12716] nbd: must specify at least one socket [ 229.271446][T12724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.289683][T12726] netlink: 'syz.2.1907': attribute type 2 has an invalid length. [ 229.498595][T12735] nbd: must specify a size in bytes for the device [ 229.580596][T12744] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 229.604932][T12744] syzkaller1: entered promiscuous mode [ 229.610531][T12744] syzkaller1: entered allmulticast mode [ 229.647031][ T3662] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 230.531506][T12785] netlink: 'syz.0.1926': attribute type 22 has an invalid length. [ 230.618672][T12785] netlink: 'syz.0.1926': attribute type 22 has an invalid length. [ 231.617135][T12875] syzkaller0: entered promiscuous mode [ 231.637266][T12875] syzkaller0: entered allmulticast mode [ 231.758867][T12895] netlink: 'syz.4.1955': attribute type 11 has an invalid length. [ 231.767352][T12895] netlink: 'syz.4.1955': attribute type 11 has an invalid length. [ 231.789860][T12895] __nla_validate_parse: 8 callbacks suppressed [ 231.789878][T12895] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1955'. [ 231.955235][T12908] netlink: 'syz.3.1960': attribute type 13 has an invalid length. [ 231.992861][T12908] macvtap0: refused to change device tx_queue_len [ 232.021145][T12913] xt_limit: Overflow, try lower: 604147548/4200216962 [ 232.083012][T12917] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 232.393619][ T30] audit: type=1107 audit(1765373098.521:5): pid=12943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';oEY]3J`*-h^7ZwٱS7 _uI ōh>#ZB'iNw"WuEk:MRG\C' [ 232.400330][T12937] can: request_module (can-proto-0) failed. [ 232.859184][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1979'. [ 232.873633][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 232.947686][T12980] netlink: 'syz.2.1982': attribute type 4 has an invalid length. [ 232.966338][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 232.986785][T12983] syzkaller1: entered promiscuous mode [ 232.992310][T12983] syzkaller1: entered allmulticast mode [ 233.054272][T12991] ip6t_srh: unknown srh invflags 4000 [ 233.129466][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 233.294595][T13000] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1987'. [ 233.414001][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 233.454095][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 233.474971][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 233.536934][T13021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.706880][T13030] netlink: 'syz.2.1999': attribute type 11 has an invalid length. [ 233.729704][T13030] xt_bpf: check failed: parse error [ 233.776058][T13036] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2002'. [ 233.789306][T13032] bond8: entered allmulticast mode [ 233.794949][T13032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.942813][T13045] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 234.273129][T13066] Unsupported ieee802154 address type: 0 [ 234.724481][T13096] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 234.751357][T13096] bond9 (unregistering): Released all slaves [ 234.964421][T13114] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 235.068823][T13124] SET target dimension over the limit! [ 235.256145][T13089] gre0: left promiscuous mode [ 235.261432][T13089] gre0: left allmulticast mode [ 235.428248][T13150] SET target dimension over the limit! [ 235.585382][T13155] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 235.824603][T13167] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 235.910922][T13167] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.931505][T13181] netlink: 'syz.4.2043': attribute type 39 has an invalid length. [ 236.043410][T13179] tipc: Started in network mode [ 236.048601][T13179] tipc: Node identity 8ec09d5a1054, cluster identity 4711 [ 236.069006][T13179] tipc: Enabled bearer , priority 0 [ 236.085416][T13179] syzkaller0: entered promiscuous mode [ 236.096389][T13179] syzkaller0: entered allmulticast mode [ 236.143475][T13179] tipc: Resetting bearer [ 236.185146][T13175] tipc: Resetting bearer [ 236.220004][T13175] tipc: Disabling bearer [ 236.257084][T13202] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 236.265540][T13205] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 236.277892][T13202] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 236.288998][T13202] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 236.298194][T13202] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 236.313273][T13202] netlink: 'syz.2.2046': attribute type 29 has an invalid length. [ 236.693092][T13232] IPv6: sit2: Disabled Multicast RS [ 236.703573][T13232] sit2: entered allmulticast mode [ 236.815456][T13240] __nla_validate_parse: 17 callbacks suppressed [ 236.815555][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 236.863133][T13240] bond9 (unregistering): Released all slaves [ 236.905409][T13245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.916479][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 236.926178][T13245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2059'. [ 236.954457][T13242] 8021q: adding VLAN 0 to HW filter on device bond10 [ 236.981077][T13243] 8021q: adding VLAN 0 to HW filter on device bond11 [ 237.126634][T13265] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2063'. [ 237.364280][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2069'. [ 237.395298][T13288] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2070'. [ 237.658249][T13297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2072'. [ 237.667612][T13297] ip6tnl0: Caught tx_queue_len zero misconfig [ 237.751214][ T282] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 237.766708][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2072'. [ 238.850625][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'. [ 238.873386][T13376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.227959][T13397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2103'. [ 239.317479][T13402] dvmrp0: entered allmulticast mode [ 240.001385][T13452] validate_nla: 2 callbacks suppressed [ 240.001401][T13452] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 240.055378][T13452] 8021q: adding VLAN 0 to HW filter on device bond12 [ 240.079458][T13453] bond12: (slave geneve3): making interface the new active one [ 240.089443][T13453] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 240.451706][T13470] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002 [ 240.847582][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803149e000: rx timeout, send abort [ 241.357105][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803149e000: abort rx timeout. Force session deactivation [ 241.416373][T13543] veth1_macvtap: left promiscuous mode [ 241.523906][T13547] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003 [ 241.946996][T13563] netlink: 'syz.1.2154': attribute type 11 has an invalid length. [ 241.968797][T13563] __nla_validate_parse: 5 callbacks suppressed [ 241.968815][T13563] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2154'. [ 242.182792][T13575] openvswitch: netlink: IP tunnel dst address not specified [ 242.499015][T13597] syzkaller0: entered promiscuous mode [ 242.504645][T13597] syzkaller0: entered allmulticast mode [ 242.542238][T13599] lo speed is unknown, defaulting to 1000 [ 242.548894][T13599] lo speed is unknown, defaulting to 1000 [ 242.555304][T13599] lo speed is unknown, defaulting to 1000 [ 242.787634][T13610] netlink: 'syz.4.2171': attribute type 1 has an invalid length. [ 242.821003][T13599] infiniband sz1: set down [ 242.832836][T13599] infiniband sz1: added lo [ 242.847428][T13599] sz1: rxe_create_cq: returned err = -12 [ 242.855844][T13599] infiniband sz1: Couldn't create ib_mad CQ [ 242.869152][ T5936] lo speed is unknown, defaulting to 1000 [ 242.872630][T13599] infiniband sz1: Couldn't open port 1 [ 242.887607][T13609] macvlan2: entered promiscuous mode [ 242.894487][T13609] macvlan2: entered allmulticast mode [ 242.924006][T13609] bond9: entered promiscuous mode [ 242.939680][T13599] RDS/IB: sz1: added [ 242.947497][T13609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.956164][T13599] smc: adding ib device sz1 with port count 1 [ 242.972978][T13599] smc: ib device sz1 port 1 has no pnetid [ 242.984815][T13609] bond9: left promiscuous mode [ 243.022368][ T5936] lo speed is unknown, defaulting to 1000 [ 243.031123][T13599] lo speed is unknown, defaulting to 1000 [ 243.283455][T13636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2178'. [ 243.432010][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2180'. [ 243.443792][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2178'. [ 243.463025][T13599] lo speed is unknown, defaulting to 1000 [ 243.470151][T13636] Unsupported ieee802154 address type: 0 [ 243.499430][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2181'. [ 243.535505][T13646] bridge0: port 3(batadv1) entered blocking state [ 243.543863][T13646] bridge0: port 3(batadv1) entered disabled state [ 243.561823][T13646] batadv1: entered allmulticast mode [ 243.581917][T13646] batadv1: entered promiscuous mode [ 243.873550][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2183'. [ 243.916277][T13658] nbd0: detected capacity change from 0 to 127 [ 243.937403][T13599] lo speed is unknown, defaulting to 1000 [ 244.027861][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 244.037919][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 244.234807][T13683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'. [ 244.367165][T13599] lo speed is unknown, defaulting to 1000 [ 244.390255][T13689] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 244.410876][T13691] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2194'. [ 244.445769][T13691] openvswitch: netlink: Missing key (keys=40, expected=100) [ 244.536911][ T5845] block nbd0: Receive control failed (result -32) [ 244.651392][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'. [ 244.763763][T13599] lo speed is unknown, defaulting to 1000 [ 244.942411][T13720] netlink: 'syz.4.2202': attribute type 29 has an invalid length. [ 244.975470][T13720] netlink: 'syz.4.2202': attribute type 29 has an invalid length. [ 245.316445][T13738] bond8: option resend_igmp: invalid value (256) [ 245.322817][T13738] bond8: option resend_igmp: allowed values 0 - 255 [ 245.331190][T13738] bond8 (unregistering): Released all slaves [ 245.438840][T13742] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.661908][T13742] lo speed is unknown, defaulting to 1000 [ 245.716296][T13755] delete_channel: no stack [ 245.787921][T13759] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2214'. [ 245.988161][T13768] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 246.439163][T13796] netlink: 'syz.4.2226': attribute type 1 has an invalid length. [ 246.580104][T13796] bond10: entered promiscuous mode [ 246.598733][T13796] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.692478][T13808] ip6gre1: entered allmulticast mode [ 246.826184][T13820] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.858487][T13820] bond13: (slave lo): Enslaving as a backup interface with an up link [ 246.869095][T13820] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 246.906276][T13815] SET target dimension over the limit! [ 247.254850][T13851] __nla_validate_parse: 5 callbacks suppressed [ 247.254870][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2241'. [ 247.354426][T13856] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 247.380730][T13856] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 247.406300][T13856] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 247.414069][T13856] netlink: 'syz.1.2242': attribute type 2 has an invalid length. [ 247.476934][T13856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2242'. [ 247.492667][T13872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2247'. [ 247.561040][T13863] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 247.569995][T13863] netlink: 'syz.1.2242': attribute type 2 has an invalid length. [ 247.602240][T13879] x_tables: duplicate underflow at hook 1 [ 247.964176][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2254'. [ 247.988322][T13910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2257'. [ 248.202132][T13927] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2261'. [ 248.250949][T13930] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 248.384477][T13938] bond8: (slave xfrm2): The slave device specified does not support setting the MAC address [ 248.394843][T13938] bond8: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 248.408451][T13938] bond8: (slave xfrm2): making interface the new active one [ 248.417217][T13938] bond8: (slave xfrm2): Enslaving as an active interface with an up link [ 248.441813][T13946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.469524][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 248.524178][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 248.545458][T13930] bond8 (unregistering): (slave xfrm2): Releasing backup interface [ 248.573295][T13930] bond8 (unregistering): Released all slaves [ 248.643197][T13961] netlink: 'syz.0.2268': attribute type 10 has an invalid length. [ 248.687392][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 248.714066][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 248.889676][T13964] hsr_slave_0 (unregistering): left promiscuous mode [ 249.018432][T13978] team0: Port device geneve0 added [ 249.342358][T13998] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.538402][T14014] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 249.849843][T14040] openvswitch: netlink: Message has 8 unknown bytes. [ 249.891373][T14040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.147331][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.167352][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.175569][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.200262][T14068] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 250.336969][T14068] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 250.422923][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.457139][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.487693][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.495551][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.533491][T14068] wlan0 speed is unknown, defaulting to 1000 [ 250.860639][T14109] x_tables: duplicate underflow at hook 1 [ 251.227169][ T3662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.446938][T14123] tipc: Enabling of bearer rejected, already enabled [ 251.707877][T14144] validate_nla: 3 callbacks suppressed [ 251.707894][T14144] netlink: 'syz.4.2326': attribute type 8 has an invalid length. [ 251.867181][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.891428][T14165] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 251.959039][T14170] !: renamed from dummy0 (while UP) [ 252.192374][T14188] bridge0: port 2(vlan3) entered blocking state [ 252.216755][T14188] bridge0: port 2(vlan3) entered disabled state [ 252.228010][T14188] vlan3: entered allmulticast mode [ 252.238014][T14188] vlan3: left allmulticast mode [ 252.256161][T14193] netlink: 'syz.1.2341': attribute type 12 has an invalid length. [ 252.256874][T14198] __nla_validate_parse: 34 callbacks suppressed [ 252.256889][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2344'. [ 252.324022][T14193] bond6: option primary_reselect: invalid value (255) [ 252.344288][T14193] bond6 (unregistering): Released all slaves [ 252.357340][T14207] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2342'. [ 252.376898][T14192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2342'. [ 252.501103][T14212] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2346'. [ 252.515547][T14212] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 252.535849][T14215] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2348'. [ 252.551666][T14213] netlink: 'syz.0.2347': attribute type 1 has an invalid length. [ 252.607855][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2347'. [ 252.624293][T14213] bond14: entered promiscuous mode [ 252.632535][T14224] SET target dimension over the limit! [ 252.632760][T14213] 8021q: adding VLAN 0 to HW filter on device bond14 [ 252.656334][T14228] netlink: 'syz.2.2350': attribute type 64 has an invalid length. [ 252.664189][T14228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2350'. [ 252.664333][T14222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2349'. [ 252.698176][T14217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2349'. [ 253.072454][T14263] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2361'. [ 253.333135][T14277] nbd: device at index 64 is going down [ 253.698848][T14302] bridge0: Caught tx_queue_len zero misconfig [ 253.809208][T14311] sit0: entered promiscuous mode [ 253.814505][T14311] netlink: 'syz.2.2377': attribute type 1 has an invalid length. [ 253.961164][T14323] netlink: 'syz.4.2380': attribute type 8 has an invalid length. [ 254.318820][T14351] netlink: 'syz.2.2388': attribute type 4 has an invalid length. [ 254.363763][T14351] netlink: 'syz.2.2388': attribute type 4 has an invalid length. [ 254.405121][T14351] netlink: 'syz.2.2388': attribute type 4 has an invalid length. [ 255.114120][T14407] erspan0: entered allmulticast mode [ 255.530355][T14445] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 255.712052][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719351][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.850256][T14467] tipc: Cannot configure node identity twice [ 255.975207][T14472] veth0: Caught tx_queue_len zero misconfig [ 256.232315][T14495] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 256.348112][T14503] SET target dimension over the limit! [ 256.360015][ T7324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.548771][T14521] bond0: entered promiscuous mode [ 256.553857][T14521] bond_slave_0: entered promiscuous mode [ 256.565800][T14521] bond_slave_1: entered promiscuous mode [ 256.571755][T14521] bridge_slave_1: entered promiscuous mode [ 257.103805][T14561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.114952][T14560] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.254434][T14573] tipc: Enabling of bearer rejected, already enabled [ 257.546167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.639268][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.722437][T14605] __nla_validate_parse: 33 callbacks suppressed [ 257.722454][T14605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2460'. [ 257.739677][T14605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.916657][T14621] nbd: must specify at least one socket [ 257.925910][T14626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.088586][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 258.275836][T14654] validate_nla: 5 callbacks suppressed [ 258.275853][T14654] netlink: 'syz.1.2472': attribute type 3 has an invalid length. [ 258.417428][T14663] bridge0: left allmulticast mode [ 258.424191][T14663] bond0: left promiscuous mode [ 258.432325][T14663] bond_slave_0: left promiscuous mode [ 258.481857][T14663] bond_slave_1: left promiscuous mode [ 258.494993][T14663] bridge_slave_1: left promiscuous mode [ 258.534480][T14663] macvtap0: left allmulticast mode [ 258.563233][T14663] xfrm1: left promiscuous mode [ 258.579017][T14663] xfrm1: left allmulticast mode [ 258.594047][T14663] bridge3: left promiscuous mode [ 258.616323][T14663] bridge3: left allmulticast mode [ 258.670658][T14663] veth3: left promiscuous mode [ 258.676591][T14663] veth3: left allmulticast mode [ 258.693774][T14663] sit1: left promiscuous mode [ 258.723029][ T7319] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.740311][ T7319] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.749234][ T7319] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.797420][ T7319] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.832715][T14685] syzkaller1: entered promiscuous mode [ 258.845727][T14685] syzkaller1: entered allmulticast mode [ 259.143393][T14698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2488'. [ 259.170756][T14703] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2489'. [ 259.196190][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2488'. [ 259.327043][T14711] sctp: [Deprecated]: syz.4.2493 (pid 14711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.327043][T14711] Use struct sctp_sack_info instead [ 259.500491][T14732] netlink: 'syz.1.2498': attribute type 4 has an invalid length. [ 262.106595][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.746749][ T3662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.866462][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.507170][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.626383][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.276397][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.747058][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.026460][ T7322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.866201][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.146328][ T7319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.987522][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.188399][T14751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2505'. [ 289.356341][T14766] netlink: 'syz.3.2507': attribute type 1 has an invalid length. [ 289.391207][T14766] netlink: 'syz.3.2507': attribute type 4 has an invalid length. [ 289.414212][T14766] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2507'. [ 289.820938][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2515'. [ 289.833053][T14800] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2514'. [ 289.971992][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 290.173041][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 290.265180][T14838] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2525'. [ 290.546895][T14859] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2533'. [ 290.591621][T14857] openvswitch: netlink: Duplicate or invalid key (type 0). [ 290.605958][T14857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.629777][T14865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'. [ 290.765191][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 290.824476][T14886] batadv3: entered allmulticast mode [ 290.906670][ T7322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.991968][T14897] tipc: Enabled bearer , priority 0 [ 291.103084][T14896] tipc: Disabling bearer [ 291.449437][T14932] netlink: 'syz.1.2555': attribute type 1 has an invalid length. [ 291.562246][T14940] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 291.704089][T14948] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 291.764143][T14948] team0: Port device geneve0 added [ 291.796059][T14958] netlink: 'syz.0.2561': attribute type 16 has an invalid length. [ 291.812911][T14958] netlink: 'syz.0.2561': attribute type 17 has an invalid length. [ 291.874378][T14950] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 291.902334][T14958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.069495][T14979] sctp: [Deprecated]: syz.0.2566 (pid 14979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.069495][T14979] Use struct sctp_sack_info instead [ 292.184126][T14986] netlink: 'syz.2.2571': attribute type 83 has an invalid length. [ 292.197742][T14986] netlink: 'syz.2.2571': attribute type 83 has an invalid length. [ 292.232115][T14987] netem: change failed [ 292.431675][T15002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.968579][T14995] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 293.016809][T14999] veth0_vlan: left promiscuous mode [ 293.036198][T14999] vlan0: entered promiscuous mode [ 293.042892][T14999] veth0_vlan: entered promiscuous mode [ 293.050379][T14999] vlan0: entered allmulticast mode [ 293.057046][T14999] veth0_vlan: entered allmulticast mode [ 293.083799][T15010] veth0_vlan: left promiscuous mode [ 293.244025][T15023] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 293.257459][T15018] tipc: Started in network mode [ 293.262354][T15018] tipc: Node identity 2e8da4057b8d, cluster identity 4711 [ 293.276033][T15018] tipc: Enabled bearer , priority 0 [ 293.389394][T15019] tipc: Disabling bearer [ 293.857914][T15070] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.027284][ T2141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.115179][T15070] lo speed is unknown, defaulting to 1000 [ 294.309732][T15070] wlan0 speed is unknown, defaulting to 1000 [ 295.176900][T15144] __nla_validate_parse: 17 callbacks suppressed [ 295.176918][T15144] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2617'. [ 295.228919][T15144] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 295.306075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.314482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.322854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.331252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.344805][T15146] policy can only be matched on NF_INET_PRE_ROUTING [ 295.344827][T15146] unable to load match [ 295.449218][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 295.478759][T15156] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2623'. [ 295.617145][T15165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2626'. [ 295.627144][T15167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2627'. [ 295.636605][T15165] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2626'. [ 295.714354][T15173] xt_cgroup: invalid path, errno=-2 [ 295.786051][T15183] ieee802154 phy0 wpan0: encryption failed: -90 [ 295.806757][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2630'. [ 295.860340][T15189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2633'. [ 295.971843][T15193] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2635'. [ 296.012685][T15193] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2635'. [ 296.259659][T15216] ip6t_srh: unknown srh invflags 4000 [ 296.391198][T15226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.513079][T15233] vlan3: entered promiscuous mode [ 296.519630][T15233] bridge0: entered promiscuous mode [ 296.546265][T15236] openvswitch: netlink: IP tunnel dst address not specified [ 296.553842][T15237] openvswitch: netlink: IP tunnel dst address not specified [ 296.665246][T15244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.271138][T15265] validate_nla: 2 callbacks suppressed [ 297.271156][T15265] netlink: 'syz.1.2660': attribute type 1 has an invalid length. [ 297.701412][T15284] sctp: [Deprecated]: syz.1.2666 (pid 15284) Use of int in max_burst socket option. [ 297.701412][T15284] Use struct sctp_assoc_value instead [ 297.702789][T15288] gtp1: entered promiscuous mode [ 298.046158][T15302] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 298.068650][T15302] dummy0: entered promiscuous mode [ 298.084692][T15302] bridge0: port 1(dummy0) entered blocking state [ 298.104155][T15302] bridge0: port 1(dummy0) entered disabled state [ 298.121050][T15302] dummy0: entered allmulticast mode [ 298.141130][T15302] bridge0: port 1(dummy0) entered blocking state [ 298.147674][T15302] bridge0: port 1(dummy0) entered forwarding state [ 298.375192][T15316] dvmrp6: entered allmulticast mode [ 298.858622][ T10] IPVS: starting estimator thread 0... [ 298.957811][T15347] IPVS: using max 35 ests per chain, 84000 per kthread [ 298.997991][T15356] syzkaller0: entered promiscuous mode [ 299.019337][T15356] syzkaller0: entered allmulticast mode [ 299.226778][ T7322] net_ratelimit: 10 callbacks suppressed [ 299.226806][ T7322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.309599][T15367] veth13: entered allmulticast mode [ 299.319302][T15369] netlink: 'syz.0.2691': attribute type 1 has an invalid length. [ 299.327331][T15369] netlink: 'syz.0.2691': attribute type 4 has an invalid length. [ 299.546023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.719678][T15388] netlink: 'syz.1.2697': attribute type 1 has an invalid length. [ 299.791060][T15388] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.003713][T15417] xt_ecn: cannot match TCP bits for non-tcp packets [ 300.212710][T15430] __nla_validate_parse: 23 callbacks suppressed [ 300.212730][T15430] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2706'. [ 300.554295][T15438] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2710'. [ 300.678495][T15449] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 300.686494][T15449] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 300.885900][T15466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2717'. [ 301.132843][T15483] syz.3.2723 (15483) used obsolete PPPIOCDETACH ioctl [ 301.327859][T15504] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2727'. [ 301.450228][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 301.460535][T15512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'. [ 301.519273][T15514] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 301.625800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.658907][T15527] erspan0: left allmulticast mode [ 301.674911][T15527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.792822][T15534] : entered promiscuous mode [ 302.242096][T15563] syzkaller0: entered promiscuous mode [ 302.255783][T15563] syzkaller0: entered allmulticast mode [ 302.345895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.354311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.362588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.370940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.379437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.427512][ T7324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.486931][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 302.511671][T15580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2757'. [ 302.541095][T15582] smc: net device gre0 applied user defined pnetid SYZ1 [ 302.553656][T15582] smc: net device gre0 erased user defined pnetid SYZ1 [ 302.671629][T15593] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 302.712829][T15593] syzkaller1: entered promiscuous mode [ 302.728683][T15593] syzkaller1: entered allmulticast mode [ 302.968801][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 303.001022][T15611] netlink: 'syz.4.2766': attribute type 15 has an invalid length. [ 303.018381][T15617] bond7: option min_links: invalid value (18446744073709551614) [ 303.042582][T15620] xt_socket: unknown flags 0xe4 [ 303.046908][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'. [ 303.076908][T15617] bond7: option min_links: allowed values 0 - 2147483647 [ 303.103906][T15617] bond7 (unregistering): Released all slaves [ 303.138293][ T7324] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 303.150116][ T7324] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 303.183205][ T7324] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 303.193236][ T7324] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 303.352164][T15633] netlink: 'syz.4.2771': attribute type 1 has an invalid length. [ 303.361979][T15633] siw: device registration error -23 [ 303.464365][T15641] netlink: 'syz.0.2773': attribute type 12 has an invalid length. [ 303.559358][T15645] netlink: 'syz.4.2775': attribute type 1 has an invalid length. [ 303.652046][T15645] bond11: entered promiscuous mode [ 303.666876][T15645] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.219110][ T5884] IPVS: starting estimator thread 0... [ 304.263221][T15687] net_ratelimit: 2 callbacks suppressed [ 304.263237][T15687] IPVS: sh: FWM 3 0x00000003 - no destination available [ 304.280024][T15687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.335721][T15693] IPVS: using max 35 ests per chain, 84000 per kthread [ 304.386136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.545439][T15714] netlink: 'syz.1.2794': attribute type 30 has an invalid length. [ 304.649529][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.675927][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.688885][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.703262][T15729] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 304.709507][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.711402][T15729] netlink: 'syz.2.2798': attribute type 2 has an invalid length. [ 304.730365][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.735987][T15729] dummy0: Caught tx_queue_len zero misconfig [ 304.741394][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.753064][T15721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.289355][T15742] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 305.364793][T15742] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.372238][T15767] __nla_validate_parse: 15 callbacks suppressed [ 305.372255][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2811'. [ 305.448915][T15762] bond8: (slave veth5): Enslaving as an active interface with a down link [ 305.510971][T15742] bond8: entered promiscuous mode [ 305.525021][T15742] bond8: entered allmulticast mode [ 305.578067][T15783] netlink: 'syz.0.2815': attribute type 13 has an invalid length. [ 305.712351][T15789] x_tables: duplicate underflow at hook 4 [ 305.722647][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'. [ 305.743362][T15791] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2820'. [ 305.762880][T15789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2818'. [ 305.852398][T15791] netlink: 'syz.2.2820': attribute type 11 has an invalid length. [ 305.884095][T15801] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2823'. [ 305.993626][T15805] tipc: Enabled bearer , priority 0 [ 306.026719][T15807] tipc: Resetting bearer [ 306.037442][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2828'. [ 306.061431][T15804] tipc: Disabling bearer [ 306.107164][T15817] x_tables: duplicate underflow at hook 3 [ 306.411768][T15843] geneve4: entered promiscuous mode [ 306.467403][T15846] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2838'. [ 306.515206][T15854] bond9: option all_slaves_active: invalid value (222) [ 306.534103][T15854] bond9 (unregistering): Released all slaves [ 306.613127][T15860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2843'. [ 306.667384][T15860] bond0: entered allmulticast mode [ 306.676013][T15860] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 306.981051][T15888] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2852'. [ 306.991067][T15888] ksmbd: Unknown IPC event: 3, ignore. [ 307.014207][T15888] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2852'. [ 307.025540][T15893] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 307.056254][T15893] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 307.063087][T15893] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 308.543838][T15999] netlink: 'syz.1.2885': attribute type 11 has an invalid length. [ 308.563331][T15999] netlink: 'syz.1.2885': attribute type 11 has an invalid length. [ 308.588149][T16006] bond13: option mode: unable to set because the bond device has slaves [ 308.624089][T15999] validate_nla: 2 callbacks suppressed [ 308.624116][T15999] netlink: 'syz.1.2885': attribute type 9 has an invalid length. [ 308.656410][T15999] netlink: 'syz.1.2885': attribute type 11 has an invalid length. [ 308.664268][T15999] netlink: 'syz.1.2885': attribute type 12 has an invalid length. [ 309.076235][ T30] audit: type=1800 audit(1765373175.211:6): pid=16027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2896" name="memory.events" dev="tmpfs" ino=2892 res=0 errno=0 [ 309.148197][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.168601][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.177192][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.193594][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.205040][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.307034][T16029] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.387380][T16040] netem: change failed [ 309.773543][T16064] v: renamed from veth0_vlan [ 309.835474][T16029] lo speed is unknown, defaulting to 1000 [ 309.859924][T16063] tipc: Enabling of bearer rejected, failed to enable media [ 310.155022][T16089] syz_tun: left allmulticast mode [ 310.209664][T16029] wlan0 speed is unknown, defaulting to 1000 [ 310.624054][T16029] chnl_net:caif_netlink_parms(): no params data found [ 310.709401][T16118] __nla_validate_parse: 24 callbacks suppressed [ 310.709413][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 310.806333][T16124] netlink: 'syz.2.2923': attribute type 1 has an invalid length. [ 310.939786][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.948147][T16029] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.966225][T16029] bridge_slave_0: entered allmulticast mode [ 310.975523][T16029] bridge_slave_0: entered promiscuous mode [ 310.990294][T16029] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.004973][T16029] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.012740][T16029] bridge_slave_1: entered allmulticast mode [ 311.024184][T16029] bridge_slave_1: entered promiscuous mode [ 311.033919][T16132] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001 [ 311.048543][T16141] netlink: 'syz.3.2927': attribute type 1 has an invalid length. [ 311.076610][T16141] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.2927'. [ 311.098261][T16029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.113533][T16029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.179365][T16029] team0: Port device team_slave_0 added [ 311.190659][T16029] team0: Port device team_slave_1 added [ 311.197166][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 311.276268][T16029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.283500][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.284521][T16155] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 311.310228][ T5845] Bluetooth: hci4: command tx timeout [ 311.311183][T16029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.336670][T16157] team0: Caught tx_queue_len zero misconfig [ 311.363898][T16029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.371276][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.397852][T16029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.470142][T16029] hsr_slave_0: entered promiscuous mode [ 311.478669][T16029] hsr_slave_1: entered promiscuous mode [ 311.485563][T16029] debugfs: 'hsr0' already exists in 'hsr' [ 311.491479][T16029] Cannot create hsr debugfs directory [ 311.713792][T16029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 311.725408][T16029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.749914][T16175] syzkaller0: entered promiscuous mode [ 311.755497][T16175] syzkaller0: entered allmulticast mode [ 311.772807][T16175] netlink: 'syz.1.2937': attribute type 21 has an invalid length. [ 311.787930][T16175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2937'. [ 311.817964][T16029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 311.828522][T16029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.939024][T16029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 311.952475][T16029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.962033][T16180] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2939'. [ 311.998255][T16177] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 312.005405][T16177] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 312.157224][T16029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 312.174107][T16029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.369751][T16198] net_ratelimit: 268 callbacks suppressed [ 312.369769][T16198] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 312.403171][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 312.432891][T16204] openvswitch: netlink: Flow actions attr not present in new flow. [ 312.532319][T16029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.551847][T16029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.576167][T16029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.639410][T16029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.676700][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 312.777252][T16231] bond0: entered allmulticast mode [ 312.808363][T16231] bond_slave_0: entered allmulticast mode [ 312.818583][T16231] bond_slave_1: entered allmulticast mode [ 312.833913][T16231] bridge_slave_1: entered allmulticast mode [ 313.044614][T16246] xt_bpf: check failed: parse error [ 313.046646][T16029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.092763][T16029] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.121542][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.128767][ T7324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.176871][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.184043][ T7324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.388217][ T5845] Bluetooth: hci4: command tx timeout [ 313.526094][T16029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.917658][T16297] bond0: Error: Cannot enslave bond to itself. [ 314.019182][T16029] veth0_vlan: entered promiscuous mode [ 314.038605][T16029] veth1_vlan: entered promiscuous mode [ 314.054438][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x806 [ 314.067493][T16311] netlink: 'syz.0.2972': attribute type 5 has an invalid length. [ 314.078139][T16029] veth0_macvtap: entered promiscuous mode [ 314.089179][T16029] veth1_macvtap: entered promiscuous mode [ 314.116569][T16029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.132198][T16029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.149485][ T7299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.160456][ T7299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.176234][ T7299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.203282][ T7299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.485477][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2977'. [ 314.922891][ T282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.955975][ T282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.995318][T16339] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2980'. [ 315.131730][ T282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.181989][ T282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.281473][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'. [ 315.477522][ T5845] Bluetooth: hci4: command tx timeout [ 315.638451][T16368] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 315.817319][T16378] SET target dimension over the limit! [ 315.847204][T16378] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 315.863360][T16382] IPv6: sit2: Disabled Multicast RS [ 315.869261][T16378] __nla_validate_parse: 3 callbacks suppressed [ 315.869278][T16378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2992'. [ 315.898326][T16382] sit2: entered allmulticast mode [ 315.998860][T16382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2993'. [ 316.114738][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.125387][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.133865][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.142134][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.150179][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.154803][ T282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.196853][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'. [ 316.210923][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2995'. [ 316.239660][T16401] geneve4: entered promiscuous mode [ 316.326703][T16397] ip6_vti0 speed is unknown, defaulting to 1000 [ 316.396159][ T282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.634775][ T282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.722587][T16397] lo speed is unknown, defaulting to 1000 [ 316.907629][ T282] bond0: (slave netdevsim0): Releasing backup interface [ 316.917959][ T282] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 316.943518][ T282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.957261][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3007'. [ 317.151574][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.162017][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.208465][T16450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3010'. [ 317.250068][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3010'. [ 317.259083][T16450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.316031][T16453] tipc: Enabling of bearer rejected, media not registered [ 317.389769][ T282] dummy0: left allmulticast mode [ 317.421130][ T282] dummy0: left promiscuous mode [ 317.441488][ T282] bridge0: port 1(dummy0) entered disabled state [ 317.553386][ T5840] Bluetooth: hci4: command tx timeout [ 317.800022][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 317.851636][ T282] bond2 (unregistering): (slave gretap1): Releasing active interface [ 317.873173][ T282] bond5 (unregistering): (slave gretap2): Releasing active interface [ 317.917259][T16486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3019'. [ 317.952520][ T282] team0: Port device geneve0 removed [ 318.023893][ T282] bond2 (unregistering): (slave bridge1): Releasing active interface [ 318.186502][ T5840] Bluetooth: hci1: command tx timeout [ 318.226058][ T282] bond0 (unregistering): Released all slaves [ 318.239003][ T282] bond1 (unregistering): Released all slaves [ 318.251687][ T282] bond2 (unregistering): Released all slaves [ 318.350343][ T282] bond3 (unregistering): Released all slaves [ 318.363539][ T282] bond4 (unregistering): Released all slaves [ 318.455035][ T282] bond5 (unregistering): Released all slaves [ 318.469457][ T282] bond6 (unregistering): Released all slaves [ 318.482281][T16397] wlan0 speed is unknown, defaulting to 1000 [ 318.557746][T16492] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 318.671654][T16492] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.734889][T16495] macvlan0: entered promiscuous mode [ 318.740418][T16495] macvlan0: entered allmulticast mode [ 318.756364][T16495] bond7: entered allmulticast mode [ 318.761517][T16495] bond7: entered promiscuous mode [ 318.780874][T16500] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3022'. [ 318.790682][T16495] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 318.800204][T16495] team0: Port device macvlan0 added [ 318.814272][T16499] netlink: 'syz.4.3023': attribute type 13 has an invalid length. [ 319.334537][T16536] sctp: [Deprecated]: syz.3.3031 (pid 16536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.334537][T16536] Use struct sctp_sack_info instead [ 319.576531][T16397] chnl_net:caif_netlink_parms(): no params data found [ 319.929380][T16397] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.949532][T16397] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.964931][T16397] bridge_slave_0: entered allmulticast mode [ 319.990366][T16397] bridge_slave_0: entered promiscuous mode [ 320.009762][T16397] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.028351][T16397] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.040651][T16397] bridge_slave_1: entered allmulticast mode [ 320.050238][T16397] bridge_slave_1: entered promiscuous mode [ 320.112639][T16397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.129463][T16397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.218831][T16397] team0: Port device team_slave_0 added [ 320.232848][T16397] team0: Port device team_slave_1 added [ 320.251807][ T282] tipc: Left network mode [ 320.271058][ T5840] Bluetooth: hci1: command tx timeout [ 320.352996][ T282] IPVS: stopping backup sync thread 6878 ... [ 320.354383][T16397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.380956][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.458344][T16397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.483050][T16397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.498882][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.534040][T16618] netlink: 'syz.1.3050': attribute type 10 has an invalid length. [ 320.542683][T16397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.606288][T16618] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 320.649856][T16618] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 320.684048][T16623] 8021q: VLANs not supported on ip6_vti0 [ 320.895565][T16397] hsr_slave_0: entered promiscuous mode [ 320.907126][T16397] hsr_slave_1: entered promiscuous mode [ 320.913608][T16397] debugfs: 'hsr0' already exists in 'hsr' [ 320.922097][T16397] Cannot create hsr debugfs directory [ 321.143316][T16650] netlink: 'syz.1.3060': attribute type 1 has an invalid length. [ 321.299915][T16650] 8021q: adding VLAN 0 to HW filter on device bond8 [ 321.314532][T16654] vlan0: entered allmulticast mode [ 321.320025][T16654] veth1: entered allmulticast mode [ 321.329087][T16654] bond8: (slave vlan0): making interface the new active one [ 321.338528][T16654] bond8: (slave vlan0): Enslaving as an active interface with an up link [ 321.516054][T16666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.551776][ T40] IPVS: starting estimator thread 0... [ 321.615299][T16675] 8021q: VLANs not supported on ipvlan1 [ 321.656339][T16677] IPVS: using max 33 ests per chain, 79200 per kthread [ 321.806097][T16690] __nla_validate_parse: 4 callbacks suppressed [ 321.806114][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'. [ 321.855266][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'. [ 321.906242][T16693] sctp: [Deprecated]: syz.3.3072 (pid 16693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.906242][T16693] Use struct sctp_sack_info instead [ 322.184813][T16698] syzkaller1: entered promiscuous mode [ 322.221253][T16698] syzkaller1: entered allmulticast mode [ 322.327118][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 322.345837][ T5840] Bluetooth: hci1: command tx timeout [ 322.367695][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3081'. [ 322.441154][ T282] hsr_slave_0: left promiscuous mode [ 322.475047][ T282] hsr_slave_1: left promiscuous mode [ 322.486138][ T282] veth1_macvtap: left promiscuous mode [ 322.492190][ T282] veth0_macvtap: left promiscuous mode [ 322.499348][ T282] veth1_vlan: left promiscuous mode [ 322.516361][T16729] openvswitch: netlink: Key 3 has unexpected len 12 expected 4 [ 322.662905][ T282] ================================================================== [ 322.671000][ T282] BUG: KASAN: slab-use-after-free in mini_qdisc_pair_swap+0x68/0x190 [ 322.679101][ T282] Read of size 8 at addr ffff888021bc0000 by task kworker/u8:5/282 [ 322.686990][ T282] [ 322.689343][ T282] CPU: 1 UID: 0 PID: 282 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 322.689364][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.689376][ T282] Workqueue: netns cleanup_net [ 322.689411][ T282] Call Trace: [ 322.689418][ T282] [ 322.689424][ T282] dump_stack_lvl+0x189/0x250 [ 322.689437][ T282] ? rcu_is_watching+0x15/0xb0 [ 322.689454][ T282] ? __kasan_check_byte+0x12/0x40 [ 322.689475][ T282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.689489][ T282] ? rcu_is_watching+0x15/0xb0 [ 322.689505][ T282] ? lock_release+0x4b/0x3b0 [ 322.689521][ T282] ? __virt_addr_valid+0x1c8/0x5c0 [ 322.689540][ T282] ? __virt_addr_valid+0x4a5/0x5c0 [ 322.689551][ T282] print_report+0xca/0x240 [ 322.689560][ T282] ? mini_qdisc_pair_swap+0x68/0x190 [ 322.689569][ T282] kasan_report+0x118/0x150 [ 322.689582][ T282] ? mini_qdisc_pair_swap+0x68/0x190 [ 322.689592][ T282] mini_qdisc_pair_swap+0x68/0x190 [ 322.689601][ T282] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 322.689615][ T282] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 322.689631][ T282] tcf_block_put_ext+0x129/0x390 [ 322.689645][ T282] clsact_destroy+0x25e/0x820 [ 322.689659][ T282] ? __pfx_clsact_destroy+0x10/0x10 [ 322.689674][ T282] __qdisc_destroy+0x153/0x400 [ 322.689696][ T282] dev_shutdown+0x233/0x440 [ 322.689711][ T282] unregister_netdevice_many_notify+0x117c/0x2310 [ 322.689736][ T282] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 322.689755][ T282] ? unregister_netdevice_queue+0x19b/0x350 [ 322.689773][ T282] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 322.689791][ T282] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 322.689816][ T282] default_device_exit_batch+0x964/0x9e0 [ 322.689841][ T282] ? __pfx___might_resched+0x10/0x10 [ 322.689853][ T282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 322.689866][ T282] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 322.689879][ T282] ? net_generic+0x1e/0x240 [ 322.689894][ T282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 322.689906][ T282] ops_undo_list+0x525/0x990 [ 322.689920][ T282] ? __pfx_ops_undo_list+0x10/0x10 [ 322.689933][ T282] ? do_raw_spin_unlock+0x122/0x240 [ 322.689946][ T282] cleanup_net+0x4d8/0x7a0 [ 322.689959][ T282] ? __pfx_cleanup_net+0x10/0x10 [ 322.689977][ T282] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.689995][ T282] ? process_scheduled_works+0x9ef/0x1770 [ 322.690009][ T282] ? process_scheduled_works+0x9ef/0x1770 [ 322.690023][ T282] process_scheduled_works+0xad1/0x1770 [ 322.690043][ T282] ? __pfx_process_scheduled_works+0x10/0x10 [ 322.690060][ T282] worker_thread+0x8a0/0xda0 [ 322.690073][ T282] kthread+0x711/0x8a0 [ 322.690085][ T282] ? __pfx_worker_thread+0x10/0x10 [ 322.690093][ T282] ? __pfx_kthread+0x10/0x10 [ 322.690104][ T282] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.690114][ T282] ? lockdep_hardirqs_on+0x98/0x140 [ 322.690125][ T282] ? __pfx_kthread+0x10/0x10 [ 322.690135][ T282] ret_from_fork+0x599/0xb30 [ 322.690149][ T282] ? __pfx_ret_from_fork+0x10/0x10 [ 322.690164][ T282] ? __switch_to_asm+0x39/0x70 [ 322.690174][ T282] ? __switch_to_asm+0x33/0x70 [ 322.690184][ T282] ? __pfx_kthread+0x10/0x10 [ 322.690195][ T282] ret_from_fork_asm+0x1a/0x30 [ 322.690209][ T282] [ 322.690212][ T282] [ 323.003971][ T282] Allocated by task 16447: [ 323.008385][ T282] kasan_save_track+0x3e/0x80 [ 323.013078][ T282] __kasan_kmalloc+0x93/0xb0 [ 323.017677][ T282] __kmalloc_noprof+0x411/0x800 [ 323.022538][ T282] sk_prot_alloc+0xe7/0x220 [ 323.027055][ T282] sk_alloc+0x3a/0x390 [ 323.031129][ T282] __netlink_create+0x65/0x260 [ 323.035904][ T282] netlink_create+0x3ca/0x590 [ 323.040586][ T282] __sock_create+0x4b3/0x9d0 [ 323.045181][ T282] __sys_socket+0xd7/0x320 [ 323.049615][ T282] __x64_sys_socket+0x7a/0x90 [ 323.054295][ T282] do_syscall_64+0xfa/0xf80 [ 323.058804][ T282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.064700][ T282] [ 323.067024][ T282] Freed by task 23: [ 323.070820][ T282] kasan_save_track+0x3e/0x80 [ 323.075518][ T282] __kasan_save_free_info+0x46/0x50 [ 323.080727][ T282] __kasan_slab_free+0x5c/0x80 [ 323.085505][ T282] kfree+0x1c0/0x660 [ 323.089406][ T282] __sk_destruct+0x623/0x860 [ 323.094008][ T282] rcu_core+0xd70/0x1870 [ 323.098269][ T282] handle_softirqs+0x27d/0x850 [ 323.103036][ T282] run_ksoftirqd+0x9b/0x100 [ 323.107545][ T282] smpboot_thread_fn+0x542/0xa60 [ 323.112487][ T282] kthread+0x711/0x8a0 [ 323.116561][ T282] ret_from_fork+0x599/0xb30 [ 323.121163][ T282] ret_from_fork_asm+0x1a/0x30 [ 323.125936][ T282] [ 323.128264][ T282] Last potentially related work creation: [ 323.133977][ T282] kasan_save_stack+0x3e/0x60 [ 323.138665][ T282] kasan_record_aux_stack+0xbd/0xd0 [ 323.143865][ T282] call_rcu+0x157/0x9c0 [ 323.148069][ T282] netlink_release+0x16f8/0x1ac0 [ 323.153014][ T282] sock_close+0xc3/0x240 [ 323.157261][ T282] __fput+0x44c/0xa70 [ 323.161242][ T282] task_work_run+0x1d4/0x260 [ 323.165837][ T282] exit_to_user_mode_loop+0xff/0x4f0 [ 323.171122][ T282] do_syscall_64+0x2e3/0xf80 [ 323.175718][ T282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.181610][ T282] [ 323.183933][ T282] The buggy address belongs to the object at ffff888021bc0000 [ 323.183933][ T282] which belongs to the cache kmalloc-2k of size 2048 [ 323.197998][ T282] The buggy address is located 0 bytes inside of [ 323.197998][ T282] freed 2048-byte region [ffff888021bc0000, ffff888021bc0800) [ 323.211714][ T282] [ 323.214041][ T282] The buggy address belongs to the physical page: [ 323.220463][ T282] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21bc0 [ 323.229228][ T282] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 323.237734][ T282] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 323.245732][ T282] page_type: f5(slab) [ 323.249719][ T282] raw: 00fff00000000040 ffff88801a027000 0000000000000000 dead000000000001 [ 323.258303][ T282] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 323.266894][ T282] head: 00fff00000000040 ffff88801a027000 0000000000000000 dead000000000001 [ 323.275566][ T282] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 323.284245][ T282] head: 00fff00000000003 ffffea000086f001 00000000ffffffff 00000000ffffffff [ 323.292925][ T282] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 323.301595][ T282] page dumped because: kasan: bad access detected [ 323.308020][ T282] page_owner tracks the page as allocated [ 323.313733][ T282] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12164, tgid 12163 (syz.3.1737), ts 220492819630, free_ts 220479509876 [ 323.335267][ T282] post_alloc_hook+0x234/0x290 [ 323.340047][ T282] get_page_from_freelist+0x2365/0x2440 [ 323.345606][ T282] __alloc_frozen_pages_noprof+0x181/0x370 [ 323.351416][ T282] alloc_pages_mpol+0x232/0x4a0 [ 323.356278][ T282] allocate_slab+0x86/0x3b0 [ 323.360787][ T282] ___slab_alloc+0xf2b/0x1960 [ 323.365472][ T282] __slab_alloc+0x65/0x100 [ 323.369895][ T282] __kmalloc_noprof+0x471/0x800 [ 323.374752][ T282] sk_prot_alloc+0xe7/0x220 [ 323.379263][ T282] sk_alloc+0x3a/0x390 [ 323.383339][ T282] __netlink_create+0x65/0x260 [ 323.388113][ T282] netlink_create+0x3ca/0x590 [ 323.392795][ T282] __sock_create+0x4b3/0x9d0 [ 323.397396][ T282] __sys_socket+0xd7/0x320 [ 323.401813][ T282] __x64_sys_socket+0x7a/0x90 [ 323.406497][ T282] do_syscall_64+0xfa/0xf80 [ 323.411005][ T282] page last free pid 12171 tgid 12171 stack trace: [ 323.417501][ T282] __free_frozen_pages+0xbc4/0xd30 [ 323.422620][ T282] __slab_free+0x21b/0x2a0 [ 323.427040][ T282] qlist_free_all+0x97/0x100 [ 323.431635][ T282] kasan_quarantine_reduce+0x148/0x160 [ 323.437099][ T282] __kasan_slab_alloc+0x22/0x80 [ 323.441957][ T282] kmem_cache_alloc_noprof+0x367/0x6f0 [ 323.447417][ T282] jbd2__journal_start+0x146/0x5b0 [ 323.452525][ T282] __ext4_journal_start_sb+0x203/0x580 [ 323.457990][ T282] ext4_dirty_inode+0x93/0x110 [ 323.462756][ T282] __mark_inode_dirty+0x390/0x1330 [ 323.467879][ T282] file_update_time_flags+0x43c/0x4e0 [ 323.473255][ T282] ext4_page_mkwrite+0x20e/0x1190 [ 323.478283][ T282] do_page_mkwrite+0x14d/0x310 [ 323.483048][ T282] __handle_mm_fault+0x1afa/0x5420 [ 323.488158][ T282] handle_mm_fault+0x40a/0x8e0 [ 323.492938][ T282] do_user_addr_fault+0xa7c/0x1380 [ 323.498072][ T282] [ 323.500393][ T282] Memory state around the buggy address: [ 323.506016][ T282] ffff888021bbff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.514077][ T282] ffff888021bbff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 323.522226][ T282] >ffff888021bc0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.530283][ T282] ^ [ 323.534346][ T282] ffff888021bc0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.542492][ T282] ffff888021bc0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.550555][ T282] ================================================================== [ 323.570279][ T282] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.577523][ T282] CPU: 1 UID: 0 PID: 282 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 323.586902][ T282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.596973][ T282] Workqueue: netns cleanup_net [ 323.601756][ T282] Call Trace: [ 323.605037][ T282] [ 323.607968][ T282] dump_stack_lvl+0x99/0x250 [ 323.612563][ T282] ? __asan_memcpy+0x40/0x70 [ 323.617163][ T282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.622366][ T282] ? __pfx__printk+0x10/0x10 [ 323.626968][ T282] vpanic+0x237/0x6d0 [ 323.630959][ T282] ? __pfx_vpanic+0x10/0x10 [ 323.635467][ T282] ? preempt_schedule+0xae/0xc0 [ 323.640324][ T282] ? __pfx_preempt_schedule+0x10/0x10 [ 323.645705][ T282] panic+0xb9/0xc0 [ 323.649428][ T282] ? __pfx_panic+0x10/0x10 [ 323.653848][ T282] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 323.659729][ T282] ? mini_qdisc_pair_swap+0x68/0x190 [ 323.665022][ T282] check_panic_on_warn+0x89/0xb0 [ 323.669946][ T282] ? mini_qdisc_pair_swap+0x68/0x190 [ 323.675214][ T282] end_report+0x6f/0x140 [ 323.679445][ T282] kasan_report+0x129/0x150 [ 323.683940][ T282] ? mini_qdisc_pair_swap+0x68/0x190 [ 323.689213][ T282] mini_qdisc_pair_swap+0x68/0x190 [ 323.694316][ T282] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 323.700387][ T282] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 323.706363][ T282] tcf_block_put_ext+0x129/0x390 [ 323.711381][ T282] clsact_destroy+0x25e/0x820 [ 323.716052][ T282] ? __pfx_clsact_destroy+0x10/0x10 [ 323.721240][ T282] __qdisc_destroy+0x153/0x400 [ 323.726032][ T282] dev_shutdown+0x233/0x440 [ 323.730517][ T282] unregister_netdevice_many_notify+0x117c/0x2310 [ 323.736924][ T282] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 323.743673][ T282] ? unregister_netdevice_queue+0x19b/0x350 [ 323.749550][ T282] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 323.755776][ T282] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 323.761923][ T282] default_device_exit_batch+0x964/0x9e0 [ 323.767545][ T282] ? __pfx___might_resched+0x10/0x10 [ 323.772811][ T282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 323.778958][ T282] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 323.784407][ T282] ? net_generic+0x1e/0x240 [ 323.788903][ T282] ? __pfx_default_device_exit_batch+0x10/0x10 [ 323.795061][ T282] ops_undo_list+0x525/0x990 [ 323.799640][ T282] ? __pfx_ops_undo_list+0x10/0x10 [ 323.804738][ T282] ? do_raw_spin_unlock+0x122/0x240 [ 323.809927][ T282] cleanup_net+0x4d8/0x7a0 [ 323.814333][ T282] ? __pfx_cleanup_net+0x10/0x10 [ 323.819260][ T282] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.824442][ T282] ? process_scheduled_works+0x9ef/0x1770 [ 323.830150][ T282] ? process_scheduled_works+0x9ef/0x1770 [ 323.835857][ T282] process_scheduled_works+0xad1/0x1770 [ 323.841399][ T282] ? __pfx_process_scheduled_works+0x10/0x10 [ 323.847369][ T282] worker_thread+0x8a0/0xda0 [ 323.851949][ T282] kthread+0x711/0x8a0 [ 323.856001][ T282] ? __pfx_worker_thread+0x10/0x10 [ 323.861094][ T282] ? __pfx_kthread+0x10/0x10 [ 323.865669][ T282] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.870857][ T282] ? lockdep_hardirqs_on+0x98/0x140 [ 323.876038][ T282] ? __pfx_kthread+0x10/0x10 [ 323.880616][ T282] ret_from_fork+0x599/0xb30 [ 323.885198][ T282] ? __pfx_ret_from_fork+0x10/0x10 [ 323.890301][ T282] ? __switch_to_asm+0x39/0x70 [ 323.895065][ T282] ? __switch_to_asm+0x33/0x70 [ 323.899817][ T282] ? __pfx_kthread+0x10/0x10 [ 323.904566][ T282] ret_from_fork_asm+0x1a/0x30 [ 323.909322][ T282] [ 323.912670][ T282] Kernel Offset: disabled [ 323.916984][ T282] Rebooting in 86400 seconds..