last executing test programs: 3.270879659s ago: executing program 0 (id=2450): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0xc0, 0xc0, 0x278, 0xc0, 0x190, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'wg0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x1, 0x4, 0x1}, {0x8, 0x100000000}, {0xe}, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002a00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08ca40bc4044bbc73596ca2b4a304bb18a6435cf4d0a27536ce1519f90dd70000368df3ff4b9f527ae334e4323691e4153e75f46250f93f38de6c471819d7e08c2c841caaf308f9c44309ed1011309fa8c244369671c95bea9c083a1fc6c9c4be29deb6261a64ff18020fc6ec6ca1e6e1912eb56d4d315cfae", 0x79}, {&(0x7f0000000140)="64df4251c26a967307384f38291aa990", 0x10}, {&(0x7f0000000180)="2ad2474feb11b2c4f0a5a3d0fe8cd13069ae1c42c3b34b91b7cd78cedf710a0878f678c5a3bb849c4d81531bbb09aa84a549f6e45788cc05dc22e0af345efcfd07a9d5668166c3efff539d0bac00de211ff707a70f541ec962f5b4cb56dcbb5db8b93197a1e80fa3f442c95b623d8211ae238aef3b1f2553fc106f85974a154dedc496861a55c0a82d4219ab8ed9b888bea373de7bc52b5538186e1e41bfaff0963fd7f427468643429ea46cf88a3a9ac21596eedbcfe409e7f0cc4bfe9ed052faa3c78468f060d673575b44bc5019d5a9c925de7da60ca407a49daf3d7bab23e8ac75", 0xe3}, {&(0x7f0000000280)="f1aaae17d3430566f9eba41171c23b7e4fd4b3021d705727702c5bfc2802d0154fe7c3ac4a93aec7ce9125b972fac76f384793a3acfc88ba4b11196ff3fe86990ad5738af1c0d659ea4d1a705621ae3d1fef55990bdef3000f4fa56ff0876fa5e1ab0ecdf8492a4769037df5c6b2376407edf5ce17e021051600d1ec835a72c33b59832bfab365ed280417dca48226f4b119f26cb81ed9285ca4e776560f73791b7111f4e1a59946559f9420480ffdf17f3c4923", 0xb4}, {&(0x7f0000000340)="5384464d4b220c8a3189aaeb82bee5025c906c06e7edea69fbd60d6953c31ecaf3c142c593537c0cfeb93afd37c13db2f373495bc4e384c5acac280c0a22868eec9ccb600dfef52c88", 0x49}, {&(0x7f00000003c0)="e9f53d3f1becab26508bb4f145a91958", 0x10}], 0x6, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)="f7f15326", 0x4}], 0x1}}, {{&(0x7f0000000ac0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000000b00)="866086a07758662d5cadf68252ef9d97161b43d34361121005648fa8f419d4287788516c2b94d6c445b1c3e929f792989f166df33580aeee2e470ebe54f326fcf9d92470f5a0fb8fa2483eaa91ff9a4588742784ad01eddd5aad97407ef893f1a3160395445c496986c975c1e07e8fe62e07ab2774a33e55f33260a8fbeca0a04e14c1beb94925387e8ed3789fcb4f33af255c", 0x93}, {&(0x7f0000000bc0)="6550828f9c3251b64b6dbd5888c741610df24bfeda8654da6a26b5b05f46755a6fd4ec7aba57dd06787f0736fcef0b83ebfd45b3fb7788ecb8fd4d5ea1a1094651d57a4b87cc55fa332ee5c52dc248a01db6a8a5e312d617428738076cae97799243297b826f880c9c8f0364c9a418", 0x6f}, {&(0x7f0000000c40)="b4e80a51d7961229d78cc6808c1c6ad7f0972b465605f2bb076e42b4ff9e5d3a13d579de90b8c51ebb254f1ffe514e48bf0c20fc30bd9a3e9527d1b8044ff0a2ecb4e01894c77d18bccf330ebd101152b150855e9ae698a5247c7437d45370de65ca5379eb8cc68b", 0x68}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="05c213bc3304ffc0641be8dec23d203e13daf48321302516dea7ae0af4497a73377dde82e59a93ea328cc29a034ec865d9649fc1cb494d7e3e3f2e856229671abfb9e72c72f1a19652745014678ca177f46a71f1cebfa7652cbf350eeba742c0aae795b89c27f08af6033e5d7d839533040b7105787426bf9683afc9de3ac7ed9338c85f94b33df76615c7721be07ba8eb9c02485fd017f25f30830a1970825dff17c4c94e8508eb53610a0629772a1f8d581852063d547118bd70c868f89d1bb01e8700847a5ac4c5ac3768b3711e7398bb7199d69a6746fd7f2cf83540addd166546e4e01e6de6759480b90c3fa5", 0xef}, {&(0x7f0000001dc0)="5ba060ab305c8095457f6f1e2a7c16287fcbe3cb290e4eb58a67ea1be2aad68c9dac77a54127543e3ee3bd8f4ebeff3b3c6df65a174848036b9d16159e29a651bb78d1f51970f451971c41bc14e4aa7c573ecebde8e7b4943b911462cb8304abaf2b652b0427bd6a69c70e372b4531efd39d0e1a1c465c68e827164f4f7f36cc76612dbe1ad30c7e54a1345772251afbb85b33282f7585d60b722e4436bc065e33227da52d20d7c88c7cecfa34d6d3310d6aaac614230d7188abf7f15fbd43066ab8df9b8d48288cd07f72eaf28f0e5126d5c62c57690a870e9f1b8388332247523e61d8ce079e0bf00752f056", 0xed}, {&(0x7f0000001ec0)="f251387892ed3cfcbeb6134fd7147b264dc921158e0a36a1df44dacc9de982afd577db2e90acba07513cde8a62284a35746763954f9f8bd82618c41f3db9b7abf5786fe365f4d0c0b954a6648ddbe809c42f009401279555e8af08485cbb0dc2a1cf1fcca84e28b9bf7b6f1b8c45ea51354aec975474e95d7810f75e52d0461768e23065eb6843a6482c05", 0x8b}], 0x7, &(0x7f0000002000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@cipso={0x86, 0x58, 0x2, [{0x5, 0xc, "5fce1857effdbd4b89ba"}, {0x6, 0x4, "b35c"}, {0x5, 0x5, "8aa614"}, {0x1, 0x12, "098e7229414423dc29512b40e3438073"}, {0x7, 0xe, "06e0d025844c66ea4d03071d"}, {0x6, 0x4, "ecee"}, {0x7, 0xe, "1c6ceaa6e7f19fcf351c657d"}, {0x1, 0xb, "d35222506af11ebf07"}]}, @timestamp_prespec={0x44, 0x14, 0xcb, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x80}, {@multicast2, 0x708}]}, @noop, @lsrr={0x83, 0x13, 0x44, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @local]}, @noop, @ssrr={0x89, 0x23, 0x30, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, @multicast1, @loopback, @loopback, @multicast2, @multicast2]}, @rr={0x7, 0x7, 0x5f, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0xc1, 0x1, 0x7, [{@multicast2, 0x2}, {@empty, 0x101}, {@remote, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x108}}, {{&(0x7f0000002140)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002180)="fef0eb2b35d3a31814e232f7459887a9cb6a97c2a2b9e8d61b3aedc5faa33102a1071fa5752c38f253db89c7786371c5f82c7f31109f787a9f0d238d1fc0a6fea9e16a071ca36c731c417e1836737863a66bfec98652efdd96f8d036dc72286e3cc119f3ad95fa7b686fc8080c9aaa2f79cbeb3ebdafc85a991097d0b0c5f7203cca92cae0556760677a7d43a5c4665f32b3cb3e6c69bdca8df80fb9dc78b2189a5ae9c08b97c64d7edf3e300bfde33035aa18b9fdc2e2d7e2d080ae65b5307b508d89836893c0d4525c33c2ed655e0060d6306a492fd67e3e8d92fd500c11cfe609b0d14fcac82b79", 0xe9}, {&(0x7f0000002280)="fa645a575e725a75a049ccb9fd2be523950252b97a013ccf23375f7a0a084a56bd82889f312bf51aa174f4c88a09af66284087931ca8da288528b7fd257736ae6f4703001af8f71c62c1b6f3b0d7800a6ee618252166c9159006156605452141c99e55cedb9debf87945e5b197f86bd0447757bbe319be387b8ff7c89c9dd9a05c60bf8e588ac52111a43179d108b9b5f4fa86648066a5ceafda1bb201800237a0e6e15c9e48b2606422643f34b99ccdae97e2266609db60ea4395fdbb284639babee4f4bfa416efacb6d9614f5a946fd0b4680f00f0df945e1008b40ddbb23d077a01f3bb2b176c163e08e9", 0xec}, {&(0x7f0000002380)="0aec50d95bb94f6a85aced70056be2db0079c7c726dedbf85e16ee72318e7b03fd152348c8908d0df40e42b835d61640fac8372cc67ede2c16d84c94433ee990bce3fd290a2937e74a0816ee515af35895e2a23fe13ba59be9e3ef00708a45c84ce00de5faeb750cfbfecb8897ec3c", 0x6f}], 0x3, &(0x7f0000002440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}}, {{&(0x7f0000002480)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002580)=[{&(0x7f00000024c0)="f993c9f0b068cc2022257adc60f2636512038a62d3448e636096772f3a4d4a9784555bcf321866bf7e91ff98b56d2755bbc0240e21f746e48b3e0850ce04d0968081b2d2d34126fa889165d361b3da212bf58b5f23ace22c20b6d997c4", 0x5d}, {&(0x7f0000002540)="42d11762a0097ae4e2daeb2e9d44276ba1c5a4ab6303ff9b3dbd4ef6f8c27d9e6f64976114ce52af0b0f848dd6ee69b8fd", 0x31}], 0x2}}, {{&(0x7f00000025c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000002740)=[{&(0x7f0000002600)="0bb6f01a9a0657c4a5aff8b27d54076195a99821e6a071ac7e2242fe89e05aa23079de942cdeedf1a9a1f47126ebeb77eab4ac1b7af83732c3b03a65446d46ebac45ca8586c2", 0x46}, {&(0x7f0000002680)="10c483630aa5625b688e6fb243ca4bd4bd1063b97fb4e06a94c0e6e803433019f1ef5f3ccb00a36289aa618b893938d21b478e7e598d9492fc043d485cd5653e18318be1e55a1429bb838e5a00e266d8c04d15bf292a00ca14e9822d79ec82174a98e2dea2509e4ef1aba2bdc8ce2cbc846b7185aa7bfba968b520034a8acd579b90de644980badd7760d96c22c7dc4b49e45c3a866faf5a1b26bdd329006510abb1781615eae5771a84667326", 0xad}], 0x2, &(0x7f0000002780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x18}}, {{&(0x7f00000027c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002800)="2775b994cc20b0ec6ea86b7477d3b1823b040f7b99cefb9db7d94bdf4e1de9e4000eb9ed6a71691a5002e34a8dd826dda9f5fc3448e7f902f6d17b3af9effd005b9c03cc28e53d8b014137bc3aa8fcd2ae9cd4872fd2e61a8df166fee981821141dc5cd813bb31d19ae166ea87528a1aebd1528518df01427af36588925d859b2a8575e4d708003af5741d8a431d63be0e50171ded9b49a1d386f24acce771e316f7699deb", 0xa5}, {&(0x7f00000028c0)}], 0x2, &(0x7f0000002940)}}, {{&(0x7f0000002980)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000029c0)}}], 0x8, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) 2.93436547s ago: executing program 0 (id=2455): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket(0x23, 0x80805, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request}}}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000001040300000000000000000000000007050001000100"], 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000006000000513e7b7e1a15d20c52d9c02bfc41410462f0995f82507993cd802cfcb833e0632f859b19a2d93c69371ad980de692d0bb406b8cd07c1b4caaa6767756af495116b77155e5492c48599dc447f4c4bb7ead509cc779a51407d49410c74164c75b5e95a5f0a1ec32ac4a176f805dbd3d7d430f7db"], 0x14}}, 0x0) pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, 0x0, 0x0, 0x4041) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_MARK={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x34, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2004000}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x44000) 2.415624274s ago: executing program 1 (id=2461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x34}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, r1, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x645}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xbd, 0xac, "ada864d42e248110316ef0ea47610f2327b40cdd9c7b731580470225686d48aef024924d0b02fd0de0f279e66e9765b3a358e570913493429d2b32045d7006ca803a1c0e343c992feb447a1f30db71ba038efbe46a6aa2cea2d5fdec644b5cca4080d272279b5c84dbb1ad83718d47cd32d551872b30cdf63901dc0146ee144f3920dc863ecb22ca0761be6914740605bab7121d289df890a70f2ef7041088c5da41ac5f36e568a1c9643e72e80b5aa10515af9582bca4d58b"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x187}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) sendmsg(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="d500bbdf515a7cc06b195d5b1a71e0ae8ca0189dc0cdb2d05aa1d082047183d41b624d80c73af44e5c8b3b2289bc9e37df87d163d6ba64a78872f27ae99ae7c5b1d72a85dd04004769699b38dc68c9f3f1594018f31d478523b80f3e05dce61ac9657fc1d7e993e0ef3255741bf76ae3e954a08527b9d038bf5d87cf5bb1e8", 0x7f}, {&(0x7f0000000580)="515acf40f8a76f0cdbd723963e4c7883d02ba68f1d0b62f9d40f89fd13ca1a3ab51407b0aa552a3d7f7be436996e2ebfd8c0bb309ff8dab9f3321e7d19c199e6f3e8e7b1b1fd48065cb213bc7f722d1786dcd1d186d7fe69029ac6eb47df5669d110fec275f37b572e", 0x69}, {&(0x7f0000000740)="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", 0xff}, {&(0x7f0000000840)="a530aa7d6f34a7dd9544bb6cbaa10be9f03b2256f88eb55cb94b443253087141a1b041a9ad5362ec07679ef437e04118c20666d5c9d9135b1124307ff56aa088cfaedbec8190f11e393f17350e086d2f56b528b9a205068167f83fc568eeb39b1f0e1812497e6b7434e82749dc3c7baff43a3ed1e9d6cc949bb5f7f2fd03d156792fb6ce1aa861f25d6c260483e7416491163a514b0431481d29f2ae8af9c26e5768f183405a5f76d66ed77253bb7ed3c6f3d48072694be6fb72922cbfbf486308489305e957971d78e943d4afe30812", 0xd0}, {&(0x7f0000000940)="92711a103b392f7a0924693aad35dce7bce4171e21ca76e416811c62", 0x1c}], 0x5, &(0x7f0000000a00)=[{0x70, 0x10d, 0xf6, "74a909471275271805d1783cb6022ea595170a5a45b22e198ad21a14c0a0a353103aa8c9fbdd8798879015ac7d62b06dca0b289499295b5e51abf36419b2b0b7526e2f49e337a650b012c414bef76b3d49f6f1a0bed9aff6836d"}, {0x110, 0x103, 0x7, "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"}, {0x10, 0x10a, 0x8}, {0xb8, 0x96695786bdd9eca2, 0xf, "112d843804e8cfe1ee8f358189045ff9e8efaa0b408be6ca3725e6130ed47d01fcc4371599d8612343ff5a257f0d9d561bc9d435f7bf4546af373a0c4daeb6e0ce5aea57c262478f4cd29805199a4b926c131c6c07e8dea53871186b05582f865879c5fbb821e0128e32e5b032f774709fe87c7f8e835da3e706b1712fa8a6c927fc0c89ce562291392c65a238d449510755c582744e78d31e5eba42002574f417da"}, {0x30, 0x116, 0x8d, "3f51c9191cbf96f889eb3f8e5855e6f1b55993531265293114692882fa"}, {0xe0, 0x10e, 0x3, "2957323d0c0673701ec512bd22e6318f4f8a4711697309f636e648556f3f73f6597e18496b4e4c479829ed2d73d27795817a2f12d93dd9a94af9cc4f8f9034a5cff3f87587b890e0dab0535e02a15bc293f915131a5d8d63bfe64215bbbba252e2ce52c402d8091b037b13bda39909d34f628242c86cee673774a032b35661e502a0961b21073a780c1b9c484074653a101a9db681a6d88ef531c33f77a7fdd30db6047f3222002f4ed2260fc6d7ce957e7e6c24514e58a6a87dc2ee17d1bb363e94dc16f5c6947995593523972033"}, {0xd8, 0x114, 0xfffffffc, "1490ac42758705295a41b67f8d5001c9c5c15eb8a8c9554a64baceb393efc0b79228a61863024f4c8a6070a9d67c88231c42b6a3db54e16c0da3e00069c30d42b840c65699cbaf62258cfa2bce15bc9165232fea0b84f1de2c3730c667fc01f66e33c8dfc9cd166d051c01c2aec19e9dcc41575140aad228d890086912f4abafdd377b3c015c5014f5f88ea333d79f805a0b7e0a61d1f5efe230e660ef1c2d4592e50a4a599840e295d82f561fd985ceb6ec5b49b5e48f2551a2913fd805048bf24bb5f021da51"}], 0x430}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="202700002c0007012bbd7000ffdbdf25047c0000280301802103dd802001e98008004600", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000f40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x64, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9d30a126f04182f0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20801}, 0x800) bind$alg(r4, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x20}}, 0x0, @random=0x2, 0x1, @void, @void, @val={0x3, 0x1, 0x6}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0x1, 0x3}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@random_vendor={0xdd, 0x6, "7321b4fc5e5f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xff}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) 2.415033588s ago: executing program 0 (id=2462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.119354242s ago: executing program 3 (id=2466): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c3aaf0ff00000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af98f3ff0000000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.981366347s ago: executing program 3 (id=2467): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000900766c616e300000000000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) 1.890433102s ago: executing program 1 (id=2468): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f40), r1) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002f80)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000003780)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) (async) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x58}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.795304491s ago: executing program 0 (id=2469): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0xfffffffffffffeaa, 0xffffffffffffff74, 0x4}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x0, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db1", 0x4a}, {&(0x7f0000001400)="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", 0xf0e}, {&(0x7f00000000c0)="3d9def0ba8c8e1e84dcda8f33c5882bb8e1f2bb988adc4b6a0bf6cb50940b39f7afe28490af5b3ae3614a96c301d509f24fe8898964495fda3", 0x39}], 0x3}, 0x9cdc2384056f0939) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r8) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0206000004000000000000000000000002000000040000000000"], 0x20}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @remote}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r10, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.741597961s ago: executing program 3 (id=2470): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000270001000000000000000c71d52b4e166928ee29aa7523b233040000000000d62d000000090a010400000000000000000000000008000a40000000000900020073797a31fcffffff0801010073797a3000000000080005400000000c080003400000000808000740000000000800064000000000140000001000010000000000000000000084000a"], 0x7c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000270001000000000000000c71d52b4e166928ee29aa7523b233040000000000d62d000000090a010400000000000000000000000008000a40000000000900020073797a31fcffffff0801010073797a3000000000080005400000000c080003400000000808000740000000000800064000000000140000001000010000000000000000000084000a"], 0x7c}}, 0x0) (async) 1.620795383s ago: executing program 1 (id=2471): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, r2, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) (async, rerun: 64) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) listen(r4, 0x1) (async) close(r1) 1.540021556s ago: executing program 2 (id=2472): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r2, &(0x7f0000000800)="468ea009", 0x0}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 1.53874924s ago: executing program 0 (id=2473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4048045) 1.513946884s ago: executing program 4 (id=2474): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000017000000739af0ff00000000c5090000190f0020c3aaf0ff50000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af9800000000000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.486599991s ago: executing program 3 (id=2475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 1.18717454s ago: executing program 3 (id=2476): r0 = socket(0xa, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x138, 0x0, 0x138, 0x208, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x19}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xa, 0x3, 0x3, 0x1f, 0x14, 0x37], 0x2, 0x8, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x5, 0x6, 0x3, 0x2], 0x1, 0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff00], @ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xff], @ipv4=@empty, [0x0, 0xff000000, 0xff000000, 0xff], 0x40, 0xf, 0x89, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x40}, 0x0, 0x8c}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x6}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x7}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) (rerun: 32) 1.186629189s ago: executing program 4 (id=2477): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c3aaf0ff00000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af98f8ff0000000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.122676556s ago: executing program 4 (id=2478): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltaction={0x78, 0x31, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 947.886837ms ago: executing program 1 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000800) (async) close(0x3) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x1000, "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"}, &(0x7f0000001580)=0x1008) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f00000015c0)={r6, @in={{0x2, 0x4e20, @loopback}}}, 0x84) 859.290718ms ago: executing program 2 (id=2480): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd2f, 0x25dfcbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40104}, 0x40000) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}}], 0x2, 0x20004086) 858.543701ms ago: executing program 4 (id=2481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) (async) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000080)="2b5cd9b38d6164927847803080353c5e91bc97de4e13448d8c6aae0956e6d726a78bbdd3451d2d172244413baf20d32c8c8c084afc9e419533c18727ebc6c167adce72dcbc0a20d39af5c87bfcdf8e0a3a3547f2af882dae6811", 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) (async) listen(r5, 0x7) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 729.62104ms ago: executing program 1 (id=2482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="e904a20000000180c200000e08"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={r1, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x139342, &(0x7f0000000200)={@align=0x100000000, {0x3, 0x9, 0x3, 0x6}}, 0x2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x3437}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x134, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x81}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x103, 0xac, "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"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x40401}, 0x4000) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) (async) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendfile(r3, r1, 0x0, 0xe25) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="53c9310a584604e79f35aca0c347afdd965db234a1a91e59d5d3d16ba3ea06819bf676c44f292f9d6d158e7f0aa107bbc79c9f6ae82eae9be50599dc2912e6348eb81e7c87c4e729b1e374", @ANYRESDEC], 0x254}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRESHEX=r0, @ANYBLOB="53c9310a584604e79f35aca0c347afdd965db234a1a91e59d5d3d16ba3ea06819bf676c44f292f9d6d158e7f0aa107bbc79c9f6ae82eae9be50599dc2912e6348eb81e7c87c4e729b1e374", @ANYRESDEC], 0x254}}, 0x0) 716.480307ms ago: executing program 0 (id=2483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x1000, @remote, 0x9}, 0x1c) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3ddbd, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @mcast2, 0xd}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c204"], 0x0) 655.39834ms ago: executing program 2 (id=2484): socket$kcm(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x24044010) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x1c, 0x6, "d12ba52bf13963c214eae43528b793231238e415121649d9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x16, 0x6, "4ca5cfc63ad8105dcb6e6a8556de6aad121e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x60000885) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback={0xffffffffffffff8d}, 0x16}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x40) 654.742727ms ago: executing program 3 (id=2485): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 539.159023ms ago: executing program 4 (id=2486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async, rerun: 32) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 445.203614ms ago: executing program 1 (id=2487): syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f000000fa00)=0x9) (async) ppoll(&(0x7f0000000240)=[{r4, 0x51}], 0x1, &(0x7f0000000380), 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000500), &(0x7f0000000540)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0xfffffffffffffc2f}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r10, &(0x7f0000000380)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000200)=""/137, 0x89}], 0x2, &(0x7f0000000300)=""/66, 0x42}, 0x2003) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000000000007b1130000000000085100000020000008500000076000000950000080000000000000000000000005ee7e35b2403d89a27f741e1e51557012421a28295cc37d125163ba3ecefb8b48cb913e429e0aff0359886aeec5aca90efb618c21122d6c7d862b8ab3194d1ae7a2326"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 360.045222ms ago: executing program 2 (id=2488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c3aaf0ff00000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af9800000300000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 256.446895ms ago: executing program 4 (id=2489): r0 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x28000400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x4000000, 'aegis128-generic\x00'}, 0x58) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdb53}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1, {[0x0, 0x101, 0x401, 0x2, 0xd, 0x4, 0x4, 0x5]}}, 0x5c) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 244.068018ms ago: executing program 2 (id=2490): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000100000049f4f19cc7013100fc7303000000000200000002000000000000000000"], 0x0, 0x32}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000180)={&(0x7f0000000440)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142, 0x0, 0x1, [@typed={0x0, 0x26, 0x0, 0x0, @ipv6=@private0}, @generic="27f559484402ef293a084ce2f7e36c5a9e8afd3652c7c5ec241ce3eb3ea8bce23d6755ee7bf4daea06f114f6c408e6fc5b9584878c00b513dfc5dad4255c425306e5d351052bdab2ddf2b201409af7724d1b5b6146fa7e11504597adaf352e3e7827e7b56e06a9dd2c07f4c5988424e9fb9d64ee39b0c5ea0884d44361ddcce121258a1788a41df29b58245737105cd14610f6c6cb9990c99e2b06", @typed={0x0, 0x8b, 0x0, 0x0, @u32=0xd90a}, @typed={0x0, 0x158, 0x0, 0x0, @u32=0x400}]}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000000380)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c0000400000000c0001e55b58be809438f2c2d8d69e4e64b2fbcb6fce6feecbdf7a4a28f4763651ad2eb9ae044fcc125585c826cec476deab89701f12517e4379a681ea1fd490be9bf47af80a027701b62d42f557c7e69cb71b2dc3893f3b5d6fe2ade96e64f5405b98a4ebaa66e96daf388a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 2 (id=2491): r0 = socket$netlink(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): tx timeout [ 91.659426][ T5834] Bluetooth: hci3: command tx timeout [ 91.659456][ T5834] Bluetooth: hci1: command tx timeout [ 92.152688][ T1173] cfg80211: failed to load regulatory.db [ 92.157508][ T6000] Zero length message leads to an empty skb [ 92.207791][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.222761][ T5996] h: entered promiscuous mode [ 92.275502][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 92.287332][ T6009] openvswitch: netlink: Flow key attr not present in new flow. [ 92.310143][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 92.670365][ T6027] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 92.751650][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 92.771116][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 92.902997][ T6032] netlink: 'syz.3.29': attribute type 11 has an invalid length. [ 92.930406][ T6032] netlink: 224 bytes leftover after parsing attributes in process `syz.3.29'. [ 92.968089][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 93.223749][ T6048] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 93.234148][ T6048] netlink: 544 bytes leftover after parsing attributes in process `syz.1.34'. [ 93.597714][ T6063] netlink: 364 bytes leftover after parsing attributes in process `syz.0.38'. [ 94.927340][ T5839] Bluetooth: hci4: command tx timeout [ 95.343339][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.352653][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.476955][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.491261][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.762030][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.772107][ T6102] __nla_validate_parse: 1 callbacks suppressed [ 95.772129][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 95.800980][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.829590][ T6105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.52'. [ 95.838353][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.871832][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.146280][ T6112] syzkaller0: entered promiscuous mode [ 96.167584][ T6112] syzkaller0: entered allmulticast mode [ 96.594734][ T6138] netlink: 224 bytes leftover after parsing attributes in process `syz.4.60'. [ 96.707292][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 96.784954][ T6146] netlink: 'syz.3.64': attribute type 4 has an invalid length. [ 96.798905][ T6145] netlink: 'syz.0.63': attribute type 5 has an invalid length. [ 96.903681][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 96.903880][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 96.961203][ T6150] macvlan3: entered promiscuous mode [ 96.977345][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 96.983444][ T6150] macvlan3: entered allmulticast mode [ 97.007182][ T6148] netlink: 'syz.4.65': attribute type 5 has an invalid length. [ 97.021435][ T6150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.66'. [ 97.039837][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 97.190906][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.227708][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.279823][ T6165] veth0: entered promiscuous mode [ 97.296753][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.308348][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 97.325239][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.362209][ T6164] veth0: left promiscuous mode [ 97.384429][ T6176] syz.4.74 uses obsolete (PF_INET,SOCK_PACKET) [ 98.553300][ T6225] netlink: 'syz.4.85': attribute type 28 has an invalid length. [ 98.580319][ T6224] netlink: 'syz.4.85': attribute type 28 has an invalid length. [ 98.607884][ T6224] netlink: 'syz.4.85': attribute type 3 has an invalid length. [ 98.612026][ T6225] netlink: 'syz.4.85': attribute type 3 has an invalid length. [ 98.842802][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.159936][ T6250] vlan2: entered allmulticast mode [ 99.174403][ T6250] hsr0: entered allmulticast mode [ 99.200457][ T6250] hsr_slave_0: entered allmulticast mode [ 99.220623][ T6250] hsr_slave_1: entered allmulticast mode [ 99.805129][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 100.001017][ T6297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.333520][ T6313] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 100.391307][ T6313] vlan2: entered promiscuous mode [ 100.424868][ T6313] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 100.458002][ T6313] vlan2: entered allmulticast mode [ 100.500590][ T6313] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 100.693967][ T6332] netlink: 'syz.4.113': attribute type 8 has an invalid length. [ 101.057114][ T6343] __nla_validate_parse: 12 callbacks suppressed [ 101.057137][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 101.301343][ T6355] netlink: 52 bytes leftover after parsing attributes in process `syz.0.119'. [ 101.701962][ T6381] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 101.743307][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 101.901892][ T6385] bond1 (unregistering): Released all slaves [ 102.100933][ T6399] validate_nla: 64 callbacks suppressed [ 102.100956][ T6399] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 102.153040][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 102.309668][ T6405] netlink: 164 bytes leftover after parsing attributes in process `syz.4.133'. [ 102.765993][ T6428] trusted_key: syz.4.140 sent an empty control message without MSG_MORE. [ 102.781558][ T6428] netlink: 'syz.4.140': attribute type 11 has an invalid length. [ 102.967520][ T6437] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 103.168617][ T6445] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 103.303501][ T6441] macvlan2: entered promiscuous mode [ 103.309562][ T6441] macvlan2: entered allmulticast mode [ 103.317057][ T6441] bond1: entered promiscuous mode [ 103.324196][ T6441] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.340366][ T6441] bond1: left promiscuous mode [ 103.659656][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 103.699356][ T6464] netlink: 'syz.0.149': attribute type 4 has an invalid length. [ 103.719389][ T6467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.889608][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 103.968657][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 103.999756][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 104.230167][ T6491] netlink: 312 bytes leftover after parsing attributes in process `syz.2.159'. [ 104.378093][ T6499] netlink: 'syz.3.160': attribute type 18 has an invalid length. [ 104.438122][ T6499] netlink: 'syz.3.160': attribute type 18 has an invalid length. [ 104.476537][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.494932][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.532168][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.574065][ T6504] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 104.601710][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.098295][ T795] hid (null): global environment stack underflow [ 105.118326][ T795] hid-generic 0005:10CF:0004.0001: global environment stack underflow [ 105.126992][ T795] hid-generic 0005:10CF:0004.0001: item 0 0 1 11 parsing failed [ 105.129581][ T6518] syzkaller0: entered promiscuous mode [ 105.136493][ T795] hid-generic 0005:10CF:0004.0001: probe with driver hid-generic failed with error -22 [ 105.148668][ T6518] syzkaller0: entered allmulticast mode [ 105.231789][ T6530] syzkaller0: entered promiscuous mode [ 105.260906][ T6530] syzkaller0: entered allmulticast mode [ 105.935096][ T6563] netlink: 'syz.4.181': attribute type 2 has an invalid length. [ 105.974481][ T6563] netlink: 'syz.4.181': attribute type 2 has an invalid length. [ 106.108606][ T6555] syzkaller1: entered promiscuous mode [ 106.126356][ T6555] syzkaller1: entered allmulticast mode [ 106.672537][ T6588] __nla_validate_parse: 2 callbacks suppressed [ 106.672558][ T6588] netlink: 14 bytes leftover after parsing attributes in process `syz.2.185'. [ 106.765817][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 107.381884][ T6634] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.199'. [ 107.810577][ T6651] can: request_module (can-proto-3) failed. [ 107.829533][ T6662] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.206'. [ 107.844978][ T6656] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 107.861163][ T6662] bridge_slave_1: default FDB implementation only supports local addresses [ 107.903766][ T6662] xt_policy: too many policy elements [ 107.957488][ T6662] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 107.989928][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.206'. [ 108.032434][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.206'. [ 108.659835][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 108.699689][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 108.758321][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 108.808158][ T6709] xt_recent: Unsupported userspace flags (000000b1) [ 108.841538][ T6709] netlink: 'syz.1.219': attribute type 7 has an invalid length. [ 108.982352][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.094348][ T6714] bridge_slave_0 (unregistering): left allmulticast mode [ 109.132502][ T6714] bridge_slave_0 (unregistering): left promiscuous mode [ 109.152264][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.331079][ T6740] Bluetooth: MGMT ver 1.23 [ 109.625811][ T6763] netlink: 32 bytes leftover after parsing attributes in process `syz.0.229'. [ 111.356524][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'. [ 111.842128][ T6855] xt_hashlimit: size too large, truncated to 1048576 [ 111.947786][ T6857] __nla_validate_parse: 2 callbacks suppressed [ 111.947807][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 112.015657][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 112.162462][ T6873] syzkaller1: entered allmulticast mode [ 112.741487][ T6903] netlink: 'syz.3.270': attribute type 64 has an invalid length. [ 112.766455][ T6903] netlink: 5 bytes leftover after parsing attributes in process `syz.3.270'. [ 112.841426][ T6906] netlink: 'syz.2.272': attribute type 29 has an invalid length. [ 112.868738][ T6907] netlink: 'syz.2.272': attribute type 29 has an invalid length. [ 112.890523][ T6904] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 112.910278][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 112.992610][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 113.103366][ T6921] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.613769][ T6953] x_tables: duplicate underflow at hook 1 [ 113.697407][ T6953] netlink: 112 bytes leftover after parsing attributes in process `syz.2.285'. [ 114.180453][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 114.262999][ T6979] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 114.296849][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 114.316513][ T6979] netlink: 184 bytes leftover after parsing attributes in process `syz.3.293'. [ 114.565252][ T6991] nft_compat: unsupported protocol 0 [ 114.771640][ T7003] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 115.284829][ T7010] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.346726][ T7010] bond2: (slave lo): Enslaving as an active interface with an up link [ 115.433032][ T7010] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 115.560593][ T7014] bond1: (slave geneve2): making interface the new active one [ 115.593978][ T7014] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 115.638181][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 115.667298][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 115.705544][ T7027] syzkaller0: entered promiscuous mode [ 115.726748][ T7027] syzkaller0: entered allmulticast mode [ 115.753214][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 115.798464][ T35] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.212568][ T7047] x_tables: duplicate underflow at hook 1 [ 116.479595][ T7059] netlink: 'syz.1.316': attribute type 21 has an invalid length. [ 116.868570][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.326'. [ 116.993722][ T7067] syzkaller0: entered promiscuous mode [ 117.010263][ T7067] syzkaller0: entered allmulticast mode [ 117.031537][ T7071] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 117.039600][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 117.071855][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.171750][ T7076] syzkaller0: entered promiscuous mode [ 117.185744][ T7076] syzkaller0: entered allmulticast mode [ 117.449459][ T7089] raw_sendmsg: syz.4.330 forgot to set AF_INET. Fix it! [ 117.513863][ T5889] IPVS: starting estimator thread 0... [ 117.618303][ T7092] IPVS: using max 27 ests per chain, 64800 per kthread [ 120.108769][ T7086] tipc: Started in network mode [ 120.113847][ T7086] tipc: Node identity 828bb9aa74b4, cluster identity 4711 [ 120.122993][ T7086] tipc: Enabled bearer , priority 0 [ 120.233597][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 120.326106][ T7087] syzkaller0: entered promiscuous mode [ 120.331681][ T7087] syzkaller0: entered allmulticast mode [ 120.339944][ T7087] tipc: Resetting bearer [ 120.349422][ T7083] tipc: Resetting bearer [ 121.806614][ T7083] tipc: Disabling bearer [ 121.856605][ T5889] tipc: Node number set to 4131371434 [ 122.285444][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 122.507942][ T7147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.353'. [ 122.524541][ T7149] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 122.930974][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 124.179883][ T7184] netlink: 165 bytes leftover after parsing attributes in process `syz.0.364'. [ 124.333986][ T7193] netlink: 'syz.4.368': attribute type 11 has an invalid length. [ 124.343833][ T7193] netlink: 224 bytes leftover after parsing attributes in process `syz.4.368'. [ 124.763296][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 124.868574][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.375'. [ 125.133637][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 125.340977][ T7246] nbd: must specify a size in bytes for the device [ 125.357747][ T7248] xt_hashlimit: size too large, truncated to 1048576 [ 125.445792][ T7254] : renamed from vxcan1 [ 125.795081][ T7257] syzkaller0: entered promiscuous mode [ 125.823852][ T7257] syzkaller0: entered allmulticast mode [ 125.846872][ T7265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.387'. [ 125.862105][ T7265] nbd: device at index 0 is going down [ 126.248129][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 127.773229][ T7267] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 127.782515][ T7280] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 128.154959][ T7293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.292380][ T7299] netlink: 'syz.4.398': attribute type 64 has an invalid length. [ 128.300775][ T7299] __nla_validate_parse: 1 callbacks suppressed [ 128.300794][ T7299] netlink: 5 bytes leftover after parsing attributes in process `syz.4.398'. [ 128.368285][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 128.505259][ T7305] netlink: 44 bytes leftover after parsing attributes in process `syz.4.398'. [ 128.523192][ T7315] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 128.549473][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 128.577993][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 128.592785][ T7317] netlink: 44 bytes leftover after parsing attributes in process `syz.0.401'. [ 128.607769][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.615143][ T7315] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 128.649890][ T7315] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 128.672567][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'. [ 128.682831][ T7315] netlink: 'syz.2.400': attribute type 2 has an invalid length. [ 128.882864][ T7329] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.406'. [ 129.216965][ T7346] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 129.362939][ T7346] bond2: entered promiscuous mode [ 129.379262][ T7346] bond2: entered allmulticast mode [ 129.380949][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 129.385200][ T7346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.407852][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.418543][ T7348] macvlan2: entered promiscuous mode [ 129.424779][ T7348] macvlan2: entered allmulticast mode [ 129.785629][ T7379] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 129.786217][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 130.055015][ T7379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.451168][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.399031][ T7439] ip6erspan0: entered promiscuous mode [ 131.474790][ T795] IPVS: starting estimator thread 0... [ 131.483038][ T7439] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 131.488534][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.605916][ T7448] IPVS: using max 28 ests per chain, 67200 per kthread [ 131.650146][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.446142][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.527778][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.137544][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.154436][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165032][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.177576][ T7493] nbd1: detected capacity change from 0 to 63 [ 133.230486][ T5833] block nbd1: Receive control failed (result -32) [ 133.242127][ T5826] block nbd1: Send control failed (result -32) [ 133.255269][ T5839] block nbd1: Receive control failed (result -32) [ 133.302405][ T5826] block nbd1: Request send failed, requeueing [ 133.314235][ T5158] block nbd1: Dead connection, failed to find a fallback [ 133.325617][ T5158] block nbd1: shutting down sockets [ 133.332652][ T5158] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.335051][ T7501] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 133.343708][ T5158] Buffer I/O error on dev nbd1, logical block 0, async page read [ 133.366175][ T5826] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.375855][ T5826] Buffer I/O error on dev nbd1, logical block 1, async page read [ 133.384986][ T5826] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.395845][ T5826] Buffer I/O error on dev nbd1, logical block 2, async page read [ 133.404001][ T5826] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.413640][ T5826] Buffer I/O error on dev nbd1, logical block 3, async page read [ 133.421813][ T5826] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.431069][ T5826] Buffer I/O error on dev nbd1, logical block 0, async page read [ 133.440058][ T5826] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.449313][ T5826] Buffer I/O error on dev nbd1, logical block 1, async page read [ 133.462881][ T5826] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.472318][ T5826] Buffer I/O error on dev nbd1, logical block 2, async page read [ 133.480395][ T5826] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.489678][ T5826] Buffer I/O error on dev nbd1, logical block 3, async page read [ 133.499554][ T5826] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.509008][ T5826] Buffer I/O error on dev nbd1, logical block 0, async page read [ 133.517467][ T5826] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.526982][ T5826] Buffer I/O error on dev nbd1, logical block 1, async page read [ 133.542603][ T5826] ldm_validate_partition_table(): Disk read failed. [ 133.575513][ T5826] Dev nbd1: unable to read RDB block 0 [ 133.589442][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.617602][ T5826] nbd1: unable to read partition table [ 133.659809][ T5826] ldm_validate_partition_table(): Disk read failed. [ 133.713445][ T5826] Dev nbd1: unable to read RDB block 0 [ 133.757647][ T5826] nbd1: unable to read partition table [ 133.805041][ T7511] xt_hashlimit: size too large, truncated to 1048576 [ 133.865510][ T7513] syz_tun: entered allmulticast mode [ 133.897751][ T7512] syz_tun: left allmulticast mode [ 134.017818][ T7519] tipc: Started in network mode [ 134.041708][ T7519] tipc: Node identity aa91169ae076, cluster identity 4711 [ 134.075490][ T7519] tipc: Enabled bearer , priority 0 [ 134.097555][ T7527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.142902][ T7519] __nla_validate_parse: 9 callbacks suppressed [ 134.142923][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.462'. [ 134.253273][ T7531] xt_hashlimit: size too large, truncated to 1048576 [ 134.263027][ T7526] syzkaller0: entered promiscuous mode [ 134.303542][ T7526] syzkaller0: entered allmulticast mode [ 134.326821][ T7526] tipc: Resetting bearer [ 134.423998][ T7517] tipc: Resetting bearer [ 134.450830][ T7532] netlink: 'syz.2.465': attribute type 10 has an invalid length. [ 134.606073][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.692387][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.646284][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.014655][ T7408] Set syz1 is full, maxelem 65536 reached [ 136.688506][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.881640][ T7517] tipc: Disabling bearer [ 136.893186][ T7532] veth0_macvtap: left promiscuous mode [ 136.947932][ T7537] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 136.957573][ T29] audit: type=1800 audit(1776320396.255:2): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.466" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 136.979367][ T7537] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 136.990513][ T7537] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 137.021832][ T9] tipc: Node number set to 1256658586 [ 137.165186][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'. [ 137.590729][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 137.636840][ T7571] 8021q: VLANs not supported on vcan0 [ 137.727056][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.735443][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.818231][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 137.826915][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.482'. [ 137.848208][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 138.742475][ T7626] netlink: 1 bytes leftover after parsing attributes in process `syz.2.490'. [ 138.764828][ T7613] syzkaller0: entered promiscuous mode [ 138.766045][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.794441][ T7613] syzkaller0: entered allmulticast mode [ 138.926242][ T7642] netlink: 'syz.0.493': attribute type 11 has an invalid length. [ 138.956018][ T7642] netlink: 228 bytes leftover after parsing attributes in process `syz.0.493'. [ 139.809487][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.768059][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.847038][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.882714][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 140.893537][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 141.274167][ T7704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.512'. [ 141.440829][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 141.603520][ T7722] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 141.621456][ T7722] netlink: 'syz.0.518': attribute type 2 has an invalid length. [ 141.886011][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.118829][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 142.140936][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 142.532161][ T7755] netlink: 'syz.1.528': attribute type 5 has an invalid length. [ 142.563216][ T7757] team0: Device gtp1 is up. Set it down before adding it as a team port [ 142.686659][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.812811][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 142.843833][ T7768] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 142.876344][ T7768] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 142.926185][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.071745][ T7775] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 143.260267][ T7775] veth0_vlan: left promiscuous mode [ 143.290882][ T7775] veth0_vlan: entered promiscuous mode [ 143.333254][ T7775] team0: Device veth0_vlan failed to register rx_handler [ 143.435015][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.536'. [ 143.465919][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.536'. [ 143.497752][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 143.817803][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.966880][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.021773][ T7806] batadv0: entered promiscuous mode [ 144.044626][ T7806] macsec1: entered promiscuous mode [ 144.052581][ T7806] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 144.089919][ T7814] vlan3: entered promiscuous mode [ 144.095795][ T7814] bridge0: entered promiscuous mode [ 145.008143][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.046883][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.849211][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.086052][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.366782][ T7898] __nla_validate_parse: 6 callbacks suppressed [ 147.366804][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.565'. [ 147.501421][ T7919] netlink: 'syz.4.565': attribute type 10 has an invalid length. [ 147.679350][ T7925] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.570'. [ 147.713912][ T7925] bridge_slave_1: default FDB implementation only supports local addresses [ 147.880675][ T7919] team0 (unregistering): Port device team_slave_0 removed [ 147.962269][ T7919] team0 (unregistering): Port device team_slave_1 removed [ 148.128355][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.210789][ T7924] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 149.167718][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.733316][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.152989][ T7953] macvtap1: entered promiscuous mode [ 150.167611][ T7953] macvtap1: entered allmulticast mode [ 150.180722][ T7953] veth1_vlan: entered allmulticast mode [ 150.215153][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.003603][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.587'. [ 151.100289][ T8017] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 151.247299][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.316744][ T8017] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 151.343785][ T8017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.394085][ T8017] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 151.865574][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.598'. [ 152.289914][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.298217][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.306387][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.351310][ T8076] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.606'. [ 152.745213][ T8092] netlink: 187476 bytes leftover after parsing attributes in process `syz.4.608'. [ 152.787915][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.810274][ T8101] wg1: entered promiscuous mode [ 152.817386][ T8101] wg1: entered allmulticast mode [ 152.825492][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 152.857810][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'. [ 153.106441][ T8109] bridge1: entered promiscuous mode [ 153.111852][ T8109] bridge1: entered allmulticast mode [ 153.124902][ T8108] batman_adv: batadv0: Adding interface: dummy0 [ 153.132771][ T8108] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.157987][ T8120] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.614'. [ 153.191169][ T8120] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 153.222532][ T8108] batman_adv: batadv0: Interface activated: dummy0 [ 153.272659][ T8122] can: request_module (can-proto-0) failed. [ 153.326820][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.410999][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 153.470867][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 153.784642][ T8150] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.623'. [ 153.889072][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 154.036100][ T8159] x_tables: duplicate underflow at hook 2 [ 154.346585][ T8176] netlink: 2 bytes leftover after parsing attributes in process `syz.1.631'. [ 154.366157][ T5941] net_ratelimit: 20 callbacks suppressed [ 154.366177][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.472076][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 154.685986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.695924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.704230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.941963][ T8210] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 155.407933][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.486718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.600405][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.792932][ T8251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.814383][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.330016][ T8271] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 156.446761][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.472561][ T8275] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 156.773731][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.329324][ T8312] xt_hashlimit: size too large, truncated to 1048576 [ 157.348118][ T8313] xt_hashlimit: size too large, truncated to 1048576 [ 157.763299][ T8333] ipt_rpfilter: unknown options [ 158.003202][ T8339] __nla_validate_parse: 9 callbacks suppressed [ 158.003224][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 158.361670][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 158.401591][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 158.447283][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 158.547287][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.688'. [ 158.575898][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.688'. [ 158.645487][ T8372] netlink: 64 bytes leftover after parsing attributes in process `syz.4.690'. [ 158.664355][ T8373] netlink: 64 bytes leftover after parsing attributes in process `syz.4.690'. [ 158.840183][ T8377] netlink: 'syz.1.692': attribute type 4 has an invalid length. [ 158.869783][ T8380] netlink: 'syz.1.692': attribute type 4 has an invalid length. [ 159.124585][ T8389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.567497][ T1173] net_ratelimit: 5 callbacks suppressed [ 159.567513][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.967743][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.416315][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 160.460959][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 160.475140][ T8450] netlink: 'syz.3.704': attribute type 12 has an invalid length. [ 160.603424][ T8450] bond5: option primary_reselect: invalid value (255) [ 160.610726][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.622554][ T8450] bond5 (unregistering): Released all slaves [ 160.950007][ T8472] syzkaller1: entered promiscuous mode [ 160.961613][ T8472] syzkaller1: entered allmulticast mode [ 161.044703][ T8481] bond5: option resend_igmp: invalid value (32767) [ 161.055765][ T8481] bond5: option resend_igmp: allowed values 0 - 255 [ 161.109097][ T8481] bond5 (unregistering): Released all slaves [ 161.473485][ T8506] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 161.629775][ T8506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.650476][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.021075][ T8537] xt_l2tp: missing protocol rule (udp|l2tpip) [ 162.199321][ T8547] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 162.270136][ T8550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 162.686801][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.862927][ T8567] syzkaller0: entered promiscuous mode [ 162.879203][ T8567] syzkaller0: entered allmulticast mode [ 162.961718][ T8575] netlink: 'syz.3.734': attribute type 2 has an invalid length. [ 162.984513][ T8575] netlink: 'syz.3.734': attribute type 5 has an invalid length. [ 163.006310][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.732590][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.766394][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.806774][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.046354][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.370658][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.847946][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.007778][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.890075][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.937372][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.086062][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.966587][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.009126][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.047202][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.126201][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.087182][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.127750][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.166154][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.175276][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.208713][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.607982][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.247613][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.209273][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.286149][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.328750][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.367247][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.249147][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.407288][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.446185][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.487656][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.288894][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.526179][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.576974][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.206910][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.607551][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.326117][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.646130][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.687250][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.727248][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.376477][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.767010][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.807310][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.848315][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.406622][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.886649][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.529668][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.536157][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.926948][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.807051][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.966693][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.446901][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.006658][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.046684][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.087608][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.486155][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.127734][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.167947][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.208571][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.526098][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.247374][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.287648][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.327508][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.407514][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.566407][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.368452][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.856318][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 206.859093][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 206.862870][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 206.868916][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 207.407100][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.447939][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.616501][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.487573][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.527132][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.577640][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.646356][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.608494][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.646867][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.626811][ T8612] syzkaller0: entered promiscuous mode [ 214.631836][ T8618] __nla_validate_parse: 9 callbacks suppressed [ 214.631854][ T8618] netlink: 220 bytes leftover after parsing attributes in process `syz.2.739'. [ 214.639901][ T8612] syzkaller0: entered allmulticast mode [ 214.686470][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.694748][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.966517][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 215.014575][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.023062][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.032434][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.052882][ T8438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.264917][ T8640] netlink: 76 bytes leftover after parsing attributes in process `syz.1.746'. [ 215.492410][ T8652] netlink: 'syz.2.751': attribute type 5 has an invalid length. [ 215.864275][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'. [ 216.135509][ T5889] IPVS: starting estimator thread 0... [ 216.172746][ T8692] macsec1: entered allmulticast mode [ 216.180128][ T8692] veth1_macvtap: entered allmulticast mode [ 216.201589][ T8692] veth1_macvtap: left allmulticast mode [ 216.226489][ T8693] IPVS: using max 23 ests per chain, 55200 per kthread [ 216.251671][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.763'. [ 216.379158][ T8704] ipt_REJECT: TCP_RESET invalid for non-tcp [ 216.608723][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.767'. [ 216.679846][ T8710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.973724][ T8710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.358611][ T8751] set match dimension is over the limit! [ 220.112194][ T8710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.145374][ T8754] xt_HMARK: proto mask must be zero with L3 mode [ 220.179659][ T8754] net_ratelimit: 5 callbacks suppressed [ 220.179682][ T8754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.209256][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 220.240126][ T8757] netlink: 88 bytes leftover after parsing attributes in process `syz.4.778'. [ 220.281904][ T8710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.473585][ T8770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.781'. [ 220.489309][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 220.499150][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 220.505448][ T8774] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.782'. [ 220.511327][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 220.749778][ T1083] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.783788][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 220.880722][ T8790] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 220.902380][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.917925][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.979097][ T8790] veth0_vlan: left promiscuous mode [ 220.995532][ T8790] veth0_vlan: entered promiscuous mode [ 221.023796][ T8790] team0: Device veth0_vlan failed to register rx_handler [ 221.309378][ T8794] syzkaller0: entered promiscuous mode [ 221.319781][ T8794] syzkaller0: entered allmulticast mode [ 221.331488][ T1083] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.617569][ T8827] xt_ecn: cannot match TCP bits for non-tcp packets [ 223.256016][ T8827] 8021q: VLANs not supported on ip6tnl0 [ 223.417342][ T8832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.798'. [ 223.513407][ T8836] pim6reg: entered allmulticast mode [ 223.626563][ T8838] x9: renamed from bridge_slave_0 [ 223.672992][ T8838] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 223.689114][ T8838] syzkaller1: Refused to change device type [ 223.923347][ T8861] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.807'. [ 223.966856][ T8865] Cannot find add_set index 2 as target [ 224.176799][ T8868] xt_CT: No such helper "pptp" [ 224.186732][ T8869] xt_CT: No such helper "pptp" [ 225.166783][ T8927] netlink: 'syz.4.825': attribute type 63 has an invalid length. [ 225.194635][ T8927] netlink: 'syz.4.825': attribute type 63 has an invalid length. [ 225.539262][ T8949] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 225.599229][ T8953] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.602435][ T8949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.028529][ T8974] bond5: Removing last arp target with arp_interval on [ 226.094049][ T8981] macvtap2: entered promiscuous mode [ 226.100793][ T8981] macvtap2: entered allmulticast mode [ 226.215918][ T8985] syzkaller0: entered promiscuous mode [ 226.233932][ T8985] syzkaller0: entered allmulticast mode [ 226.351241][ T8981] macvtap2: entered promiscuous mode [ 226.362886][ T8981] macvtap2: entered allmulticast mode [ 226.622737][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.852'. [ 226.779239][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 226.818676][ T9018] netlink: 32 bytes leftover after parsing attributes in process `syz.3.853'. [ 226.868810][ T9028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.857'. [ 227.062629][ T9038] netem: incorrect gi model size [ 227.104532][ T9038] netem: change failed [ 227.247748][ T9044] syzkaller0: entered promiscuous mode [ 227.276999][ T9044] syzkaller0: entered allmulticast mode [ 227.322474][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 227.448081][ T9058] syzkaller0: entered promiscuous mode [ 227.463940][ T9058] syzkaller0: entered allmulticast mode [ 227.541585][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 227.840123][ T9076] netlink: 216 bytes leftover after parsing attributes in process `syz.4.870'. [ 227.850057][ T9076] netlink: 'syz.4.870': attribute type 2 has an invalid length. [ 228.320163][ T9085] x_tables: duplicate underflow at hook 1 [ 228.326184][ T9083] x_tables: duplicate underflow at hook 1 [ 228.400722][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 228.916248][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 228.974818][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.883'. [ 229.775159][ T9129] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 229.815200][ T9129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.824183][ T9129] IPv6: NLM_F_CREATE should be set when creating new route [ 230.280523][ T9153] tipc: New replicast peer: 172.20.20.187 [ 230.310735][ T9153] tipc: Enabled bearer , priority 10 [ 230.449771][ T9156] bond0: entered promiscuous mode [ 230.478485][ T9156] bond_slave_0: entered promiscuous mode [ 230.492492][ T9156] bond_slave_1: entered promiscuous mode [ 230.503157][ T9156] batadv0: entered promiscuous mode [ 230.512211][ T9156] hsr1: entered promiscuous mode [ 230.881931][ T9194] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 231.410022][ T9213] bond0: entered promiscuous mode [ 231.415607][ T9213] bond_slave_0: entered promiscuous mode [ 231.423859][ T9213] bond_slave_1: entered promiscuous mode [ 231.436205][ T9213] gretap0: entered promiscuous mode [ 231.443373][ T9213] debugfs: 'hsr1' already exists in 'hsr' [ 231.450214][ T9213] Cannot create hsr debugfs directory [ 231.456386][ T9213] hsr1: entered promiscuous mode [ 231.672546][ T9230] __nla_validate_parse: 9 callbacks suppressed [ 231.672570][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 231.932702][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 231.941809][ T5889] IPVS: starting estimator thread 0... [ 231.950709][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 231.991346][ T9240] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 232.012898][ T9240] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.034036][ T9247] netlink: 'syz.2.917': attribute type 14 has an invalid length. [ 232.055424][ T9248] IPVS: using max 30 ests per chain, 72000 per kthread [ 232.075710][ T9247] netlink: 'syz.2.917': attribute type 13 has an invalid length. [ 232.293194][ T9257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'. [ 232.679932][ T9275] 8021q: VLANs not supported on lo [ 232.712516][ T9275] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 232.719893][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.930'. [ 232.759024][ T9275] team0: Device vxcan1 is of different type [ 232.803927][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 232.812182][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.930'. [ 232.815940][ T9275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.834454][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 232.856979][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 233.826771][ T9337] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 234.221880][ T9359] netlink: 'syz.2.954': attribute type 61 has an invalid length. [ 234.234104][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'. [ 234.247796][ T9359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.954'. [ 234.453082][ T9362] xt_bpf: check failed: parse error [ 234.514281][ T9386] macvlan0: entered promiscuous mode [ 234.523805][ T9365] team0: No ports can be present during mode change [ 234.657109][ T9395] Cannot find set identified by id 65534 to match [ 235.627336][ T9439] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 236.181912][ T9477] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 236.501130][ T9486] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 236.568663][ T9490] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 236.762864][ T9496] bond2 (unregistering): Released all slaves [ 236.772706][ T9500] __nla_validate_parse: 8 callbacks suppressed [ 236.772727][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'. [ 236.860773][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 236.870883][ T9506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.993'. [ 236.894667][ T9504] netlink: 200 bytes leftover after parsing attributes in process `syz.3.991'. [ 236.899077][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 236.928243][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 237.037031][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.994'. [ 237.095118][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.117499][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.994'. [ 237.131776][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.149098][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.246183][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.398773][ T9529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.999'. [ 237.411123][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 237.729242][ T5889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.769864][ T9538] x9 (unregistering): left allmulticast mode [ 237.780283][ T9538] x9 (unregistering): left promiscuous mode [ 237.789152][ T9538] bridge0: port 1(1x9) entered disabled state [ 238.471616][ T9606] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 238.512560][ T9606] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.576066][ T9606] bond5: (slave gretap1): making interface the new active one [ 238.606762][ T9606] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 239.101675][ T9628] netlink: 'syz.3.1025': attribute type 29 has an invalid length. [ 239.144694][ T9628] netlink: 'syz.3.1025': attribute type 29 has an invalid length. [ 240.050923][ T9673] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 240.846065][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.995115][ T9730] sctp: [Deprecated]: syz.0.1054 (pid 9730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.995115][ T9730] Use struct sctp_sack_info instead [ 241.066678][ T9730] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 241.094379][ T9730] netlink: 'syz.0.1054': attribute type 4 has an invalid length. [ 241.148205][ T9740] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 241.218933][ T9743] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 241.268978][ T9746] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 241.287664][ T9749] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 242.016704][ T9790] __nla_validate_parse: 20 callbacks suppressed [ 242.016727][ T9790] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1072'. [ 242.096730][ T9796] set match dimension is over the limit! [ 242.226643][ T9794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1074'. [ 242.264490][ T9801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.461926][ T9814] netlink: 'syz.0.1082': attribute type 3 has an invalid length. [ 242.586819][ T9810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1080'. [ 242.830541][ T9820] netlink: 'syz.2.1084': attribute type 9 has an invalid length. [ 244.517433][ T9814] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 245.874745][ T9894] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1100'. [ 246.042957][ T9901] openvswitch: netlink: Unknown key attributes 2 [ 246.307549][ T9916] ieee802154 phy0 wpan0: encryption failed: -90 [ 246.500830][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1110'. [ 246.673429][ T9926] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1110'. [ 247.338319][ T9976] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 247.368393][ T9976] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1123'. [ 247.417732][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1125'. [ 247.453026][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1124'. [ 247.856643][T10013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'. [ 248.170984][T10012] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1130'. [ 248.224140][T10012] vlan2: entered allmulticast mode [ 248.239617][T10012] ip6gretap0: entered allmulticast mode [ 248.310683][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'. [ 248.590757][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1138'. [ 248.789874][T10055] syzkaller0: entered promiscuous mode [ 248.795753][T10055] syzkaller0: entered allmulticast mode [ 248.925867][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.599645][T10080] syzkaller0: entered promiscuous mode [ 249.624214][T10080] syzkaller0: entered allmulticast mode [ 249.664779][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1147'. [ 249.683750][T10087] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 250.263580][T10103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.613095][T10112] nbd: must specify a size in bytes for the device [ 250.620948][T10112] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1158'. [ 250.797551][T10117] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 250.835909][T10117] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 251.031429][T10136] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1165'. [ 251.061580][T10136] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 251.492378][T10161] : renamed from virt_wifi0 [ 251.645944][T10174] netlink: 'syz.3.1175': attribute type 10 has an invalid length. [ 251.839943][T10174] dummy0: entered promiscuous mode [ 251.868640][T10174] bridge0: port 3(dummy0) entered blocking state [ 251.888137][T10174] bridge0: port 3(dummy0) entered disabled state [ 251.905022][T10174] dummy0: entered allmulticast mode [ 251.928662][T10174] bridge0: port 3(dummy0) entered blocking state [ 251.935287][T10174] bridge0: port 3(dummy0) entered forwarding state [ 252.040100][T10193] netlink: 'syz.4.1183': attribute type 12 has an invalid length. [ 252.189732][T10200] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.246370][T10204] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 252.422706][T10209] syzkaller0: entered promiscuous mode [ 252.444112][T10209] syzkaller0: entered allmulticast mode [ 252.723041][T10226] netlink: 'syz.3.1194': attribute type 21 has an invalid length. [ 252.723145][T10223] xt_CT: No such helper "pptp" [ 252.761359][T10226] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.783761][T10226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.791272][T10226] IPv6: NLM_F_CREATE should be set when creating new route [ 252.798624][T10226] IPv6: NLM_F_CREATE should be set when creating new route [ 252.806028][T10226] IPv6: NLM_F_CREATE should be set when creating new route [ 253.694496][T10259] __nla_validate_parse: 4 callbacks suppressed [ 253.694516][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1203'. [ 253.876087][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 253.932439][T10257] netlink: 'syz.4.1204': attribute type 2 has an invalid length. [ 253.955413][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1207'. [ 253.974594][T10277] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.976590][T10257] netlink: 'syz.4.1204': attribute type 2 has an invalid length. [ 254.803268][T10310] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 254.814909][T10310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.828329][T10308] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 254.828493][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'. [ 254.919054][T10312] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 255.093214][T10315] [: renamed from veth0_to_batadv [ 255.338823][T10319] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 255.354251][T10325] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1222'. [ 255.372956][T10319] bond2 (unregistering): Released all slaves [ 255.532114][T10328] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1223'. [ 255.567288][T10328] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 255.772942][T10341] netlink: get zone limit has 8 unknown bytes [ 255.908376][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 255.937214][T10343] netlink: 'syz.4.1227': attribute type 5 has an invalid length. [ 255.965101][T10343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1227'. [ 255.987439][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.993470][T10347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.089449][T10349] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1229'. [ 256.143283][T10351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1229'. [ 256.306008][T10356] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 256.411239][T10356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.228223][T10378] netlink: 'syz.0.1240': attribute type 14 has an invalid length. [ 257.254379][T10378] netlink: 'syz.0.1240': attribute type 13 has an invalid length. [ 257.483758][T10393] openvswitch: netlink: IPv4 tun info is not correct [ 257.553728][T10396] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 257.593456][T10396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.630116][T10396] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 257.681683][T10399] batadv0: entered promiscuous mode [ 257.722293][T10399] batadv0: entered allmulticast mode [ 257.764125][T10399] bond0: (slave batadv0): Releasing backup interface [ 257.815803][T10399] bridge0: port 3(batadv0) entered blocking state [ 257.830330][T10399] bridge0: port 3(batadv0) entered disabled state [ 257.974623][T10411] ip6tnl0: Caught tx_queue_len zero misconfig [ 258.246615][ T8438] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 258.256642][ T8438] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 258.516363][T10447] lo: Caught tx_queue_len zero misconfig [ 258.764387][T10454] __nla_validate_parse: 14 callbacks suppressed [ 258.764409][T10454] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1264'. [ 258.803529][T10454] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 258.850010][T10462] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1266'. [ 258.873773][T10462] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1266'. [ 259.065821][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 259.095163][T10471] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.681970][T10496] syzkaller0: entered promiscuous mode [ 259.705319][T10496] syzkaller0: entered allmulticast mode [ 259.879724][T10507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1275'. [ 260.201437][T10522] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1281'. [ 260.217756][T10521] validate_nla: 1 callbacks suppressed [ 260.217777][T10521] netlink: 'syz.1.1280': attribute type 2 has an invalid length. [ 260.289395][T10526] Bluetooth: MGMT ver 1.23 [ 260.323772][T10524] syzkaller0: entered promiscuous mode [ 260.349642][T10524] syzkaller0: entered allmulticast mode [ 260.467078][T10533] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1285'. [ 260.613684][T10541] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1285'. [ 260.651758][T10541] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1285'. [ 260.669168][T10541] netlink: 'syz.4.1285': attribute type 6 has an invalid length. [ 260.702324][T10541] netlink: 'syz.4.1285': attribute type 5 has an invalid length. [ 260.715852][T10541] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1285'. [ 261.061937][T10565] netlink: 'syz.1.1294': attribute type 5 has an invalid length. [ 261.780513][T10607] IPVS: Scheduler module ip_vs_sip not found [ 261.992726][T10626] netlink: 'syz.4.1312': attribute type 63 has an invalid length. [ 262.010642][T10627] netlink: 'syz.4.1312': attribute type 63 has an invalid length. [ 262.019737][T10627] netlink: 'syz.4.1312': attribute type 63 has an invalid length. [ 262.021399][T10626] netlink: 'syz.4.1312': attribute type 63 has an invalid length. [ 262.147467][T10632] ipvlan1: entered allmulticast mode [ 262.157850][T10632] syz_tun: entered allmulticast mode [ 262.190184][T10634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.849266][T10654] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 262.991992][T10638] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 263.673802][T10684] syz_tun: entered promiscuous mode [ 263.707947][T10684] syz_tun: left promiscuous mode [ 263.808349][T10697] __nla_validate_parse: 7 callbacks suppressed [ 263.808369][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 264.222329][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'. [ 264.264618][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'. [ 264.286092][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.308577][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 264.569498][T10727] sctp: [Deprecated]: syz.1.1339 (pid 10727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.569498][T10727] Use struct sctp_sack_info instead [ 264.912255][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'. [ 265.383213][T10748] tipc: Failed to remove unknown binding: 66,0,0/0:434877354/434877355 [ 265.411255][T10750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1345'. [ 265.550665][T10756] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 265.713353][T10762] h: entered promiscuous mode [ 265.810699][T10762] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 266.027996][T10774] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 266.134282][T10780] netlink: 'syz.1.1355': attribute type 4 has an invalid length. [ 266.234367][T10783] netlink: 'syz.4.1357': attribute type 10 has an invalid length. [ 266.273650][T10789] netlink: 'syz.3.1359': attribute type 9 has an invalid length. [ 266.292782][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.303880][T10785] netlink: 'syz.2.1358': attribute type 64 has an invalid length. [ 266.308962][T10789] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1359'. [ 266.346480][T10783] bridge_slave_1: left allmulticast mode [ 266.353378][T10783] bridge_slave_1: left promiscuous mode [ 266.360147][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.384237][T10783] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 266.532624][T10798] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 266.655791][T10803] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1363'. [ 266.874247][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1367'. [ 267.092902][T10823] syzkaller0: entered promiscuous mode [ 267.105099][T10825] netlink: 'syz.0.1371': attribute type 21 has an invalid length. [ 267.114791][T10823] syzkaller0: entered allmulticast mode [ 267.164915][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 267.194969][T10825] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 267.211374][T10825] bond3 (unregistering): Released all slaves [ 267.248404][T10832] netlink: 'syz.3.1374': attribute type 3 has an invalid length. [ 267.400481][T10842] netlink: 'syz.0.1376': attribute type 11 has an invalid length. [ 267.597588][T10849] x_tables: duplicate underflow at hook 1 [ 267.709423][T10855] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 267.958498][T10855] bond9: entered allmulticast mode [ 268.054092][T10870] bridge4: entered promiscuous mode [ 268.079957][T10870] bridge4: entered allmulticast mode [ 268.162262][T10880] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 268.448928][T10893] netlink: 'syz.3.1393': attribute type 9 has an invalid length. [ 268.504121][T10898] syzkaller0: entered promiscuous mode [ 268.524698][T10898] syzkaller0: entered allmulticast mode [ 268.971930][T10921] __nla_validate_parse: 4 callbacks suppressed [ 268.971953][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 268.986900][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1403'. [ 269.039562][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 269.079649][T10931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1402'. [ 269.127408][T10921] hsr_slave_1 (unregistering): left promiscuous mode [ 269.217836][T10928] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 269.253030][T10928] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 269.299402][T10928] gretap1: entered promiscuous mode [ 269.313684][T10928] gretap1: entered allmulticast mode [ 269.353471][T10937] syzkaller0: entered promiscuous mode [ 269.366120][T10937] syzkaller0: entered allmulticast mode [ 269.474807][T10946] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 269.631328][T10952] tipc: Failed to obtain node identity [ 269.647904][T10952] tipc: Enabling of bearer rejected, failed to enable media [ 269.684471][T10959] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 269.918247][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 269.968096][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 270.092421][T10976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.108433][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 270.149814][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 270.264715][T10988] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1421'. [ 270.413072][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 271.345733][T11033] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 271.781121][T11056] validate_nla: 6 callbacks suppressed [ 271.781142][T11056] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 272.025494][T11056] bond10: entered promiscuous mode [ 272.095468][T11056] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.345022][T11059] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.426599][T11059] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 272.453016][T11059] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 272.515315][T11059] bond10: (slave ip6gre1): making interface the new active one [ 272.537439][T11059] ip6gre1: entered promiscuous mode [ 272.554421][T11059] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 272.580440][T11066] netlink: 'syz.4.1445': attribute type 25 has an invalid length. [ 272.596015][T11066] netlink: 'syz.4.1445': attribute type 28 has an invalid length. [ 272.947172][T11097] batadv_slave_0: Caught tx_queue_len zero misconfig [ 273.362083][T11120] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 273.404415][T11120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.511315][T11127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.986964][T11152] __nla_validate_parse: 8 callbacks suppressed [ 273.986986][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1472'. [ 273.989617][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'. [ 274.018544][T11152] netlink: 'syz.2.1472': attribute type 7 has an invalid length. [ 274.036166][T11152] netlink: 'syz.2.1472': attribute type 8 has an invalid length. [ 274.044992][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 274.180159][T11156] x_tables: unsorted entry at hook 1 [ 274.601638][T11188] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1479'. [ 274.630435][T11188] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1479'. [ 274.662856][T11190] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1481'. [ 274.676699][T11190] openvswitch: netlink: Message has 5 unknown bytes. [ 274.711500][T11190] netlink: 'syz.3.1481': attribute type 3 has an invalid length. [ 274.969069][T11198] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1485'. [ 275.294393][T11212] netlink: 'syz.2.1491': attribute type 1 has an invalid length. [ 275.320157][T11212] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1491'. [ 275.451319][T11217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1492'. [ 275.850675][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 276.035929][T11262] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 276.171139][T11216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.713080][T11299] sctp: [Deprecated]: syz.0.1514 (pid 11299) Use of int in max_burst socket option. [ 276.713080][T11299] Use struct sctp_assoc_value instead [ 276.736667][T11302] netlink: 'syz.4.1516': attribute type 12 has an invalid length. [ 276.955167][T11308] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 277.487393][T11338] netlink: 'syz.2.1529': attribute type 7 has an invalid length. [ 277.514955][T11338] netlink: 'syz.2.1529': attribute type 7 has an invalid length. [ 277.621439][T11348] netlink: 'syz.4.1533': attribute type 11 has an invalid length. [ 277.658120][T11348] netlink: 'syz.4.1533': attribute type 11 has an invalid length. [ 277.854303][T11356] syzkaller0: entered promiscuous mode [ 277.865810][T11356] syzkaller0: entered allmulticast mode [ 278.178021][T11380] netlink: 'syz.1.1544': attribute type 2 has an invalid length. [ 278.406795][T11387] tipc: Enabling of bearer rejected, already enabled [ 278.464851][T11396] syzkaller0: entered allmulticast mode [ 279.410459][T11428] __nla_validate_parse: 77 callbacks suppressed [ 279.410481][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1558'. [ 279.446028][T11428] nbd: must specify at least one socket [ 279.487125][T11432] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 279.767367][T11434] 8021q: adding VLAN 0 to HW filter on device bond12 [ 279.791090][T11434] bond11: (slave bond12): making interface the new active one [ 279.837502][T11434] bond11: (slave bond12): Enslaving as an active interface with an up link [ 280.437740][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 280.618591][T11480] Cannot find set identified by id 0 to match [ 280.648915][T11471] syzkaller0: entered promiscuous mode [ 280.654708][T11471] syzkaller0: entered allmulticast mode [ 280.940725][T11494] tipc: Can't bind to reserved service type 3 [ 283.562253][T11531] netlink: 'syz.4.1584': attribute type 16 has an invalid length. [ 283.580837][T11531] netlink: 'syz.4.1584': attribute type 17 has an invalid length. [ 283.632305][T11534] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 283.725815][T11538] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 283.733987][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 283.743016][T11531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.762006][T11538] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 283.772938][T11539] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 283.782226][T11539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1586'. [ 283.822573][T11539] NCSI netlink: No device for ifindex 0 [ 283.926834][T11540] wireguard0: entered promiscuous mode [ 283.932497][T11540] wireguard0: entered allmulticast mode [ 284.038598][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 284.075399][T11553] Bluetooth: MGMT ver 1.23 [ 284.574668][T11567] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 284.894370][T11581] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 285.192874][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'. [ 285.309825][T11603] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 285.360776][T11602] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1603'. [ 286.251967][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1611'. [ 286.600391][T11655] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1614'. [ 286.721183][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 286.763114][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 286.807043][T11661] netlink: 'syz.0.1616': attribute type 3 has an invalid length. [ 286.875413][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 286.915868][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 286.936891][T11664] netlink: 'syz.1.1617': attribute type 14 has an invalid length. [ 286.955255][T11664] netlink: 'syz.1.1617': attribute type 13 has an invalid length. [ 287.097624][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'. [ 287.149642][T11679] bond0: entered promiscuous mode [ 287.174508][T11679] bond_slave_0: entered promiscuous mode [ 287.189046][T11679] bond_slave_1: entered promiscuous mode [ 287.211595][T11682] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1621'. [ 287.223389][T11679] gretap0: entered promiscuous mode [ 287.254130][T11679] debugfs: 'hsr1' already exists in 'hsr' [ 287.261615][T11687] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 287.284894][T11688] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 287.287755][T11679] Cannot create hsr debugfs directory [ 287.294388][T11682] netlink: ct family unspecified [ 287.318956][T11681] xt_CT: No such helper "pptp" [ 287.328535][T11679] hsr1: entered promiscuous mode [ 287.337313][T11685] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 287.459578][T11685] team1: entered promiscuous mode [ 287.475081][T11685] team1: entered allmulticast mode [ 287.705391][T11703] bond13: option min_links: invalid value (18446744073709551614) [ 287.715292][T11703] bond13: option min_links: allowed values 0 - 2147483647 [ 287.740618][T11703] bond13 (unregistering): Released all slaves [ 288.364570][T11746] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.372484][T11746] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.076057][T11780] validate_nla: 1 callbacks suppressed [ 289.076077][T11780] netlink: 'syz.2.1645': attribute type 1 has an invalid length. [ 289.135052][T11780] netlink: 'syz.2.1645': attribute type 1 has an invalid length. [ 289.192718][T11782] netlink: 'syz.2.1645': attribute type 1 has an invalid length. [ 289.205913][T11782] netlink: 'syz.2.1645': attribute type 1 has an invalid length. [ 289.745424][T11810] bond2: (slave lo): Releasing backup interface [ 289.794284][T11810] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 290.105919][T11829] sock: sock_timestamping_bind_phc: sock not bind to device [ 290.371174][T11838] __nla_validate_parse: 2 callbacks suppressed [ 290.371196][T11838] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1656'. [ 290.542679][T11810] bridge0: port 3(dummy0) entered disabled state [ 290.549397][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.557241][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.652049][T11810] dummy0: left allmulticast mode [ 290.666069][T11810] bridge0: port 3(dummy0) entered disabled state [ 290.788200][T11810] bridge_slave_0: left allmulticast mode [ 290.801558][T11810] bridge_slave_0: left promiscuous mode [ 290.808354][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.836853][T11810] bridge_slave_1: left allmulticast mode [ 290.842639][T11810] bridge_slave_1: left promiscuous mode [ 290.855504][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.884388][T11810] bond0: (slave bond_slave_0): Releasing backup interface [ 290.916150][T11810] bond0: (slave bond_slave_1): Releasing backup interface [ 290.945544][T11810] team0: Port device team_slave_0 removed [ 290.979433][T11810] team0: Port device team_slave_1 removed [ 290.998744][T11810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.022962][T11810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.047563][T11810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.070434][T11810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.125069][T11810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.064376][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 292.103969][T11892] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1670'. [ 292.158192][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1670'. [ 292.178355][T11894] netlink: 'syz.2.1671': attribute type 10 has an invalid length. [ 292.264504][T11894] veth0_vlan: left promiscuous mode [ 292.290553][T11894] veth0_vlan: entered promiscuous mode [ 292.327543][T11894] team0: Device veth0_vlan failed to register rx_handler [ 292.389183][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 292.478837][T11900] netlink: 'syz.3.1673': attribute type 12 has an invalid length. [ 292.732445][T11926] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 292.792955][T11926] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 293.008541][T11941] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1678'. [ 293.040995][T11936] veth1_macvtap: renamed from veth0_vlan [ 294.289935][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 294.503648][T11985] macvtap1: entered allmulticast mode [ 294.516297][T11985] veth0_macvtap: entered allmulticast mode [ 294.733003][T12001] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 294.786087][T12001] syzkaller1: linktype set to 823 [ 294.792058][T12008] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1696'. [ 294.830388][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 294.910869][T12012] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1698'. [ 294.943842][T12012] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 295.181528][ T5488] veth1_macvtap: left promiscuous mode [ 295.299328][ T5488] veth1_macvtap: entered promiscuous mode [ 295.356939][T12024] vcan1: entered promiscuous mode [ 295.382610][T12024] vcan1: entered allmulticast mode [ 295.932663][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1711'. [ 296.023085][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1713'. [ 296.286586][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.314237][T12078] ip6gre0: Master is either lo or non-ether device [ 296.371918][T12078] ip6gre0: Master is either lo or non-ether device [ 296.831408][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1721'. [ 297.400986][T12142] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 297.986693][T12166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.093145][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'. [ 298.232007][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1736'. [ 298.245406][T12176] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 298.260257][T12174] netlink: 'syz.4.1736': attribute type 21 has an invalid length. [ 298.269276][T12174] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1736'. [ 298.279813][T12174] netlink: 'syz.4.1736': attribute type 4 has an invalid length. [ 298.287969][T12174] netlink: 'syz.4.1736': attribute type 5 has an invalid length. [ 298.297441][T12174] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1736'. [ 298.310676][T12180] netlink: 'syz.4.1736': attribute type 21 has an invalid length. [ 298.330218][T12180] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1736'. [ 298.448044][T12179] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 298.479793][T12179] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 298.584946][T12180] netlink: 'syz.4.1736': attribute type 4 has an invalid length. [ 298.610555][T12180] netlink: 'syz.4.1736': attribute type 5 has an invalid length. [ 298.627458][T12180] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1736'. [ 298.684268][T12183] macvlan2: entered promiscuous mode [ 298.696010][T12183] macvlan2: entered allmulticast mode [ 298.714425][T12183] bond3: entered promiscuous mode [ 298.737816][T12183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.777222][T12183] bond3: left promiscuous mode [ 298.851258][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1743'. [ 299.241407][T12221] Cannot find set identified by id 65534 to match [ 299.339378][T12227] netlink: 'syz.1.1753': attribute type 13 has an invalid length. [ 299.468749][T12227] gretap0: refused to change device tx_queue_len [ 299.486599][T12227] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 299.537092][T12236] tipc: Enabled bearer , priority 0 [ 299.574913][T12235] tipc: Resetting bearer [ 299.594723][T12234] tipc: Disabling bearer [ 300.028517][T12258] syzkaller0: entered promiscuous mode [ 300.044257][T12258] syzkaller0: entered allmulticast mode [ 300.294487][T12270] xt_hashlimit: size too large, truncated to 1048576 [ 300.362174][T12279] : renamed from vxcan1 (while UP) [ 301.389473][T12319] __nla_validate_parse: 5 callbacks suppressed [ 301.389494][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 301.489337][T12324] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 301.489337][T12324] Please contact the netfilter-devel mailing list or update your nftables rules. [ 301.508094][T12321] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 301.521512][T12321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1781'. [ 301.524887][T12326] netlink: 'syz.4.1784': attribute type 3 has an invalid length. [ 301.793433][T12339] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1787'. [ 302.234639][T12365] vlan2: entered promiscuous mode [ 302.255249][T12365] bridge0: entered promiscuous mode [ 302.332263][T12371] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 302.973892][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 303.081919][T12406] C: renamed from lo [ 303.101993][T12406] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 303.285723][T12410] sctp: [Deprecated]: syz.0.1805 (pid 12410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.285723][T12410] Use struct sctp_sack_info instead [ 303.488789][T12408] openvswitch: netlink: IP tunnel TTL not specified. [ 303.832316][T12428] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1812'. [ 304.000197][T12427] bond2: entered promiscuous mode [ 304.033086][T12427] bond2: entered allmulticast mode [ 304.046976][T12427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.418813][T12453] syzkaller0: entered promiscuous mode [ 304.454932][T12453] syzkaller0: entered allmulticast mode [ 305.557797][T12484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1828'. [ 306.085210][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 306.229562][T12503] validate_nla: 1 callbacks suppressed [ 306.229584][T12503] netlink: 'syz.3.1833': attribute type 1 has an invalid length. [ 306.382293][T12517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1837'. [ 306.484249][T12517] netlink: 'syz.1.1837': attribute type 2 has an invalid length. [ 306.502733][T12517] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1837'. [ 306.716883][T12527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1841'. [ 306.733672][T12532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'. [ 306.746652][T12532] IPv6: NLM_F_CREATE should be specified when creating new route [ 306.772766][T12532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.778840][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1845'. [ 306.780362][T12532] IPv6: NLM_F_CREATE should be set when creating new route [ 306.796655][T12532] IPv6: NLM_F_CREATE should be set when creating new route [ 306.996419][T12541] netlink: 'syz.2.1846': attribute type 9 has an invalid length. [ 307.046746][T12537] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 307.068833][T12537] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 307.090563][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 307.130354][T12549] netlink: 'syz.4.1849': attribute type 1 has an invalid length. [ 307.483633][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 307.503764][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 307.523832][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 307.547067][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 307.566245][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1856'. [ 308.230701][T12605] openvswitch: netlink: IP tunnel dst address not specified [ 308.834708][T12633] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 309.042557][T12635] syzkaller0: entered promiscuous mode [ 309.066951][T12635] syzkaller0: entered allmulticast mode [ 310.018918][T12648] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 310.061169][T12648] bond4 (unregistering): Released all slaves [ 310.168288][T12688] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 310.813920][T12726] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 310.859531][T12727] batadv_slave_0: entered promiscuous mode [ 311.181419][T12722] batadv_slave_0: left promiscuous mode [ 311.510183][T12762] netlink: 'syz.0.1904': attribute type 2 has an invalid length. [ 311.757636][T12774] __nla_validate_parse: 72 callbacks suppressed [ 311.757659][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 312.146754][T12790] vlan0: entered promiscuous mode [ 312.163227][T12790] vlan0: entered allmulticast mode [ 312.191489][T12790] veth0_vlan: entered allmulticast mode [ 312.211005][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1912'. [ 312.236143][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1912'. [ 312.258786][T12790] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1910'. [ 312.294991][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1910'. [ 312.383459][T12790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1910'. [ 312.629734][T12810] can: request_module (can-proto-4) failed. [ 312.707986][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 312.782073][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 313.283853][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 313.642103][T12869] syzkaller0: entered promiscuous mode [ 313.661278][T12869] syzkaller0: entered allmulticast mode [ 313.860920][T12888] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 313.882750][T12888] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1927'. [ 315.705204][T12951] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 315.769375][T12952] netlink: 'syz.3.1943': attribute type 10 has an invalid length. [ 315.857598][T12951] bond0: (slave netdevsim0): Releasing backup interface [ 315.899846][T12951] batman_adv: batadv0: Adding interface: netdevsim0 [ 315.932086][T12951] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.985052][T12951] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 316.679531][T12988] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 316.800386][T12991] __nla_validate_parse: 36 callbacks suppressed [ 316.800407][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 316.903078][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 316.972966][T12988] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 317.003059][T12988] bond6 (unregistering): Released all slaves [ 317.413164][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.520122][T13023] vlan4: entered allmulticast mode [ 317.543448][T13023] bond0: entered allmulticast mode [ 318.045261][T13042] pim6reg: entered allmulticast mode [ 318.268315][T13051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 318.456291][T13060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1969'. [ 318.607796][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 318.991890][T13073] syzkaller0: entered promiscuous mode [ 319.007211][T13073] syzkaller0: entered allmulticast mode [ 319.872571][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1981'. [ 319.897233][T13098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1981'. [ 319.930080][T13101] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 320.384816][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1987'. [ 320.768104][T13139] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1992'. [ 321.015535][T13162] tipc: Enabling not permitted [ 321.031866][T13162] tipc: Enabling of bearer rejected, failed to enable media [ 321.323078][T13174] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2002'. [ 322.991231][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 323.028442][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 323.132300][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 323.558263][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 323.584985][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 323.621459][T13302] atomic_op ffff88807bcc6198 conn xmit_atomic 0000000000000000 [ 323.649618][T13303] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.747163][T13308] netlink: 'syz.2.2042': attribute type 4 has an invalid length. [ 323.778975][T13308] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 323.955303][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 324.047322][T13326] netlink: 'syz.1.2047': attribute type 39 has an invalid length. [ 324.096312][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 324.263981][T13335] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.2051'. [ 324.320544][T13338] x_tables: duplicate underflow at hook 1 [ 324.928332][T13370] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 325.170480][T13382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.206349][T13382] vlan0: entered promiscuous mode [ 325.238133][T13387] syzkaller0: entered promiscuous mode [ 325.244067][T13387] syzkaller0: entered allmulticast mode [ 325.517647][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 325.561639][T13397] veth6: entered allmulticast mode [ 325.572281][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 326.484336][T13448] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 326.498810][T13445] syz.2.2084 (13445) used obsolete PPPIOCDETACH ioctl [ 326.615114][T13453] bond4: (slave gretap1): making interface the new active one [ 326.629786][T13453] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 327.166941][T13482] bridge_slave_1: default FDB implementation only supports local addresses [ 328.004979][T13527] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 328.022156][T13527] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.056277][T13527] gretap2: entered promiscuous mode [ 328.080370][T13527] gretap2: entered allmulticast mode [ 328.347706][T13546] tunl0: Caught tx_queue_len zero misconfig [ 328.370273][T13543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.450572][T13549] __nla_validate_parse: 6 callbacks suppressed [ 328.450596][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 328.663693][T13552] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2119'. [ 328.676503][T13564] veth1_to_bond: entered allmulticast mode [ 328.974891][ T795] IPVS: starting estimator thread 0... [ 328.986916][T13569] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 329.000298][T13579] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 329.097751][T13582] IPVS: using max 25 ests per chain, 60000 per kthread [ 329.234229][T13594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 329.292030][T13587] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 329.298671][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2127'. [ 329.305683][T13587] bond14: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 329.348753][T13587] bond14: (slave vxcan3): making interface the new active one [ 329.366759][T13587] bond14: (slave vxcan3): Enslaving as an active interface with an up link [ 329.380198][T13558] veth1_to_bond: left allmulticast mode [ 329.643138][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 329.768281][T13610] bond6: (slave bond_slave_1): Device is not our slave [ 329.789517][T13610] bond6: option active_slave: invalid value (bond_slave_1) [ 329.809998][T13610] bond6 (unregistering): Released all slaves [ 329.952461][T13625] netlink: 'syz.1.2138': attribute type 2 has an invalid length. [ 329.993394][T13628] netlink: 'syz.1.2138': attribute type 2 has an invalid length. [ 330.189366][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 330.524977][T13655] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.619592][T13659] netlink: 'syz.1.2149': attribute type 10 has an invalid length. [ 330.657330][T13659] team0: Port device dummy0 added [ 330.723288][ T5845] Bluetooth: hci4: link tx timeout [ 330.730722][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 330.748313][ T5834] Bluetooth: hci4: link tx timeout [ 330.762052][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 330.771433][ T5834] Bluetooth: hci4: link tx timeout [ 330.778366][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 331.344127][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 332.015177][T13721] netlink: 'syz.4.2172': attribute type 21 has an invalid length. [ 332.031915][T13721] netlink: 'syz.4.2172': attribute type 22 has an invalid length. [ 332.043957][T13721] netlink: 'syz.4.2172': attribute type 23 has an invalid length. [ 332.053662][T13721] netlink: 'syz.4.2172': attribute type 25 has an invalid length. [ 332.064343][T13721] netlink: 'syz.4.2172': attribute type 26 has an invalid length. [ 332.075126][T13721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2172'. [ 332.178658][T13740] netlink: 'syz.3.2178': attribute type 178 has an invalid length. [ 332.199144][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'. [ 332.772037][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 333.205379][T13782] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 333.232734][T13783] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 333.352161][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 333.619791][T13799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2194'. [ 333.857799][T13812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2197'. [ 333.987927][T13819] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 334.047177][T13813] syz_tun: entered promiscuous mode [ 334.165688][T13824] tc_dump_action: action bad kind [ 334.519925][T13838] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.533454][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 334.578424][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2208'. [ 334.657341][T13846] syzkaller0: entered promiscuous mode [ 334.682734][T13846] syzkaller0: entered allmulticast mode [ 334.795125][T13850] syzkaller0: entered promiscuous mode [ 334.802116][T13850] syzkaller0: entered allmulticast mode [ 335.018631][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'. [ 335.090778][T13862] netlink: 133 bytes leftover after parsing attributes in process `syz.4.2214'. [ 335.156906][T13864] netlink: 'syz.1.2215': attribute type 11 has an invalid length. [ 335.164917][T13864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2215'. [ 335.179511][T13866] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 335.194196][T13861] bond3: entered promiscuous mode [ 335.327912][T13875] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 337.971718][T13900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2221'. [ 338.033530][T13906] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.2225'. [ 338.333513][T13923] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2229'. [ 339.044969][T13967] __nla_validate_parse: 1 callbacks suppressed [ 339.044992][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 339.112101][T13971] netlink: 'syz.0.2247': attribute type 9 has an invalid length. [ 339.627711][T13992] netlink: 'syz.1.2252': attribute type 2 has an invalid length. [ 339.695336][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.876661][T13959] wg1: left promiscuous mode [ 339.881698][T13959] wg1: left allmulticast mode [ 340.045497][T13959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.075035][T13959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.340673][T13959] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 340.407284][T13959] macvlan3: left promiscuous mode [ 340.420492][T13959] macvlan3: left allmulticast mode [ 340.484032][T13959] veth1_vlan: left allmulticast mode [ 340.489813][T13959] macvtap1: left promiscuous mode [ 340.495101][T13959] macvtap1: left allmulticast mode [ 340.580403][T13959] hsr1: left promiscuous mode [ 340.592662][T13959] h: left promiscuous mode [ 340.763472][ T194] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.807522][ T8448] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.836027][ T8448] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.867604][ T8448] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.059745][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 341.158083][T14024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 341.192249][T14018] syzkaller0: entered promiscuous mode [ 341.198278][T14018] syzkaller0: entered allmulticast mode [ 341.759402][T14042] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2267'. [ 343.798470][T14028] netlink: 'syz.2.2261': attribute type 25 has an invalid length. [ 343.806887][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'. [ 343.825154][T14033] pimreg: entered allmulticast mode [ 343.840729][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 343.981603][T14028] netlink: 'syz.2.2261': attribute type 25 has an invalid length. [ 343.994235][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2270'. [ 344.009991][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'. [ 344.076257][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.107088][ T8448] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.141049][ T8448] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.209032][ T8448] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.655357][T14085] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2283'. [ 344.745742][T14091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.864389][T14096] syzkaller0: entered promiscuous mode [ 344.871252][T14096] syzkaller0: entered allmulticast mode [ 345.105717][T14112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'. [ 345.129100][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2291'. [ 345.242550][T14122] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2292'. [ 345.255288][T14121] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 345.285803][T14114] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.556441][T14138] xt_cluster: node mask cannot exceed total number of nodes [ 345.623731][T14134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.645186][T14130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.811488][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'. [ 345.837970][T14156] nbd: couldn't find a device at index 1048580 [ 345.844386][T14154] netlink: 'syz.2.2301': attribute type 5 has an invalid length. [ 345.869056][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2301'. [ 345.888195][T14163] netlink: 'syz.4.2305': attribute type 3 has an invalid length. [ 346.190773][T14175] syzkaller0: entered promiscuous mode [ 346.246609][T14175] syzkaller0: entered allmulticast mode [ 346.278797][T14175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.309485][T14188] x_tables: duplicate underflow at hook 2 [ 346.607582][T14199] openvswitch: netlink: Multiple metadata blocks provided [ 346.846363][T14212] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2319'. [ 347.022157][T14218] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2323'. [ 347.108118][T14224] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 347.374906][T14232] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2326'. [ 347.424916][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 347.472594][T14232] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 347.493416][T14244] netlink: 'syz.4.2328': attribute type 18 has an invalid length. [ 347.512633][T14232] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.532098][T14232] gretap2: entered promiscuous mode [ 347.548404][T14232] gretap2: entered allmulticast mode [ 347.637995][T14244] netlink: 'syz.4.2328': attribute type 18 has an invalid length. [ 347.810047][T14257] bridge6: entered promiscuous mode [ 347.821974][T14257] bridge6: entered allmulticast mode [ 347.840772][T14257] team0: Port device bridge6 added [ 347.909105][T14263] netlink: 'syz.0.2331': attribute type 12 has an invalid length. [ 347.929047][T14263] netlink: 'syz.0.2331': attribute type 29 has an invalid length. [ 347.943804][T14268] netlink: 'syz.4.2335': attribute type 13 has an invalid length. [ 347.953107][T14268] netlink: 'syz.4.2335': attribute type 13 has an invalid length. [ 348.098592][T14278] netlink: 'syz.4.2338': attribute type 28 has an invalid length. [ 348.117978][T14275] netlink: 'syz.1.2337': attribute type 1 has an invalid length. [ 348.272499][T14281] bond9: (slave geneve2): making interface the new active one [ 348.293921][T14281] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 348.303870][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 348.317697][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 348.338302][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 348.407607][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 348.653675][T14303] xt_l2tp: v2 doesn't support IP mode [ 348.691529][T14304] xt_l2tp: v2 doesn't support IP mode [ 349.480931][T14344] erspan0: entered promiscuous mode [ 349.507554][T14344] erspan0: left promiscuous mode [ 349.780639][T14353] __nla_validate_parse: 15 callbacks suppressed [ 349.780683][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 349.799967][T14355] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2359'. [ 349.957904][T14366] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20002 [ 349.988143][T14366] bond0: Error: Cannot enslave bond to itself. [ 350.015066][T14366] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2362'. [ 350.173581][T14379] sctp: [Deprecated]: syz.2.2365 (pid 14379) Use of int in max_burst socket option deprecated. [ 350.173581][T14379] Use struct sctp_assoc_value instead [ 350.316800][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2368'. [ 351.554496][T14453] syzkaller0: entered promiscuous mode [ 351.574932][T14453] syzkaller0: entered allmulticast mode [ 351.793990][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 351.879669][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 352.002585][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 352.014617][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 352.058024][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 352.082324][T14481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 352.517659][T14508] validate_nla: 3 callbacks suppressed [ 352.517679][T14508] netlink: 'syz.3.2398': attribute type 2 has an invalid length. [ 352.553647][T14508] openvswitch: netlink: IP tunnel dst address not specified [ 352.762017][T14515] syzkaller1: entered promiscuous mode [ 352.772446][T14515] syzkaller1: entered allmulticast mode [ 353.069973][T14536] hsr0: entered promiscuous mode [ 353.227866][T14529] "syz.3.2404" (14529) uses obsolete ecb(arc4) skcipher [ 353.308841][T14536] wireguard0: entered promiscuous mode [ 353.325799][T14536] wireguard0: entered allmulticast mode [ 353.803453][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.832225][T14545] batman_adv: batadv0: Interface deactivated: dummy0 [ 353.919906][T14545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 354.077934][T14556] macvlan2: entered promiscuous mode [ 354.115473][T14556] macvlan2: entered allmulticast mode [ 354.148295][T14556] bond10: (slave macvlan2): Opening slave failed [ 354.231248][T14585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.474522][T14576] syzkaller0: entered promiscuous mode [ 354.503445][T14576] syzkaller0: entered allmulticast mode [ 354.534712][T14594] geneve3: entered promiscuous mode [ 354.543937][T14594] geneve3: entered allmulticast mode [ 354.599649][T14596] vlan3: entered promiscuous mode [ 354.617075][T14596] bridge0: entered promiscuous mode [ 354.857036][T14617] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 354.865252][T14617] __nla_validate_parse: 8 callbacks suppressed [ 354.865274][T14617] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2424'. [ 354.892357][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 357.132900][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 357.142770][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 357.241025][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 357.266528][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 357.466674][T14635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2430'. [ 357.543640][T14642] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 357.550754][T14637] syzkaller0: entered promiscuous mode [ 357.564118][T14642] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2433'. [ 357.574066][T14637] syzkaller0: entered allmulticast mode [ 357.590461][T14642] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 357.609591][T14637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.626913][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2433'. [ 357.763880][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 357.879853][T14659] netlink: 'syz.2.2438': attribute type 1 has an invalid length. [ 358.035910][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 358.677115][T14696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.690265][T14706] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 359.103115][T14722] xt_hashlimit: overflow, rate too high: 0 [ 359.250130][T14739] netlink: 'syz.3.2458': attribute type 10 has an invalid length. [ 359.303085][T14742] netlink: 'syz.3.2458': attribute type 10 has an invalid length. [ 359.347995][T14742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2458'. [ 359.402454][T14742] batadv0: entered allmulticast mode [ 359.448415][T14742] bridge0: port 1(batadv0) entered blocking state [ 359.498019][T14742] bridge0: port 1(batadv0) entered disabled state [ 359.502362][T14750] xt_hashlimit: overflow, rate too high: 0 [ 359.523184][T14742] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 359.608085][T14758] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 359.616211][T14758] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 359.624141][T14758] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.2461'. [ 359.714505][T14760] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:0 [ 359.731588][T14747] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 359.773096][T14747] bond5 (unregistering): Released all slaves [ 359.788454][T14762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2465'. [ 359.925429][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'. [ 359.941478][T14769] netlink: 'syz.3.2467': attribute type 9 has an invalid length. [ 360.493946][T14791] syzkaller0: entered promiscuous mode [ 360.512154][T14791] syzkaller0: entered allmulticast mode [ 360.709052][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.802414][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.818988][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.833332][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.879726][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.913117][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.934768][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.977628][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.002354][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.027620][T14816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.216385][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'. [ 361.245185][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'. [ 361.322903][T14848] netlink: 'syz.3.2485': attribute type 9 has an invalid length. [ 361.344431][T14848] C: entered allmulticast mode [ 361.359791][T14848] tunl0: entered allmulticast mode [ 361.380271][T14848] gre0: entered allmulticast mode [ 361.400078][T14848] gretap0: entered allmulticast mode [ 361.421805][T14848] erspan0: entered allmulticast mode [ 361.449450][T14848] ip_vti0: entered allmulticast mode [ 361.470031][T14848] ip6_vti0: entered allmulticast mode [ 361.481385][T14848] sit0: entered allmulticast mode [ 361.502844][T14848] ip6tnl0: entered allmulticast mode [ 361.516838][T14848] ip6gre0: entered allmulticast mode [ 361.530249][T14848] ip6gretap0: entered allmulticast mode [ 361.547879][T14848] bridge0: entered allmulticast mode [ 361.560738][T14848] vcan0: entered allmulticast mode [ 361.572530][T14848] team0: entered allmulticast mode [ 361.584721][T14848] dummy0: left promiscuous mode [ 361.600173][T14848] dummy0: entered allmulticast mode [ 361.619735][T14848] nlmon0: entered allmulticast mode [ 361.625505][T14848] caif0: entered allmulticast mode [ 361.632923][T14848] vxcan0: entered allmulticast mode [ 361.639178][T14848] vxcan1: entered allmulticast mode [ 361.652647][T14848] veth0: entered allmulticast mode [ 361.660324][T14848] veth1: entered allmulticast mode [ 361.666607][T14848] wg0: entered allmulticast mode [ 361.671536][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 361.672007][T14848] wg1: entered allmulticast mode [ 361.686782][T14848] wg2: entered allmulticast mode [ 361.692159][T14848] veth0_to_bridge: entered allmulticast mode [ 361.701474][T14848] bridge_slave_0: entered allmulticast mode [ 361.708066][T14848] veth1_to_bridge: entered allmulticast mode [ 361.717502][T14871] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 361.726314][T14848] bridge_slave_1: entered allmulticast mode [ 361.732830][T14848] veth0_to_bond: entered allmulticast mode [ 361.739496][T14848] bond_slave_0: entered allmulticast mode [ 361.747472][T14848] veth1_to_bond: entered allmulticast mode [ 361.753748][T14848] bond_slave_1: entered allmulticast mode [ 361.771229][T14848] veth1_to_team: entered allmulticast mode [ 361.798300][T14848] team_slave_1: entered allmulticast mode [ 361.816087][T14848] veth0_to_batadv: entered allmulticast mode [ 361.822826][T14848] batadv_slave_0: entered allmulticast mode [ 361.830229][T14848] veth1_to_batadv: entered allmulticast mode [ 361.840750][T14848] batadv_slave_1: entered allmulticast mode [ 361.847471][T14848] xfrm0: entered allmulticast mode [ 361.854309][T14848] veth0_to_hsr: entered allmulticast mode [ 361.861512][T14848] veth1_to_hsr: entered allmulticast mode [ 361.878128][T14848] hsr0: left promiscuous mode [ 361.883621][T14848] veth1_virt_wifi: entered allmulticast mode [ 361.895308][T14848] veth0_virt_wifi: entered allmulticast mode [ 361.907466][T14848] virt_wifi0: entered allmulticast mode [ 361.913858][T14848] veth1_vlan: entered allmulticast mode [ 361.932366][T14848] veth0_vlan: entered allmulticast mode [ 361.941677][T14873] ------------[ cut here ]------------ [ 361.942600][T14848] vlan0: left promiscuous mode [ 361.947852][T14873] page_counter underflow: -512 nr_pages=512 [ 361.947898][T14873] WARNING: mm/page_counter.c:61 at page_counter_uncharge+0xd2/0x150, CPU#1: syz.2.2491/14873 [ 361.947940][T14873] Modules linked in: [ 361.947995][T14873] CPU: 1 UID: 0 PID: 14873 Comm: syz.2.2491 Not tainted syzkaller #0 PREEMPT(full) [ 361.948018][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 361.948031][T14873] RIP: 0010:page_counter_uncharge+0xd8/0x150 [ 361.948059][T14873] Code: f7 e8 dc 8c f8 ff 4d 8b 36 4d 85 f6 74 6e e8 9f bf 8c ff e9 6c ff ff ff e8 95 bf 8c ff 48 8d 3d be 12 ff 0d 4c 89 fe 48 89 da <67> 48 0f b9 3a 4c 89 f7 be 08 00 00 00 e8 46 8f f8 ff 4c 89 f0 48 [ 361.948077][T14873] RSP: 0018:ffffc9001b0674f0 EFLAGS: 00010093 [ 361.948095][T14873] RAX: ffffffff82389e5b RBX: 0000000000000200 RCX: ffff8880872e8000 [ 361.948110][T14873] RDX: 0000000000000200 RSI: fffffffffffffe00 RDI: ffffffff9037b120 [ 361.948125][T14873] RBP: fffffffffffffe00 R08: ffff88807be44387 R09: 1ffff1100f7c8870 [ 361.948150][T14873] R10: dffffc0000000000 R11: ffffed100f7c8871 R12: 0000000000000001 [ 361.948165][T14873] R13: dffffc0000000000 R14: ffff88807be44380 R15: fffffffffffffe00 [ 361.948180][T14873] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 361.948196][T14873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.948210][T14873] CR2: 00007f0df148e286 CR3: 0000000069098000 CR4: 00000000003526f0 [ 361.948240][T14873] Call Trace: [ 361.948250][T14873] [ 361.948263][T14873] __hugetlb_cgroup_uncharge_folio+0x15e/0x510 [ 361.948301][T14873] free_huge_folio+0xaef/0x11e0 [ 361.948342][T14873] folios_put_refs+0x553/0x8d0 [ 361.948377][T14873] ? __pfx_folios_put_refs+0x10/0x10 [ 361.948399][T14873] ? mlock_drain_local+0x79/0x480 [ 361.948419][T14873] ? mlock_drain_local+0x28d/0x480 [ 361.948445][T14873] remove_inode_hugepages+0xf53/0x11a0 [ 361.948468][T14873] ? is_bpf_text_address+0x26/0x2b0 [ 361.948497][T14873] ? is_bpf_text_address+0x292/0x2b0 [ 361.948535][T14873] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 361.948588][T14873] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 361.948619][T14873] ? do_raw_spin_lock+0x12b/0x2f0 [ 361.948654][T14873] hugetlbfs_evict_inode+0xaf/0x230 [ 361.948680][T14873] ? __pfx_hugetlbfs_evict_inode+0x10/0x10 [ 361.948708][T14873] evict+0x61e/0xb10 [ 361.948741][T14873] ? __pfx_evict+0x10/0x10 [ 361.948760][T14873] ? do_raw_spin_unlock+0xf5/0x210 [ 361.948786][T14873] ? _raw_spin_unlock+0x28/0x50 [ 361.948807][T14873] ? iput+0xb25/0xe80 [ 361.948842][T14873] __dentry_kill+0x1a2/0x5e0 [ 361.948867][T14873] ? finish_dput+0xad/0x480 [ 361.948892][T14873] finish_dput+0xc9/0x480 [ 361.948922][T14873] __fput+0x691/0xa60 [ 361.948962][T14873] task_work_run+0x1d9/0x270 [ 361.948988][T14873] ? __pfx_task_work_run+0x10/0x10 [ 361.949011][T14873] ? do_raw_spin_unlock+0xf5/0x210 [ 361.949044][T14873] do_exit+0x70f/0x23c0 [ 361.949070][T14873] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.949098][T14873] ? __pfx_do_exit+0x10/0x10 [ 361.949132][T14873] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.949158][T14873] do_group_exit+0x21b/0x2d0 [ 361.949185][T14873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.949209][T14873] __x64_sys_exit_group+0x3f/0x40 [ 361.949242][T14873] x64_sys_call+0x221a/0x2240 [ 361.949273][T14873] do_syscall_64+0x15f/0xf80 [ 361.949298][T14873] ? trace_irq_disable+0x3b/0x140 [ 361.949323][T14873] ? clear_bhb_loop+0x40/0x90 [ 361.949350][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.949371][T14873] RIP: 0033:0x7efced99c819 [ 361.949391][T14873] Code: Unable to access opcode bytes at 0x7efced99c7ef. [ 361.949402][T14873] RSP: 002b:00007ffca5e27778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 361.949425][T14873] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007efced99c819 [ 361.949440][T14873] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 361.949452][T14873] RBP: 0000000000001cde R08: 00007ffca5e27c17 R09: 000000000000000b [ 361.949467][T14873] R10: 00007efcedc15fa0 R11: 0000000000000246 R12: 0000000000000003 [ 361.949481][T14873] R13: 00007efcedc1627c R14: 00007efcedc16278 R15: 00007efcedc16270 [ 361.949517][T14873] [ 361.949529][T14873] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 361.949543][T14873] CPU: 1 UID: 0 PID: 14873 Comm: syz.2.2491 Not tainted syzkaller #0 PREEMPT(full) [ 361.949566][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 361.949579][T14873] Call Trace: [ 361.949588][T14873] [ 361.949597][T14873] vpanic+0x56c/0xa60 [ 361.949627][T14873] ? __pfx__printk+0x10/0x10 [ 361.949649][T14873] ? __pfx_vpanic+0x10/0x10 [ 361.949676][T14873] ? is_bpf_text_address+0x292/0x2b0 [ 361.949701][T14873] ? is_bpf_text_address+0x26/0x2b0 [ 361.949736][T14873] panic+0xc5/0xd0 [ 361.949764][T14873] ? __pfx_panic+0x10/0x10 [ 361.949812][T14873] __warn+0x315/0x4c0 [ 361.949838][T14873] ? page_counter_uncharge+0xd2/0x150 [ 361.949867][T14873] ? page_counter_uncharge+0xd2/0x150 [ 361.949894][T14873] __report_bug+0x29a/0x540 [ 361.949924][T14873] ? page_counter_uncharge+0xd2/0x150 [ 361.949952][T14873] ? __pfx___report_bug+0x10/0x10 [ 361.949981][T14873] ? __lock_acquire+0x6b5/0x2cf0 [ 361.950013][T14873] report_bug_entry+0x19a/0x290 [ 361.950035][T14873] ? page_counter_uncharge+0xd8/0x150 [ 361.950057][T14873] ? page_counter_uncharge+0xdd/0x150 [ 361.950079][T14873] handle_bug+0xce/0x200 [ 361.950105][T14873] exc_invalid_op+0x1a/0x50 [ 361.950131][T14873] asm_exc_invalid_op+0x1a/0x20 [ 361.950160][T14873] RIP: 0010:page_counter_uncharge+0xd8/0x150 [ 361.950183][T14873] Code: f7 e8 dc 8c f8 ff 4d 8b 36 4d 85 f6 74 6e e8 9f bf 8c ff e9 6c ff ff ff e8 95 bf 8c ff 48 8d 3d be 12 ff 0d 4c 89 fe 48 89 da <67> 48 0f b9 3a 4c 89 f7 be 08 00 00 00 e8 46 8f f8 ff 4c 89 f0 48 [ 361.950200][T14873] RSP: 0018:ffffc9001b0674f0 EFLAGS: 00010093 [ 361.950217][T14873] RAX: ffffffff82389e5b RBX: 0000000000000200 RCX: ffff8880872e8000 [ 361.950238][T14873] RDX: 0000000000000200 RSI: fffffffffffffe00 RDI: ffffffff9037b120 [ 361.950252][T14873] RBP: fffffffffffffe00 R08: ffff88807be44387 R09: 1ffff1100f7c8870 [ 361.950266][T14873] R10: dffffc0000000000 R11: ffffed100f7c8871 R12: 0000000000000001 [ 361.950279][T14873] R13: dffffc0000000000 R14: ffff88807be44380 R15: fffffffffffffe00 [ 361.950301][T14873] ? page_counter_uncharge+0xcb/0x150 [ 361.950336][T14873] __hugetlb_cgroup_uncharge_folio+0x15e/0x510 [ 361.950369][T14873] free_huge_folio+0xaef/0x11e0 [ 361.950407][T14873] folios_put_refs+0x553/0x8d0 [ 361.950440][T14873] ? __pfx_folios_put_refs+0x10/0x10 [ 361.950459][T14873] ? mlock_drain_local+0x79/0x480 [ 361.950477][T14873] ? mlock_drain_local+0x28d/0x480 [ 361.950503][T14873] remove_inode_hugepages+0xf53/0x11a0 [ 361.950524][T14873] ? is_bpf_text_address+0x26/0x2b0 [ 361.950550][T14873] ? is_bpf_text_address+0x292/0x2b0 [ 361.950586][T14873] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 361.950635][T14873] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 361.950663][T14873] ? do_raw_spin_lock+0x12b/0x2f0 [ 361.950694][T14873] hugetlbfs_evict_inode+0xaf/0x230 [ 361.950715][T14873] ? __pfx_hugetlbfs_evict_inode+0x10/0x10 [ 361.950740][T14873] evict+0x61e/0xb10 [ 361.950767][T14873] ? __pfx_evict+0x10/0x10 [ 361.950783][T14873] ? do_raw_spin_unlock+0xf5/0x210 [ 361.950807][T14873] ? _raw_spin_unlock+0x28/0x50 [ 361.950825][T14873] ? iput+0xb25/0xe80 [ 361.950857][T14873] __dentry_kill+0x1a2/0x5e0 [ 361.950879][T14873] ? finish_dput+0xad/0x480 [ 361.950901][T14873] finish_dput+0xc9/0x480 [ 361.950927][T14873] __fput+0x691/0xa60 [ 361.950961][T14873] task_work_run+0x1d9/0x270 [ 361.950985][T14873] ? __pfx_task_work_run+0x10/0x10 [ 361.951006][T14873] ? do_raw_spin_unlock+0xf5/0x210 [ 361.951034][T14873] do_exit+0x70f/0x23c0 [ 361.951057][T14873] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.951081][T14873] ? __pfx_do_exit+0x10/0x10 [ 361.951112][T14873] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.951136][T14873] do_group_exit+0x21b/0x2d0 [ 361.951158][T14873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.951179][T14873] __x64_sys_exit_group+0x3f/0x40 [ 361.951199][T14873] x64_sys_call+0x221a/0x2240 [ 361.951226][T14873] do_syscall_64+0x15f/0xf80 [ 361.951254][T14873] ? trace_irq_disable+0x3b/0x140 [ 361.951274][T14873] ? clear_bhb_loop+0x40/0x90 [ 361.951298][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.951317][T14873] RIP: 0033:0x7efced99c819 [ 361.951333][T14873] Code: Unable to access opcode bytes at 0x7efced99c7ef. [ 361.951343][T14873] RSP: 002b:00007ffca5e27778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 361.951361][T14873] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007efced99c819 [ 361.951374][T14873] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 361.951386][T14873] RBP: 0000000000001cde R08: 00007ffca5e27c17 R09: 000000000000000b [ 361.951398][T14873] R10: 00007efcedc15fa0 R11: 0000000000000246 R12: 0000000000000003 [ 361.951410][T14873] R13: 00007efcedc1627c R14: 00007efcedc16278 R15: 00007efcedc16270 [ 361.951441][T14873] [ 361.954859][T14873] Kernel Offset: disabled