last executing test programs: 1.842926111s ago: executing program 1 (id=3228): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000002140)={@mcast1, @empty, @mcast2, 0x8, 0x6, 0xcb5, 0x500, 0x7fff, 0x1080040}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'netpci0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feff3f720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d0"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYBLOB="e58ef48cf13d23e2f40e7fe2cbf7d3e63d676a3af8549cff8c26007adb8e37e566907be52139588f8bb007a8b7804346bfaa424c8a1758011522313f", @ANYRESDEC=r0, @ANYRESOCT=r6, @ANYRES8=r8], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010000000000060003400000000014000180080001007f00000108000200000000000c001980080001000d000000f06c8a01864843255fbcc641d8148a841ea40a9b9c8b28a030f58d66bd2e829d26d93898b214150bcddc9037c70c8cfac91869f7b3288e2ad1f3479ca267b0634d2c034f70cdbb6f024efc44c1e66a67fb920801c4d6616ba2cb143093036f648f45785fc8257e961b65b380f36cdedea3bf419904cf77c1ad26ae90f1a06aebdd437c7b4547d027b27646593575d34a145abcb7631b43a8"], 0x54}, 0x1, 0x0, 0x0, 0x20000844}, 0x2e2f76ab035b98ee) 1.766432661s ago: executing program 3 (id=3230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01}, 0x810) 1.685685888s ago: executing program 1 (id=3231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) 1.563825335s ago: executing program 0 (id=3233): r0 = socket(0x2a, 0x2, 0xb6be) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.42641076s ago: executing program 0 (id=3235): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x4, 0x8, 0x6, {0xb, 0x2, 0x96, 0x7, 0x96, 0x3}, {0x2, 0x0, 0xa, 0x400, 0x101, 0x5}, 0xffffffc0, 0x5, 0x11c6de5c}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x3, 0x7, 0x9, 0xc1, 0x8f5, 0x945, 0xffff, 0x5, 0x200, 0x1, 0x4, 0x400, 0xebe, 0x47dc, 0x647, 0x3, 0x800, 0x0, 0x10e, 0x8, 0x31, 0xff, 0x1ff, 0x1, 0x10000, 0x1, 0x6, 0x3ff, 0x9, 0x3, 0x0, 0xe, 0x4, 0x200, 0xc0a2, 0x101, 0x6, 0x80000001, 0x80, 0x1ff, 0x4, 0xff, 0x3ff, 0x1, 0x6, 0x10000, 0x200, 0x2, 0xfffffff6, 0x7, 0x7, 0xe06, 0x1ff, 0xfffffff8, 0x20b9, 0x8, 0x6, 0x2, 0x1, 0x7, 0x8001, 0xfffffffe, 0x7, 0xff6e, 0x9, 0x8, 0x5, 0x3, 0x4, 0x853, 0x2, 0xd7, 0x7, 0x42c, 0x5, 0xaf, 0x9, 0x3, 0x10, 0x8000, 0x800, 0x9, 0x9, 0x3, 0x7, 0xfffff3fe, 0x1000, 0x3, 0x9, 0x2, 0xa, 0x0, 0x1, 0x3, 0xfffffffa, 0x10000, 0x8001, 0x1, 0x2, 0x7f, 0x77ec, 0xd7cf, 0x5, 0xf, 0x8, 0x7, 0x2a3c, 0x7, 0x10, 0x30000000, 0x2, 0xc9, 0x8, 0x8000, 0x64f, 0x0, 0x0, 0x7, 0x5b0, 0x108, 0x8000, 0x7, 0xffffffff, 0xfe5e, 0x7, 0x19072059, 0x0, 0x3, 0x2, 0x96, 0x31, 0x9, 0x81, 0x3ff, 0xecc, 0x26, 0xfffffffb, 0x7, 0x0, 0x16, 0x2, 0x4000000, 0x7fff, 0xb, 0x3, 0xcb, 0x81, 0x0, 0x3, 0x0, 0x2, 0x3, 0x4c1, 0x1, 0x7, 0x3, 0x80000001, 0x200, 0x101, 0x8000, 0x7, 0xfffffe01, 0x8, 0xa, 0xfffff659, 0x1ff, 0x8, 0x55a, 0x5, 0x7, 0x7, 0x9, 0x9, 0x7, 0x9, 0x9, 0x5, 0x2, 0x3, 0xffffffff, 0x5, 0x7ff, 0x81, 0x7f, 0x6, 0x8001, 0xca5, 0x1ff, 0x101, 0x8, 0x5, 0x5, 0x3, 0x80000001, 0x10001, 0xffff, 0x315080, 0x6, 0x101, 0x2, 0x9, 0x6, 0x3, 0x0, 0x7, 0x3ff, 0x3, 0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x37, 0x80000001, 0x2428, 0x3, 0x7, 0x1, 0x40, 0xffffffff, 0x6, 0x0, 0x5, 0x4, 0x3a, 0xe515, 0x9, 0x9, 0x0, 0x9, 0x0, 0xa64, 0x400, 0x2d, 0x7ea1, 0x6, 0x9, 0xfffffdfa, 0x800, 0x0, 0x3, 0x0, 0x1ff, 0x4, 0x8, 0x2, 0x1, 0x7ff, 0x7, 0x0, 0x5, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x63, 0x50, 0x7fffffff, 0x40, 0x800, 0x0, 0x8, 0x3d9f, 0x4, 0x2, 0xfffffffa, 0xef3, 0x2, 0x9, 0x0, 0x0, 0x1, 0x212, 0x6f8, 0x4, 0xf1, 0x7, 0x2, 0x7fff, 0x6, 0x400, 0x6, 0x3ff, 0xfffffff8, 0x3, 0x8f, 0x8, 0x1, 0xffff8001, 0x6, 0x10000, 0x4, 0x7, 0x913f, 0xf55, 0x101, 0x3, 0x3, 0x2, 0x0, 0x2, 0x6, 0x7eee, 0xf, 0x200, 0x6, 0x8, 0x7, 0x12, 0x4, 0x8000, 0xfffff800, 0x2, 0x5, 0x23, 0x7, 0x80000000, 0x5, 0x9, 0x7, 0x1, 0x7, 0xb, 0x5, 0x400, 0xf8, 0x1, 0x5b70, 0x6, 0x9, 0x2000400, 0xfffffffa, 0x7, 0x4, 0x1, 0xf, 0x80000000, 0x7fffffff, 0x7, 0x2, 0x7, 0x4, 0xf, 0x7fff, 0x0, 0xfff, 0x6, 0x9, 0xb9f, 0x9, 0x1, 0x887, 0x0, 0x7, 0x7fff, 0x5, 0x2, 0x6, 0x1, 0x1000, 0xfff, 0x7, 0x6, 0x6, 0x6, 0x0, 0x1, 0x83a, 0x8, 0x5, 0x80000001, 0xce4, 0x6, 0x8, 0x7, 0x79, 0x8, 0xf, 0x7ff, 0xffffffff, 0x8, 0xff, 0x1, 0xf3, 0x8f, 0x0, 0x3, 0xfffffff9, 0xfffffffb, 0xd1c4, 0x8, 0x8, 0x800, 0x101, 0x8, 0x5, 0xff, 0x7, 0x2, 0x45, 0x7fffffff, 0x0, 0x2342, 0x0, 0x6, 0x5, 0xfffff801, 0x7ea, 0x8, 0x7, 0x47, 0x2, 0x4ab, 0x3, 0xf54, 0x5, 0x7, 0x400, 0x2af2, 0x8, 0xfffffbff, 0xffff, 0xfffffff1, 0x0, 0x6, 0x0, 0x855f, 0x2, 0x80000001, 0x80000000, 0xf, 0x2, 0x80, 0x39a3, 0x5, 0x8, 0x10001, 0x80000000, 0x2, 0x6, 0x1fe80, 0xfffffff8, 0x800, 0x7, 0x6, 0x6, 0x5, 0x6, 0x2, 0x8, 0xfffffff9, 0x1, 0x5, 0x7, 0x9, 0xed, 0xffffffff, 0x1, 0xffffffff, 0x6, 0xe, 0x401, 0x7fb, 0x4, 0x2, 0xd3, 0xfffff42e, 0x88da, 0xdb4, 0x4, 0x0, 0x8165, 0x2, 0x6, 0xcf57, 0x7, 0x1, 0x7fffffff, 0x167f, 0x8, 0x3, 0xe614, 0x25, 0x582a, 0x7, 0x7, 0x2, 0x8, 0x2, 0x7, 0xfc, 0x84, 0x5, 0xf, 0xffff, 0x2, 0x6, 0x0, 0x2, 0x80, 0x6, 0x0, 0x80000000, 0x1, 0x8, 0x6, 0x9, 0x64d9, 0x7, 0x5359, 0x6]}]}]}}]}, 0x87c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.404835894s ago: executing program 1 (id=3237): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 1.399189838s ago: executing program 3 (id=3238): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r1, 0x80000001, 0x0) vmsplice(r3, 0x0, 0x0, 0x0) 1.28673068s ago: executing program 0 (id=3240): bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48016}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)="8b26480df80dc7e7c351a9be1dca823cabbd1e37737611260a0a5f2f1b2a63d09ee19734d452e8d3d4ceb6a14af0c9959eb805e2f139883bb5370c7b2d29cf1bd3ed64c3905a28a79e0968047558dec7f2670700000000000000b9b2ec6f42aa5bac1324bf8702bfa67ff04d997a947dc282eb2a1742744d10bd7a80a5f8176a6ff05339d77bbe3622d80d40b31e259249bef952abc1472c1af972869dfb9045bd119c6a0b8b97a25b1eeb30f056695b6db68aad36af25862b8d270a56f04b8a2338b5bf9ae8f1d28a86034d38d885f2f89684fda91608e6201a1a", 0xdb}, {&(0x7f0000000340)="727a550f4d4670aeea44c584e6a383fca30637f1864a71caf7bfc6a9dfd9c532565599a5beabd919f767a97c1207f38ca1adcd3944f29956e48daa920b6ecb8f3ce7270c63b948c56d3746e1d28620f07844b70cc8b900a3597dd62c7a527a8e74eda14f793eca001fe892fd16794079270964a479c47e24a0da337e97e30b6f3d13cf06dff7fbcb", 0x88}, {&(0x7f0000001040)="b956d42e913a7ecdba53441e2dfa243d20f81331ec53e9767b67bdd89ea79c01e0a27380823ea3ca9994993d565d74fed1582eef1af5351461054f5aa9cc437fbdf33765f5398cbac404705af4da965988aa163fb200c8b5faf7e08d04f73d538aa08fc097540bb59caaaba0cfe79be8520c40d27f13a6b36e7c3688128f86238c6fb006d134359bd465b305e992f4d3fda04ca9c00f7421c96f1a9dda0ec9c87eccc4e673b899814745acd3abeda0c3731fbc7a298310b6cd5094c8ec9121de8116f63bf4ddcf7b76b9802ff5a6a4cdbc804341cedaf59bc06302c17d27ebd58c61ac52721f8c1bef22b011b50a89016195a0b12755b32fadb271d2460b632bdc3cb4ad8dace8d0ee3d526e0cf1927ccee871fe9162d85f65ee28970601cef2f3c24203fa81f1a17b5e59f761d95cd30d5ccf9d509d11912f5d25f365fefb7d66d6ce87cde2e89d0201e932b93a84a2386fdfa6a8a09439cee8c4f85db381154ad54391d42fc24ba0240f23025107facd0b4588d701c4fc08d682265f060a74", 0x180}, {&(0x7f0000000480)="af1ee5e8d2ae9503859bb07a5b5ec56e4fdbe4e3ce9cc19ec339d4c4b18e5d8e30297db1922c5c6fd207ff8c1f1c8a51a102358ef4b25ea1b1093b012eda3194430dd91bebfdc8f4f6d2beb57550995b6d37d9d9c3cd2f49339d56ee85a2eecb177068841c7da56f0b3edc86fcf5a29875b0c5f5f72c9dae273dbf630e5346765fadaab26257cacd4d36235bf8093f3a968e4c9359b339bdec36791a85208f7b60e92d8046c84bd7b80647ae695abb72fa8128c1f2c9d5bd14073d7a4536beaf5e492b1dca720514edfae5ef40079f566841138b01a469befe0e1b177a42b4", 0xdf}, {&(0x7f0000000d80)="5b29d73deaf63e8cc4b6dd18437e8031e84f7a926101694cfb7d61eec70e23de35379ca82a017ea75de2872602b093ba36a2710d0717291d447b660c92f68739a644a12a1721a1ad42660fafb15defd8eaec61de9516dde78736a5f7307a0d853cb0530947c40b0a3b1780346040f6b238190f1431f3fb0923257270a4b94f7d5af079fbc3f14c3d4850e5f01fd39a9568b83dc8622e0fede9fbf72e2cb0f4e0f14c4f35632c0c06d30f", 0xaa}, {&(0x7f00000000c0)="cab15e5d1f99c7ada3b4a18b9ecdf0e118739d5fe6b0c0f828e05f3e92613909fa71cf20", 0xffffffc4}, {&(0x7f0000000640)="9bd5769078e3", 0x6}], 0x7, 0x0, 0x0, 0x10}}], 0x2, 0x10) 1.232275818s ago: executing program 1 (id=3241): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000002140)={@mcast1, @empty, @mcast2, 0x8, 0x6, 0xcb5, 0x500, 0x7fff, 0x1080040}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'netpci0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feff3f720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d0"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYBLOB="e58ef48cf13d23e2f40e7fe2cbf7d3e63d676a3af8549cff8c26007adb8e37e566907be52139588f8bb007a8b7804346bfaa424c8a1758011522313f", @ANYRESDEC=r0, @ANYRESOCT=r6, @ANYRES8=r8], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010000000000060003400000000014000180080001007f00000108000200000000000c001980080001000d000000f06c8a01864843255fbcc641d8148a841ea40a9b9c8b28a030f58d66bd2e829d26d93898b214150bcddc9037c70c8cfac91869f7b3288e2ad1f3479ca267b0634d2c034f70cdbb6f024efc44c1e66a67fb920801c4d6616ba2cb143093036f648f45785fc8257e961b65b380f36cdedea3bf419904cf77c1ad26ae90f1a06aebdd437c7b4547d027b27646593575d34a145abcb7631b43a8"], 0x54}, 0x1, 0x0, 0x0, 0x20000844}, 0x2e2f76ab035b98ee) 1.066726946s ago: executing program 1 (id=3242): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000000000060004000000000062d41a54dc05a026baab20118c332b6ea2056450d544d8e93d72e5d51e35a8d0fcf7416de7f4c22b6e2ebaf2fcb1ac29568553ae835d1951a8a13be5781a075eb53d5e2429a1d34f7c6d212c2e7a"], 0x24}}, 0x8004) connect$bt_l2cap(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 807.224455ms ago: executing program 1 (id=3246): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x84) 682.48745ms ago: executing program 4 (id=3247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce60, @local}, 0x10) listen(r1, 0x3a5) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f00000003c0)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) listen(r2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000005000100070000000900020073797a00001400078008001300ffffffff0800124000000004050005000a000000050004000000000011000300686173683a6e65742c6e65740000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044001}, 0x20004001) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0x0, 0x20000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf2513000000874be6a091214c715fb54a24878c6774027ecf71e92a977a3d539805fb105bbadcea289c68ede4"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x8001) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000008d269f6600020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003a3050001000000"], 0xc0}}, 0x0) 655.930781ms ago: executing program 2 (id=3248): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/127, 0x7f}], 0x1, &(0x7f0000000280)=""/42, 0x2a}, 0x5}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 626.995997ms ago: executing program 4 (id=3249): socket$netlink(0x10, 0x3, 0x400000000000004) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) unshare(0x60480) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) sendfile(r0, r2, 0x0, 0x40000000000004) 519.372907ms ago: executing program 2 (id=3250): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c80)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0xfff2, 0x9}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x200440d0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x4010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 518.833309ms ago: executing program 0 (id=3251): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0xd}], 0x18, 0x800}, 0x4000010) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x25dfdbff}, 0x24}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000400)=""/186, 0xba}], 0x2, 0x0, 0x0, 0x2000}, 0x38, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0xfffffffffffffe2f) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$isdn(0x22, 0x2, 0x25) close(r5) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$pppl2tp(0x18, 0x1, 0x1) 469.257962ms ago: executing program 4 (id=3252): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005100)=@newtfilter={0xe0, 0x2c, 0xd27, 0x0, 0x3, {0x0, 0x0, 0x0, r1, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xac, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_ACT={0x90, 0x2, [@m_bpf={0x8c, 0xd, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}]}, {0x5f, 0x6, "88a618d6e760602a85a06e3b5d5a44f73180d005fe8271820043c6d3422e5a4284cd169096a6bfeeedba2f4438abb449967dffbe49d731964d29b5f66dca980a5b5c661bbe2554d9d8c30cbc54cd0d55e2e30d238a50eb4a10ed52"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4040}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 448.905788ms ago: executing program 2 (id=3253): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 434.969039ms ago: executing program 3 (id=3254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x22c, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xc2}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 360.309576ms ago: executing program 2 (id=3255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 322.371311ms ago: executing program 3 (id=3256): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 272.938204ms ago: executing program 4 (id=3257): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 265.741566ms ago: executing program 0 (id=3258): pipe(&(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="af665bc9073ce5327d62e00989d56e546728469fa423f5a22098b28236", 0xfffffffffffffe6c}], 0x1, 0x0, 0x178}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 215.22076ms ago: executing program 2 (id=3259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce60, @local}, 0x10) listen(r1, 0x3a5) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f00000003c0)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) listen(r2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000005000100070000000900020073797a00001400078008001300ffffffff0800124000000004050005000a000000050004000000000011000300686173683a6e65742c6e65740000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044001}, 0x20004001) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0x0, 0x20000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf2513000000874be6a091214c715fb54a24878c6774027ecf71e92a977a3d539805fb105bbadcea289c68ede4"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x8001) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000008d269f6600020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003a3050001000000"], 0xc0}}, 0x0) 214.63169ms ago: executing program 3 (id=3260): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff02"], 0xfdef) 125.088245ms ago: executing program 4 (id=3261): socket(0x80000000000000a, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 74.371048ms ago: executing program 0 (id=3262): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f000007000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB], 0x1c}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 39.72893ms ago: executing program 2 (id=3263): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) 796.158µs ago: executing program 4 (id=3264): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40200000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=3265): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket(0x22, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.4.360'. [ 139.299627][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 139.343084][ T7422] netlink: 31 bytes leftover after parsing attributes in process `syz.4.360'. [ 139.352732][ T7422] netlink: 'syz.4.360': attribute type 2 has an invalid length. [ 139.365936][ T7422] netlink: 31 bytes leftover after parsing attributes in process `syz.4.360'. [ 139.525196][ T7427] netlink: 'syz.3.362': attribute type 6 has an invalid length. [ 139.561964][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 139.589690][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 139.607862][ T7432] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 141.729024][ T7496] xt_addrtype: ipv6 does not support BROADCAST matching [ 141.752896][ T7497] netlink: 'syz.4.385': attribute type 39 has an invalid length. [ 142.414844][ T7504] tipc: Started in network mode [ 142.429517][ T7504] tipc: Node identity 827ec3660b86, cluster identity 4711 [ 142.444266][ T7504] tipc: Enabled bearer , priority 0 [ 142.505660][ T7504] syzkaller0: entered promiscuous mode [ 142.511383][ T7504] syzkaller0: entered allmulticast mode [ 142.525053][ T7504] tipc: Resetting bearer [ 142.608761][ T7509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.650095][ T7503] tipc: Resetting bearer [ 142.709006][ T7516] openvswitch: netlink: IP tunnel dst address not specified [ 143.526382][ T46] tipc: Node number set to 2314781542 [ 144.689305][ T7503] tipc: Disabling bearer [ 144.735822][ T7523] __nla_validate_parse: 7 callbacks suppressed [ 144.735843][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 144.873195][ T7536] vlan2: entered promiscuous mode [ 144.991142][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.395'. [ 145.017242][ T7542] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 145.040186][ T7542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.047946][ T7542] IPv6: NLM_F_CREATE should be set when creating new route [ 145.152498][ T7542] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 145.176676][ T7538] bridge2: port 1(veth5) entered blocking state [ 145.191965][ T7538] bridge2: port 1(veth5) entered disabled state [ 145.208364][ T7538] veth5: entered allmulticast mode [ 145.234984][ T7538] veth5: entered promiscuous mode [ 145.263511][ T7548] bridge_slave_1: left allmulticast mode [ 145.286143][ T7548] bridge_slave_1: left promiscuous mode [ 145.299719][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.348315][ T7548] bridge2: port 2(bridge_slave_1) entered blocking state [ 145.355646][ T7548] bridge2: port 2(bridge_slave_1) entered disabled state [ 145.363046][ T7548] bridge_slave_1: entered allmulticast mode [ 145.371409][ T7548] bridge_slave_1: entered promiscuous mode [ 145.563451][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 145.613159][ T7570] lo speed is unknown, defaulting to 1000 [ 145.640597][ T7570] lo speed is unknown, defaulting to 1000 [ 145.668808][ T7570] lo speed is unknown, defaulting to 1000 [ 145.826781][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 145.872670][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'. [ 146.049480][ T7570] infiniband syz0: set active [ 146.054424][ T5886] lo speed is unknown, defaulting to 1000 [ 146.086250][ T7570] infiniband syz0: added lo [ 146.140557][ T7570] RDS/IB: syz0: added [ 146.150888][ T7570] smc: adding ib device syz0 with port count 1 [ 146.157349][ T7570] smc: ib device syz0 port 1 has pnetid [ 146.168411][ T46] lo speed is unknown, defaulting to 1000 [ 146.182486][ T7570] lo speed is unknown, defaulting to 1000 [ 146.203074][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 146.216497][ T7585] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 146.245975][ T7585] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 146.427189][ T7570] lo speed is unknown, defaulting to 1000 [ 146.445468][ T7588] Illegal XDP return value 876272128 on prog (id 237) dev N/A, expect packet loss! [ 146.798042][ T7570] lo speed is unknown, defaulting to 1000 [ 147.315384][ T7570] lo speed is unknown, defaulting to 1000 [ 147.638691][ T7582] lo speed is unknown, defaulting to 1000 [ 147.919384][ T7570] lo speed is unknown, defaulting to 1000 [ 148.332133][ T7611] bridge0: port 2(gretap0) entered blocking state [ 148.362508][ T7611] bridge0: port 2(gretap0) entered disabled state [ 148.377330][ T7611] gretap0: entered allmulticast mode [ 148.385629][ T7611] gretap0: entered promiscuous mode [ 148.432756][ T7611] gretap0: left allmulticast mode [ 148.462399][ T7611] gretap0: left promiscuous mode [ 148.463576][ T46] IPVS: starting estimator thread 0... [ 148.483468][ T7611] bridge0: port 2(gretap0) entered disabled state [ 148.586771][ T7617] IPVS: using max 20 ests per chain, 48000 per kthread [ 148.716735][ T7624] netlink: 68 bytes leftover after parsing attributes in process `syz.0.416'. [ 149.365541][ T7635] lo speed is unknown, defaulting to 1000 [ 149.815236][ T7652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.426'. [ 150.318136][ T7656] bond0 (unregistering): Released all slaves [ 150.324695][ T7680] netlink: 'syz.1.430': attribute type 10 has an invalid length. [ 150.374092][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.393265][ T7670] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 150.827971][ T7694] netlink: 'syz.3.436': attribute type 6 has an invalid length. [ 150.843698][ T7696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.437'. [ 150.860681][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.438'. [ 150.884356][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 150.937056][ T7696] netlink: 31 bytes leftover after parsing attributes in process `syz.2.437'. [ 150.960474][ T7696] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 150.996707][ T7696] netlink: 31 bytes leftover after parsing attributes in process `syz.2.437'. [ 151.537826][ T7718] bond2: entered promiscuous mode [ 151.554383][ T7718] bond2: entered allmulticast mode [ 151.565065][ T7718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.715050][ T7727] netlink: 188 bytes leftover after parsing attributes in process `syz.1.444'. [ 151.790510][ T7727] netlink: 48 bytes leftover after parsing attributes in process `syz.1.444'. [ 151.842063][ T7737] openvswitch: netlink: Message has 8 unknown bytes. [ 151.857305][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 151.888328][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 151.940776][ T7737] netlink: 'syz.3.448': attribute type 12 has an invalid length. [ 152.523558][ T7755] netlink: 'syz.0.454': attribute type 2 has an invalid length. [ 152.800519][ T7766] veth0: entered promiscuous mode [ 152.806832][ T7766] macsec1: entered promiscuous mode [ 152.833757][ T7766] macsec1: entered allmulticast mode [ 152.848025][ T7766] veth0: entered allmulticast mode [ 152.866808][ T7766] veth0: left allmulticast mode [ 152.878589][ T7766] veth0: left promiscuous mode [ 153.507558][ T7805] netlink: 'syz.1.469': attribute type 2 has an invalid length. [ 153.642053][ T7807] netlink: 'syz.2.470': attribute type 6 has an invalid length. [ 153.809753][ T7820] openvswitch: netlink: IP tunnel dst address not specified [ 154.067846][ T7826] bridge_slave_0: left allmulticast mode [ 154.078286][ T7826] bridge_slave_0: left promiscuous mode [ 154.104922][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.159367][ T7826] bridge_slave_1: left allmulticast mode [ 154.196930][ T7826] bridge_slave_1: left promiscuous mode [ 154.202772][ T7826] bridge2: port 2(bridge_slave_1) entered disabled state [ 154.270957][ T7826] bond0: (slave bond_slave_0): Releasing backup interface [ 154.322939][ T7826] bond0: (slave bond_slave_1): Releasing backup interface [ 154.364450][ T7826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.394450][ T7826] bond1: (slave batadv1): Releasing active interface [ 154.405631][ T7826] veth5: left allmulticast mode [ 154.414873][ T7826] veth5: left promiscuous mode [ 154.420287][ T7826] bridge2: port 1(veth5) entered disabled state [ 154.792074][ T7859] netlink: 'syz.3.483': attribute type 2 has an invalid length. [ 154.816231][ T7859] __nla_validate_parse: 17 callbacks suppressed [ 154.816255][ T7859] netlink: 31 bytes leftover after parsing attributes in process `syz.3.483'. [ 155.081662][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 155.109227][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 155.232182][ T7844] syz.4.477 (7844) used greatest stack depth: 18488 bytes left [ 155.704258][ T7897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.492'. [ 155.713524][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.492'. [ 155.724869][ T7897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.492'. [ 155.738068][ T7897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.492'. [ 156.101360][ T7907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.496'. [ 156.122281][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 156.135294][ T7907] netlink: 31 bytes leftover after parsing attributes in process `syz.0.496'. [ 156.144668][ T7907] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 156.616347][ T7930] openvswitch: netlink: Message has 8 unknown bytes. [ 156.664675][ T7930] netlink: 'syz.2.502': attribute type 12 has an invalid length. [ 156.996753][ T7955] netlink: 'syz.2.509': attribute type 2 has an invalid length. [ 157.140281][ T7960] netlink: 'syz.3.511': attribute type 39 has an invalid length. [ 157.273921][ T7969] pim6reg: entered allmulticast mode [ 157.283339][ T7969] pim6reg: left allmulticast mode [ 157.339038][ T7971] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.432505][ T7971] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.599846][ T7971] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.622138][ T7984] netlink: 'syz.2.518': attribute type 39 has an invalid length. [ 157.671598][ T7971] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.834046][ T7997] netlink: 'syz.0.522': attribute type 2 has an invalid length. [ 157.872716][ T7989] netlink: zone id is out of range [ 157.887077][ T7989] netlink: zone id is out of range [ 157.896059][ T7989] netlink: zone id is out of range [ 157.908325][ T7989] netlink: set zone limit has 4 unknown bytes [ 157.917353][ T7985] team0 (unregistering): left promiscuous mode [ 157.974708][ T7989] gtp0: entered promiscuous mode [ 158.042632][ T7971] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.170358][ T7971] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.178503][ T8002] netlink: 'syz.0.526': attribute type 12 has an invalid length. [ 158.220922][ T7971] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.269867][ T8006] netlink: 'syz.3.525': attribute type 39 has an invalid length. [ 158.282878][ T7971] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.347065][ T8011] vlan0: entered promiscuous mode [ 158.364347][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.478829][ T8009] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 158.564928][ T8009] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.663303][ T8009] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 158.693060][ T8009] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 158.788126][ T8033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 158.870166][ T8033] syzkaller1: entered promiscuous mode [ 158.891851][ T8033] syzkaller1: entered allmulticast mode [ 159.296877][ T8009] syz.2.527 (8009) used greatest stack depth: 18296 bytes left [ 159.756962][ T8074] openvswitch: netlink: Message has 8 unknown bytes. [ 160.171378][ T8097] __nla_validate_parse: 23 callbacks suppressed [ 160.171402][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 160.187420][ T8096] netlink: 44 bytes leftover after parsing attributes in process `syz.2.554'. [ 160.229613][ T8096] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 160.249553][ T8096] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 160.406948][ T8102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.556'. [ 160.415885][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 160.445119][ T8102] netlink: 31 bytes leftover after parsing attributes in process `syz.4.556'. [ 160.460708][ T8106] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 160.468298][ T8102] netlink: 31 bytes leftover after parsing attributes in process `syz.4.556'. [ 160.482648][ T8106] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 160.817252][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 160.836435][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 161.043035][ T8132] : renamed from ipvlan1 [ 161.544650][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 162.060725][ T8156] lo speed is unknown, defaulting to 1000 [ 162.910352][ T8182] rdma_rxe: rxe_newlink: failed to add lo [ 162.970076][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 162.996629][ T8185] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 163.694019][ T8199] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 165.435519][ T8250] __nla_validate_parse: 8 callbacks suppressed [ 165.435543][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 165.493099][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 165.663238][ T8255] netlink: 104 bytes leftover after parsing attributes in process `syz.2.609'. [ 165.744824][ T8261] tipc: Started in network mode [ 165.764659][ T8261] tipc: Node identity ac14140f, cluster identity 4711 [ 165.780485][ T8261] tipc: New replicast peer: 255.255.255.255 [ 165.815659][ T8261] tipc: Enabled bearer , priority 10 [ 166.226430][ T8278] validate_nla: 6 callbacks suppressed [ 166.226453][ T8278] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 166.261738][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 166.286982][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 166.707349][ T8301] Â: renamed from pim6reg1 [ 166.729410][ T8301] infiniband syz0: set active [ 166.790349][ T5843] lo speed is unknown, defaulting to 1000 [ 166.933719][ T5843] tipc: Node number set to 2886997007 [ 167.005237][ T8311] syzkaller0: entered promiscuous mode [ 167.024506][ T8311] syzkaller0: entered allmulticast mode [ 167.185565][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 169.634505][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 169.682525][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 170.193157][ T8354] xt_nfacct: accounting object `sy' does not exists [ 170.215927][ T8365] netlink: 68 bytes leftover after parsing attributes in process `syz.0.640'. [ 170.693644][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 170.774727][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 170.787766][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 170.836938][ T8377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.646'. [ 171.193478][ T8393] tipc: Started in network mode [ 171.222122][ T8393] tipc: Node identity ffffffff, cluster identity 4711 [ 171.252746][ T8393] tipc: Node number set to 4294967295 [ 171.619408][ T8399] openvswitch: netlink: Message has 8 unknown bytes. [ 171.687138][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 171.732153][ T8401] infiniband syz0: set active [ 171.870070][ T46] lo speed is unknown, defaulting to 1000 [ 171.990951][ T8415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.655'. [ 172.118280][ T8422] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 172.443566][ T8416] lo speed is unknown, defaulting to 1000 [ 172.513773][ T8440] openvswitch: netlink: Message has 8 unknown bytes. [ 172.550468][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 173.041277][ T8424] lo speed is unknown, defaulting to 1000 [ 173.283613][ T8459] netlink: 68 bytes leftover after parsing attributes in process `syz.2.670'. [ 174.100576][ T8478] rdma_op ffff8880250a49f0 conn xmit_rdma 0000000000000000 [ 174.799332][ T8485] openvswitch: netlink: Message has 8 unknown bytes. [ 174.808227][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'. [ 174.873632][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 175.518886][ T8501] erspan0: entered promiscuous mode [ 175.594419][ T8501] erspan0: left promiscuous mode [ 176.454404][ T8525] __nla_validate_parse: 1 callbacks suppressed [ 176.454429][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 176.538646][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 176.929177][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'. [ 176.976220][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 177.016130][ T8534] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 177.024403][ T8531] netlink: 31 bytes leftover after parsing attributes in process `syz.2.691'. [ 177.066299][ T8531] netlink: 'syz.2.691': attribute type 2 has an invalid length. [ 177.100008][ T8531] netlink: 31 bytes leftover after parsing attributes in process `syz.2.691'. [ 177.117746][ T8534] xt_hashlimit: max too large, truncated to 1048576 [ 177.468936][ T8554] bridge0: entered promiscuous mode [ 177.488621][ T8554] bridge0: entered allmulticast mode [ 177.537390][ T8547] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 177.602732][ T8547] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 177.693148][ T8547] bridge0: port 1(ip6gretap0) entered blocking state [ 177.721931][ T8547] bridge0: port 1(ip6gretap0) entered disabled state [ 177.741829][ T8547] ip6gretap0: entered allmulticast mode [ 177.754644][ T8547] ip6gretap0: entered promiscuous mode [ 177.960950][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 178.121347][ T8576] pimreg: entered allmulticast mode [ 178.390381][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 178.414577][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 178.453476][ T8585] openvswitch: netlink: Message has 8 unknown bytes. [ 178.519744][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 178.555202][ T8585] netlink: 'syz.1.706': attribute type 12 has an invalid length. [ 179.439746][ T8615] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 179.494966][ T8615] hsr0: entered allmulticast mode [ 179.516148][ T8615] hsr_slave_0: entered allmulticast mode [ 179.536573][ T8615] hsr_slave_1: entered allmulticast mode [ 179.843439][ T8624] openvswitch: netlink: Message has 8 unknown bytes. [ 180.094748][ T8629] openvswitch: netlink: Message has 8 unknown bytes. [ 180.193717][ T8629] netlink: 'syz.0.719': attribute type 12 has an invalid length. [ 181.215202][ T8663] bond0: (slave wlan1): Releasing backup interface [ 181.488705][ T8672] __nla_validate_parse: 10 callbacks suppressed [ 181.488736][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 181.546306][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 181.616378][ T8674] openvswitch: netlink: Message has 8 unknown bytes. [ 181.668645][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 181.710877][ T8674] netlink: 'syz.1.732': attribute type 12 has an invalid length. [ 182.235382][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'. [ 184.310096][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 184.333056][ T8731] openvswitch: netlink: Message has 8 unknown bytes. [ 184.350395][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 184.390737][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 184.477724][ T8731] netlink: 'syz.0.746': attribute type 12 has an invalid length. [ 184.614093][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 184.690044][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 185.519920][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 185.900528][ T8779] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 186.550992][ T8796] __nla_validate_parse: 4 callbacks suppressed [ 186.551015][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 186.602099][ T8796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.767'. [ 187.903029][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.773'. [ 188.165421][ T8822] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 188.183696][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 188.200086][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 188.280929][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.778'. [ 188.337910][ T8830] erspan0: entered promiscuous mode [ 188.370371][ T8830] erspan0: left promiscuous mode [ 188.900211][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 189.324628][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.786'. [ 189.598667][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 190.141928][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.790'. [ 190.250417][ T8870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.418741][ T8870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.532719][ T8870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.698033][ T8870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.888240][ T8870] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.072256][ T8870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.141439][ T8872] netlink: 'syz.2.792': attribute type 21 has an invalid length. [ 191.182796][ T8872] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.234829][ T8872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.242170][ T8872] IPv6: NLM_F_CREATE should be set when creating new route [ 191.249504][ T8872] IPv6: NLM_F_CREATE should be set when creating new route [ 191.256809][ T8872] IPv6: NLM_F_CREATE should be set when creating new route [ 191.321045][ T8870] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.352058][ T8870] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.448577][ T8883] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 191.572664][ T8890] __nla_validate_parse: 4 callbacks suppressed [ 191.572686][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 191.668628][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 191.687582][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 191.853896][ T8911] netlink: 'syz.2.802': attribute type 1 has an invalid length. [ 191.951952][ T8911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.038866][ T8917] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 192.116348][ T8923] openvswitch: netlink: Message has 8 unknown bytes. [ 192.138564][ T8923] netlink: 'syz.0.806': attribute type 12 has an invalid length. [ 192.330455][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.3.809'. [ 192.350927][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 192.647121][ T8938] netlink: 52 bytes leftover after parsing attributes in process `syz.0.810'. [ 192.667827][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.810'. [ 192.677820][ T8938] netlink: 52 bytes leftover after parsing attributes in process `syz.0.810'. [ 192.870624][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 192.889014][ T8941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.811'. [ 193.341735][ T8963] openvswitch: netlink: Message has 8 unknown bytes. [ 193.391174][ T8963] netlink: 'syz.2.816': attribute type 12 has an invalid length. [ 193.673352][ T8973] netlink: 'syz.1.820': attribute type 2 has an invalid length. [ 194.165702][ T8994] bond0: entered promiscuous mode [ 194.194592][ T8994] gretap1: entered promiscuous mode [ 194.205304][ T8994] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 194.238785][ T8996] bond0 (unregistering): (slave bond1): Releasing backup interface [ 194.301269][ T8996] bond0 (unregistering): Released all slaves [ 195.269391][ T9003] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 195.534499][ T9015] openvswitch: netlink: Message has 8 unknown bytes. [ 195.581909][ T9015] netlink: 'syz.3.834': attribute type 12 has an invalid length. [ 196.043613][ T9027] netlink: 'syz.4.833': attribute type 10 has an invalid length. [ 196.230529][ T9045] tap0: tun_chr_ioctl cmd 1074025677 [ 196.240027][ T9045] tap0: linktype set to 778 [ 196.454126][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 196.464772][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 196.471768][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 197.002552][ T9072] openvswitch: netlink: Message has 8 unknown bytes. [ 197.081504][ T9072] netlink: 'syz.1.847': attribute type 12 has an invalid length. [ 198.135112][ T9093] __nla_validate_parse: 18 callbacks suppressed [ 198.135136][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 198.511344][ T9102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 198.623451][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 198.638338][ T9109] erspan0: entered promiscuous mode [ 198.645888][ T9109] batman_adv: batadv0: Adding interface: macvlan2 [ 198.653356][ T9109] batman_adv: batadv0: Interface activated: macvlan2 [ 198.849555][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 198.971654][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 199.220837][ T9136] netlink: 'syz.0.867': attribute type 2 has an invalid length. [ 199.381966][ T9140] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 199.461386][ T9140] netlink: 104 bytes leftover after parsing attributes in process `syz.3.870'. [ 200.561294][ T9179] openvswitch: netlink: Message has 8 unknown bytes. [ 200.612937][ T9179] netlink: 'syz.1.881': attribute type 12 has an invalid length. [ 200.727045][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 200.787415][ T9184] netlink: 'syz.3.884': attribute type 11 has an invalid length. [ 200.795459][ T9184] netlink: 224 bytes leftover after parsing attributes in process `syz.3.884'. [ 201.297386][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 201.559194][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 201.576403][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 202.288510][ T9225] openvswitch: netlink: Message has 8 unknown bytes. [ 202.341470][ T9225] netlink: 'syz.3.897': attribute type 12 has an invalid length. [ 202.366918][ T9221] syzkaller1: entered promiscuous mode [ 202.372484][ T9221] syzkaller1: entered allmulticast mode [ 202.541055][ T5886] IPVS: starting estimator thread 0... [ 202.551134][ T9230] netlink: 'syz.0.898': attribute type 39 has an invalid length. [ 202.731597][ T9234] IPVS: using max 21 ests per chain, 50400 per kthread [ 203.092624][ T9248] GUP no longer grows the stack in syz.3.904 (9248): 20006000-2000a000 (20005000) [ 203.117367][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.3.904 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 203.128064][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 203.138175][ T9248] Call Trace: [ 203.141489][ T9248] [ 203.144457][ T9248] dump_stack_lvl+0x241/0x360 [ 203.149216][ T9248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.154477][ T9248] ? __pfx__printk+0x10/0x10 [ 203.159114][ T9248] ? find_vma+0xf9/0x170 [ 203.163428][ T9248] ? vma_is_secretmem+0xd/0x50 [ 203.168230][ T9248] ? check_vma_flags+0x52b/0x5a0 [ 203.173212][ T9248] __get_user_pages+0x4385/0x49e0 [ 203.178269][ T9248] ? 0xffffffffa0000960 [ 203.182469][ T9248] ? __pfx___get_user_pages+0x10/0x10 [ 203.187883][ T9248] __gup_longterm_locked+0x49a/0x17f0 [ 203.193278][ T9248] ? __pfx___might_resched+0x10/0x10 [ 203.198606][ T9248] ? __pfx___gup_longterm_locked+0x10/0x10 [ 203.204434][ T9248] ? down_read+0x82b/0xa40 [ 203.208876][ T9248] ? is_valid_gup_args+0x124/0x200 [ 203.214013][ T9248] pin_user_pages+0x137/0x1f0 [ 203.218731][ T9248] ? __pfx_pin_user_pages+0x10/0x10 [ 203.223962][ T9248] ? trace_kmalloc+0x1f/0xd0 [ 203.228588][ T9248] xdp_umem_create+0x978/0xf30 [ 203.233390][ T9248] xsk_setsockopt+0x732/0x950 [ 203.238100][ T9248] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.243320][ T9248] ? __pfx_lock_acquire+0x10/0x10 [ 203.248361][ T9248] ? aa_sock_opt_perm+0x79/0x120 [ 203.253330][ T9248] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.258556][ T9248] do_sock_setsockopt+0x3af/0x720 [ 203.263606][ T9248] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 203.269179][ T9248] ? __fget_files+0x395/0x410 [ 203.273887][ T9248] ? __fget_files+0x2a/0x410 [ 203.278503][ T9248] __x64_sys_setsockopt+0x1ee/0x280 [ 203.283742][ T9248] do_syscall_64+0xf3/0x230 [ 203.288265][ T9248] ? clear_bhb_loop+0x35/0x90 [ 203.292962][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.298868][ T9248] RIP: 0033:0x7fc41f585d19 [ 203.303295][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.322914][ T9248] RSP: 002b:00007fc4203f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.331360][ T9248] RAX: ffffffffffffffda RBX: 00007fc41f775fa0 RCX: 00007fc41f585d19 [ 203.339336][ T9248] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 203.347309][ T9248] RBP: 00007fc41f601a20 R08: 0000000000000020 R09: 0000000000000000 [ 203.355284][ T9248] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 203.363258][ T9248] R13: 0000000000000000 R14: 00007fc41f775fa0 R15: 00007fff195f6368 [ 203.371253][ T9248] [ 203.843528][ T9264] netlink: 'syz.0.910': attribute type 10 has an invalid length. [ 203.855919][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.864666][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.177896][ T9260] __nla_validate_parse: 5 callbacks suppressed [ 204.177918][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 204.216894][ T9271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.279356][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 204.391922][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.913'. [ 204.406592][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 204.426064][ T9280] netlink: 31 bytes leftover after parsing attributes in process `syz.3.913'. [ 204.439302][ T9280] netlink: 'syz.3.913': attribute type 2 has an invalid length. [ 204.452788][ T9280] netlink: 31 bytes leftover after parsing attributes in process `syz.3.913'. [ 205.389290][ T9307] openvswitch: netlink: Message has 8 unknown bytes. [ 205.542927][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 205.590347][ T9307] netlink: 'syz.0.919': attribute type 12 has an invalid length. [ 206.370688][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 206.468799][ T9336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.932'. [ 206.969210][ T9338] lo speed is unknown, defaulting to 1000 [ 206.986015][ T9351] netlink: 'syz.3.938': attribute type 10 has an invalid length. [ 207.014860][ T9351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.938'. [ 207.045394][ T9351] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 207.072833][ T9354] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 207.549693][ T9371] ipip0: entered promiscuous mode [ 207.618954][ T9373] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 207.657224][ T9373] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 209.094100][ T9436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 209.363430][ T9448] __nla_validate_parse: 11 callbacks suppressed [ 209.363453][ T9448] netlink: 36 bytes leftover after parsing attributes in process `syz.4.969'. [ 209.398272][ T9449] openvswitch: netlink: Message has 8 unknown bytes. [ 209.446644][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 209.459928][ T9452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.970'. [ 209.500060][ T9449] netlink: 'syz.3.966': attribute type 12 has an invalid length. [ 210.124844][ T9472] lo speed is unknown, defaulting to 1000 [ 210.163123][ T9478] netlink: 84 bytes leftover after parsing attributes in process `syz.3.978'. [ 210.338613][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 210.347566][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 210.710679][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.984'. [ 210.858682][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 211.264446][ T9508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.616566][ T9508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.682161][ T9525] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 211.715205][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 211.756724][ T9508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.884540][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 211.940575][ T9508] bond0: (slave netdevsim0): Releasing backup interface [ 211.965405][ T9508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.145730][ T9508] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.185837][ T9508] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.240266][ T9508] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.283454][ T9508] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.380710][ T9544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.545150][ T9575] netlink: 'syz.1.1005': attribute type 21 has an invalid length. [ 213.871178][ T9583] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 214.367741][ T9593] __nla_validate_parse: 9 callbacks suppressed [ 214.367764][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 214.561074][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 214.717606][ T9601] hsr_slave_0: left promiscuous mode [ 214.777209][ T9601] hsr_slave_1: left promiscuous mode [ 214.926302][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 214.949347][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1014'. [ 214.985348][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 215.000344][ T9613] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1014'. [ 215.009927][ T9613] netlink: 'syz.2.1014': attribute type 2 has an invalid length. [ 215.036503][ T9615] openvswitch: netlink: Message has 8 unknown bytes. [ 215.050352][ T9613] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1014'. [ 215.065537][ T9615] netlink: 'syz.1.1015': attribute type 12 has an invalid length. [ 215.429128][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1017'. [ 215.462287][ T9624] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1017'. [ 215.748018][ T9633] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 215.767504][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1019'. [ 217.551549][ T9652] netlink: 'syz.1.1025': attribute type 10 has an invalid length. [ 217.797541][ T9655] netlink: 'syz.0.1026': attribute type 2 has an invalid length. [ 218.050019][ T9663] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 218.195816][ T9668] netlink: 'syz.0.1029': attribute type 39 has an invalid length. [ 218.349484][ T9672] openvswitch: netlink: Message has 8 unknown bytes. [ 218.384516][ T9671] openvswitch: netlink: Message has 8 unknown bytes. [ 218.424285][ T9672] netlink: 'syz.1.1032': attribute type 12 has an invalid length. [ 218.857451][ T9674] netlink: 'syz.4.1031': attribute type 12 has an invalid length. [ 219.203810][ T9682] nbd: must specify a device to reconfigure [ 219.473177][ T9692] sctp: [Deprecated]: syz.3.1038 (pid 9692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.473177][ T9692] Use struct sctp_sack_info instead [ 219.684530][ T9698] __nla_validate_parse: 10 callbacks suppressed [ 219.684554][ T9698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1040'. [ 219.695507][ T9697] tipc: Enabling of bearer rejected, failed to enable media [ 219.714771][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 219.724247][ T9698] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1040'. [ 219.758770][ T9698] netlink: 'syz.2.1040': attribute type 2 has an invalid length. [ 219.778757][ T9698] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1040'. [ 219.789034][ T9701] openvswitch: netlink: Message has 8 unknown bytes. [ 219.832386][ T5886] IPVS: starting estimator thread 0... [ 219.845651][ T9701] netlink: 'syz.0.1041': attribute type 12 has an invalid length. [ 219.926412][ T9705] IPVS: using max 20 ests per chain, 48000 per kthread [ 220.062112][ T9713] openvswitch: netlink: Message has 8 unknown bytes. [ 220.081282][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 220.104425][ T9713] netlink: 'syz.3.1046': attribute type 12 has an invalid length. [ 220.422299][ T9714] lo speed is unknown, defaulting to 1000 [ 220.517477][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 220.531979][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 221.237001][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1054'. [ 221.249770][ T9742] openvswitch: netlink: Message has 8 unknown bytes. [ 221.264077][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 221.286181][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 221.300200][ T9742] netlink: 'syz.2.1055': attribute type 12 has an invalid length. [ 221.316975][ T9739] netlink: 'syz.1.1054': attribute type 2 has an invalid length. [ 222.035790][ T9759] openvswitch: netlink: Message has 8 unknown bytes. [ 222.096685][ T9759] netlink: 'syz.2.1057': attribute type 12 has an invalid length. [ 222.618599][ T9775] SET target dimension over the limit! [ 223.044197][ T9791] netlink: 'syz.0.1066': attribute type 2 has an invalid length. [ 223.308396][ T9800] ipip0: entered promiscuous mode [ 223.613474][ T9809] openvswitch: netlink: Message has 8 unknown bytes. [ 223.725418][ T9809] netlink: 'syz.2.1072': attribute type 12 has an invalid length. [ 224.269376][ T9818] tap0: tun_chr_ioctl cmd 1074025677 [ 224.275020][ T9818] tap0: linktype set to 778 [ 224.386890][ T9822] vlan0: entered promiscuous mode [ 224.726715][ T9835] __nla_validate_parse: 14 callbacks suppressed [ 224.726736][ T9835] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1080'. [ 224.838342][ T9837] openvswitch: netlink: Message has 8 unknown bytes. [ 224.910824][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1081'. [ 225.017869][ T9837] netlink: 'syz.4.1081': attribute type 12 has an invalid length. [ 225.048452][ T9844] openvswitch: netlink: Message has 8 unknown bytes. [ 225.120907][ T9843] netlink: 'syz.1.1083': attribute type 9 has an invalid length. [ 225.136568][ T9844] netlink: 'syz.2.1084': attribute type 12 has an invalid length. [ 225.150490][ T9843] netlink: 'syz.1.1083': attribute type 7 has an invalid length. [ 225.166654][ T9843] netlink: 'syz.1.1083': attribute type 8 has an invalid length. [ 225.345945][ T9849] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 225.395291][ T9849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1085'. [ 225.499831][ T9849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.526169][ T9849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 225.661370][ T9849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.675107][ T9849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 225.706093][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 225.812605][ T9849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.835559][ T9849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 226.020210][ T9849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.042210][ T9849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 226.323811][ T9849] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 226.377376][ T9849] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 226.453178][ T9871] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 226.496703][ T9849] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 226.505140][ T9849] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 226.535602][ T9874] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1093'. [ 226.803394][ T9849] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 226.836376][ T9849] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 226.900435][ T9849] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 226.924238][ T9884] openvswitch: netlink: Message has 8 unknown bytes. [ 226.946512][ T9849] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.040006][ T9882] netlink: 'syz.0.1096': attribute type 12 has an invalid length. [ 227.140156][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'. [ 227.379744][ T9906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1105'. [ 227.398453][ T9904] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1106'. [ 227.399151][ T9906] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1105'. [ 227.462923][ T9909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1107'. [ 227.571554][ T9918] netlink: 'syz.1.1111': attribute type 32 has an invalid length. [ 227.601345][ T9912] syz_tun: left promiscuous mode [ 227.858889][ T9912] ip6erspan0: left promiscuous mode [ 227.893893][ T9912] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 227.905048][ T9912] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 227.921052][ T9912] bridge0: left promiscuous mode [ 227.927740][ T9912] bridge0: left allmulticast mode [ 227.941751][ T9912] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.951820][ T9912] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.963305][ T9912] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.973622][ T9912] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.156968][ T9938] openvswitch: netlink: Message has 8 unknown bytes. [ 228.203883][ T9938] netlink: 'syz.0.1114': attribute type 12 has an invalid length. [ 228.324385][ T9939] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 228.355223][ T9939] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 229.705716][ T9983] openvswitch: netlink: Message has 8 unknown bytes. [ 229.732738][ T9983] netlink: 'syz.4.1128': attribute type 12 has an invalid length. [ 229.854728][ T9991] __nla_validate_parse: 5 callbacks suppressed [ 229.854750][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 230.262830][ T9999] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1131'. [ 230.306868][T10006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1134'. [ 230.336168][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 230.356050][T10006] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1134'. [ 230.386110][T10006] netlink: 'syz.0.1134': attribute type 2 has an invalid length. [ 230.396692][T10006] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1134'. [ 230.552858][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1135'. [ 230.712015][T10011] xt_CT: No such helper "netbios-ns" [ 231.153127][T10028] openvswitch: netlink: Message has 8 unknown bytes. [ 231.173586][T10028] netlink: 'syz.0.1143': attribute type 12 has an invalid length. [ 231.205434][T10031] xt_TCPMSS: Only works on TCP SYN packets [ 231.334475][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 231.501956][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 233.992614][T10104] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 234.023102][T10104] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1164'. [ 234.192646][T10120] set match dimension is over the limit! [ 234.300898][T10120] pim6reg: entered allmulticast mode [ 234.336463][T10120] pim6reg: left allmulticast mode [ 234.408046][T10125] netlink: 'syz.2.1174': attribute type 21 has an invalid length. [ 234.577120][T10135] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 234.683255][T10141] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 234.755671][T10143] openvswitch: netlink: Message has 8 unknown bytes. [ 234.788713][T10143] netlink: 'syz.3.1179': attribute type 12 has an invalid length. [ 234.939854][T10150] __nla_validate_parse: 9 callbacks suppressed [ 234.939875][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 234.989612][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 235.012859][T10154] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1182'. [ 235.511119][T10165] openvswitch: netlink: Message has 8 unknown bytes. [ 235.538570][T10168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1187'. [ 235.595294][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 235.636692][T10165] netlink: 'syz.4.1186': attribute type 12 has an invalid length. [ 235.877537][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 235.922447][T10185] openvswitch: netlink: Message has 8 unknown bytes. [ 235.961466][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 235.987466][T10185] netlink: 'syz.0.1192': attribute type 12 has an invalid length. [ 236.322807][T10197] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1195'. [ 237.202685][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 237.230257][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 238.512507][ T5843] IPVS: starting estimator thread 0... [ 238.539886][T10236] netlink: 'syz.4.1207': attribute type 39 has an invalid length. [ 238.640732][T10238] IPVS: using max 19 ests per chain, 45600 per kthread [ 239.077012][T10244] hsr_slave_0: left promiscuous mode [ 240.065852][T10262] __nla_validate_parse: 10 callbacks suppressed [ 240.065873][T10262] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1217'. [ 240.234892][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 240.744336][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 241.042699][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 241.102226][T10278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1224'. [ 241.115903][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 241.139812][T10278] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1224'. [ 241.167647][T10278] netlink: 'syz.2.1224': attribute type 2 has an invalid length. [ 241.197269][T10278] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1224'. [ 241.310353][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 241.642116][T10298] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1226'. [ 242.467185][T10301] delete_channel: no stack [ 242.862126][T10332] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 242.970298][T10337] bridge2: port 1(bridge_slave_1) entered blocking state [ 242.987206][T10337] bridge2: port 1(bridge_slave_1) entered disabled state [ 243.012466][T10337] bridge_slave_1: entered allmulticast mode [ 243.019969][T10337] bridge_slave_1: entered promiscuous mode [ 243.080165][T10337] netlink: 'syz.4.1235': attribute type 39 has an invalid length. [ 243.737185][T10365] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 244.255634][T10386] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 244.626854][T10395] openvswitch: netlink: Message has 8 unknown bytes. [ 244.776570][T10395] netlink: 'syz.1.1252': attribute type 12 has an invalid length. [ 245.172475][T10419] __nla_validate_parse: 24 callbacks suppressed [ 245.172497][T10419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1259'. [ 245.208488][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 245.212860][T10420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1260'. [ 245.235216][T10419] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1259'. [ 245.253819][T10420] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1260'. [ 245.271093][T10419] netlink: 'syz.4.1259': attribute type 2 has an invalid length. [ 245.281189][T10419] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1259'. [ 245.341815][T10428] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 245.365778][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 245.401450][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 245.958061][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1269'. [ 246.163406][T10456] openvswitch: netlink: Message has 8 unknown bytes. [ 246.241911][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 246.299055][T10456] netlink: 'syz.1.1270': attribute type 12 has an invalid length. [ 246.695396][T10460] tipc: New replicast peer: 255.255.255.255 [ 246.719811][T10460] tipc: Enabled bearer , priority 10 [ 247.131006][T10469] openvswitch: netlink: Message has 8 unknown bytes. [ 247.183942][T10471] netlink: 'syz.4.1275': attribute type 2 has an invalid length. [ 247.252501][T10469] netlink: 'syz.2.1273': attribute type 12 has an invalid length. [ 247.997714][T10490] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 248.279265][T10506] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 248.570461][T10516] openvswitch: netlink: Message has 8 unknown bytes. [ 248.601528][T10516] netlink: 'syz.2.1291': attribute type 12 has an invalid length. [ 248.794749][T10522] openvswitch: netlink: Message has 8 unknown bytes. [ 248.817435][T10522] netlink: 'syz.2.1292': attribute type 12 has an invalid length. [ 249.990320][T10562] netlink: 'syz.2.1301': attribute type 1 has an invalid length. [ 250.082081][T10562] veth0_vlan: entered allmulticast mode [ 250.402096][T10567] __nla_validate_parse: 12 callbacks suppressed [ 250.402121][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 250.453325][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 250.839816][T10575] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1306'. [ 251.657412][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 252.198703][T10602] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 253.629176][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 253.976317][T10617] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1315'. [ 254.264576][T10621] openvswitch: netlink: Message has 8 unknown bytes. [ 254.391051][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 254.458113][T10621] netlink: 'syz.1.1317': attribute type 12 has an invalid length. [ 254.717943][T10627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1319'. [ 254.821754][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1319'. [ 255.047406][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 255.774349][T10655] openvswitch: netlink: Key type 30 is not supported [ 256.094242][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 256.130719][T10663] block nbd0: NBD_DISCONNECT [ 256.144982][T10663] block nbd0: Send disconnect failed -32 [ 256.676156][T10673] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 256.723509][T10675] macsec0: entered promiscuous mode [ 256.805083][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 256.957090][T10681] openvswitch: netlink: Message has 8 unknown bytes. [ 256.989429][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 257.036803][T10681] netlink: 'syz.4.1331': attribute type 12 has an invalid length. [ 257.342541][T10697] infiniband syz0: set down [ 257.562867][T10697] syz_tun: left promiscuous mode [ 257.614291][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 258.011139][T10697] vlan0: left promiscuous mode [ 258.079434][T10697] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.096309][T10697] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.113075][T10697] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.130710][T10697] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.305273][T10697] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.386447][T10697] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.399395][T10697] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.415673][T10697] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 258.604532][T10697] bond0: left promiscuous mode [ 258.637183][T10697] gretap1: left promiscuous mode [ 258.664390][T10697] ipip0: left promiscuous mode [ 258.727824][ T5887] lo speed is unknown, defaulting to 1000 [ 258.733694][ T5887] lo speed is unknown, defaulting to 1000 [ 258.807976][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1337'. [ 259.533817][T10740] delete_channel: no stack [ 259.758961][T10748] netlink: 'syz.0.1344': attribute type 39 has an invalid length. [ 260.314367][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 260.359579][T10761] netlink: 'syz.4.1346': attribute type 12 has an invalid length. [ 260.634875][T10766] syzkaller0: entered promiscuous mode [ 260.674665][T10766] syzkaller0: entered allmulticast mode [ 260.753590][T10766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 260.820050][T10776] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1349'. [ 260.946196][T10777] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1350'. [ 263.292434][T10790] sctp: [Deprecated]: syz.3.1353 (pid 10790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.292434][T10790] Use struct sctp_sack_info instead [ 263.473720][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 263.544337][T10792] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 263.892396][T10816] netlink: 'syz.4.1359': attribute type 39 has an invalid length. [ 264.013600][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 264.231074][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 264.393229][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 264.604066][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 264.637694][T10845] netlink: 'syz.0.1367': attribute type 12 has an invalid length. [ 264.675813][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 264.707331][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 264.787376][T10849] bond2: entered promiscuous mode [ 264.794969][T10849] bond2: entered allmulticast mode [ 264.802012][T10849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.813160][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 264.954625][T10862] netlink: 'syz.1.1373': attribute type 21 has an invalid length. [ 264.969507][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1373'. [ 265.001661][T10865] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 265.033416][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 265.171894][T10871] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 265.486481][T10889] netlink: 'syz.1.1380': attribute type 39 has an invalid length. [ 265.613643][T10897] tipc: Enabled bearer , priority 0 [ 265.667411][T10894] netlink: 'syz.2.1382': attribute type 12 has an invalid length. [ 265.815448][T10884] lo speed is unknown, defaulting to 1000 [ 265.999667][T10908] netlink: 'syz.3.1385': attribute type 4 has an invalid length. [ 266.402254][T10918] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 266.827247][T10924] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 266.882061][T10907] lo speed is unknown, defaulting to 1000 [ 266.931650][T10929] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 267.449729][T10945] netlink: 'syz.2.1395': attribute type 39 has an invalid length. [ 268.435636][T10955] set match dimension is over the limit! [ 268.564401][T10955] pim6reg: entered allmulticast mode [ 268.627320][T10958] __nla_validate_parse: 6 callbacks suppressed [ 268.627342][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'. [ 268.808553][T10955] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.831621][T10955] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.855457][T10955] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.880309][T10955] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.908240][T10966] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1401'. [ 269.306403][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 269.511567][T10985] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1406'. [ 270.092060][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1412'. [ 270.112749][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1412'. [ 270.135822][T11011] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1412'. [ 270.194931][T11011] netlink: 'syz.4.1412': attribute type 2 has an invalid length. [ 270.213314][T11011] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1412'. [ 270.374564][T11018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 270.518140][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1415'. [ 270.598058][T11030] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 270.637697][T11029] openvswitch: netlink: Message has 8 unknown bytes. [ 270.668760][T11029] netlink: 'syz.0.1418': attribute type 12 has an invalid length. [ 270.743779][T11032] netlink: 'syz.3.1420': attribute type 1 has an invalid length. [ 271.699215][T11054] lo speed is unknown, defaulting to 1000 [ 272.395310][T11095] netlink: 'syz.3.1435': attribute type 4 has an invalid length. [ 272.466098][T11098] netlink: 'syz.0.1434': attribute type 4 has an invalid length. [ 272.488870][T11098] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 272.665397][T11054] siw: device registration error -23 [ 272.860233][T11116] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 273.255083][T11131] netlink: 'syz.1.1444': attribute type 8 has an invalid length. [ 273.310076][T11134] ipt_rpfilter: unknown options [ 273.548953][T11120] infiniband syz1: set down [ 273.566129][T11120] infiniband syz1: added syzkaller0 [ 273.744700][T11120] RDS/IB: syz1: added [ 273.803953][T11120] smc: adding ib device syz1 with port count 1 [ 273.823510][T11120] smc: ib device syz1 port 1 has pnetid [ 274.423267][T11169] __nla_validate_parse: 21 callbacks suppressed [ 274.423290][T11169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1453'. [ 274.496245][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1453'. [ 274.522243][T11169] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1453'. [ 274.559788][T11169] netlink: 'syz.3.1453': attribute type 2 has an invalid length. [ 274.562520][T11176] veth0_vlan: left allmulticast mode [ 274.590764][T11169] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1453'. [ 274.869559][T11182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1455'. [ 274.899435][T11182] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1455'. [ 274.966483][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'. [ 275.100477][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 275.125658][T11188] Cannot find add_set index 3 as target [ 275.319891][T11189] rdma_rxe: rxe_newlink: failed to add lo [ 275.320205][ T62] smc: removing ib device syz1 [ 275.395306][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1460'. [ 276.029799][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'. [ 276.478673][T11217] netlink: 'syz.4.1467': attribute type 21 has an invalid length. [ 278.111205][T11260] Bluetooth: MGMT ver 1.23 [ 278.171041][T11260] netlink: zone id is out of range [ 278.204711][T11260] netlink: zone id is out of range [ 278.239633][T11260] netlink: del zone limit has 8 unknown bytes [ 278.314804][T11272] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 278.361260][T11273] openvswitch: netlink: Message has 8 unknown bytes. [ 278.394163][T11273] netlink: 'syz.4.1478': attribute type 12 has an invalid length. [ 278.841859][T11281] pim6reg: entered allmulticast mode [ 278.902998][T11281] pim6reg: left allmulticast mode [ 279.639999][T11294] syzkaller0: entered promiscuous mode [ 279.669720][T11294] syzkaller0: entered allmulticast mode [ 280.397321][T11309] __nla_validate_parse: 5 callbacks suppressed [ 280.397342][T11309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1489'. [ 280.422302][T11309] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1489'. [ 280.471371][T11314] openvswitch: netlink: Message has 8 unknown bytes. [ 280.538799][T11317] netlink: 'syz.2.1491': attribute type 12 has an invalid length. [ 280.616540][T11320] openvswitch: netlink: Message has 8 unknown bytes. [ 282.185836][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 282.227657][T11323] netlink: 'syz.1.1493': attribute type 12 has an invalid length. [ 282.287555][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1495'. [ 282.371476][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 282.382318][T11330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1497'. [ 282.428790][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'. [ 282.441127][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 282.654177][T11345] veth0_to_batadv: entered promiscuous mode [ 282.694678][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 282.779778][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 283.433509][T11381] openvswitch: netlink: Message has 8 unknown bytes. [ 283.462898][T11381] netlink: 'syz.1.1507': attribute type 12 has an invalid length. [ 283.477394][T11383] openvswitch: netlink: Message has 8 unknown bytes. [ 283.582363][T11387] netlink: 'syz.4.1508': attribute type 12 has an invalid length. [ 284.364737][T11386] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 284.479917][T11426] openvswitch: netlink: Message has 8 unknown bytes. [ 284.493987][T11426] netlink: 'syz.2.1521': attribute type 12 has an invalid length. [ 284.749915][T11434] openvswitch: netlink: Message has 8 unknown bytes. [ 284.772261][T11434] netlink: 'syz.1.1524': attribute type 12 has an invalid length. [ 284.829316][T11438] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 285.638217][T11465] __nla_validate_parse: 22 callbacks suppressed [ 285.638238][T11465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 285.835886][T11469] openvswitch: netlink: Message has 8 unknown bytes. [ 285.861316][T11471] openvswitch: netlink: Message has 8 unknown bytes. [ 285.877456][T11469] netlink: 'syz.4.1535': attribute type 12 has an invalid length. [ 285.896974][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 286.017948][T11474] netlink: 'syz.0.1536': attribute type 12 has an invalid length. [ 286.137265][T11467] lo speed is unknown, defaulting to 1000 [ 286.661136][T11499] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1540'. [ 286.956828][T11503] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1542'. [ 286.959945][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 286.978518][T11509] batman_adv: batadv0: Interface deactivated: macvlan2 [ 286.985469][T11509] batman_adv: batadv0: Removing interface: macvlan2 [ 287.002863][T11503] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1542'. [ 287.049990][T11510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1541'. [ 287.235115][T11501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1534'. [ 287.257979][T11499] lo speed is unknown, defaulting to 1000 [ 287.332912][T11521] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 287.545324][T11467] lo speed is unknown, defaulting to 1000 [ 287.551620][T11467] lo speed is unknown, defaulting to 1000 [ 287.561201][T11467] lo speed is unknown, defaulting to 1000 [ 287.580238][T11467] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 287.598733][T11467] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 287.642196][T11467] lo speed is unknown, defaulting to 1000 [ 287.721534][T11467] lo speed is unknown, defaulting to 1000 [ 287.735710][T11467] lo speed is unknown, defaulting to 1000 [ 287.750054][T11467] lo speed is unknown, defaulting to 1000 [ 287.765346][T11467] lo speed is unknown, defaulting to 1000 [ 287.791001][T11467] lo speed is unknown, defaulting to 1000 [ 287.806182][T11467] lo speed is unknown, defaulting to 1000 [ 287.839710][T11526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1545'. [ 288.424910][T11530] pim6reg: entered allmulticast mode [ 288.470565][T11530] pim6reg: left allmulticast mode [ 288.629150][T11545] netlink: 'syz.0.1550': attribute type 13 has an invalid length. [ 288.664302][T11545] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1550'. [ 289.028095][T11552] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 289.615744][T11580] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 289.809940][T11587] tipc: Enabling of bearer rejected, failed to enable media [ 290.367119][T11596] netlink: 'syz.1.1564': attribute type 2 has an invalid length. [ 290.446456][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 290.567883][T11610] netlink: 'syz.2.1566': attribute type 3 has an invalid length. [ 290.625862][T11610] bridge0: port 2(vlan1) entered blocking state [ 290.660442][T11610] bridge0: port 2(vlan1) entered disabled state [ 290.686753][T11610] vlan1: entered allmulticast mode [ 290.745475][T11610] vlan1: left allmulticast mode [ 290.792231][T11612] __nla_validate_parse: 9 callbacks suppressed [ 290.792251][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 290.815195][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'. [ 291.001638][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1574'. [ 291.036202][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1574'. [ 291.045313][T11630] netlink: 'syz.4.1574': attribute type 4 has an invalid length. [ 291.123806][T11638] nr0: entered allmulticast mode [ 291.317300][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'. [ 291.349416][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 291.389423][T11647] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1577'. [ 291.412070][T11647] netlink: 'syz.0.1577': attribute type 2 has an invalid length. [ 291.446991][T11647] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1577'. [ 291.543236][T11665] veth0_to_team: entered promiscuous mode [ 291.571103][T11665] veth0_to_team: entered allmulticast mode [ 291.589583][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 291.698802][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 291.737737][T11675] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 291.791710][ T5845] block nbd0: Receive control failed (result -107) [ 291.837774][T11681] openvswitch: netlink: Message has 8 unknown bytes. [ 291.957678][T11681] netlink: 'syz.2.1588': attribute type 12 has an invalid length. [ 292.223569][T11694] openvswitch: netlink: Message has 8 unknown bytes. [ 292.290813][T11694] netlink: 'syz.3.1591': attribute type 12 has an invalid length. [ 292.542313][T11704] netlink: 'syz.0.1595': attribute type 2 has an invalid length. [ 292.631103][T11708] vlan0: entered promiscuous mode [ 293.040272][T11730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.051481][T11730] netlink: 'syz.0.1603': attribute type 2 has an invalid length. [ 293.155383][T11733] sctp: [Deprecated]: syz.0.1603 (pid 11733) Use of int in max_burst socket option deprecated. [ 293.155383][T11733] Use struct sctp_assoc_value instead [ 293.289220][T11741] openvswitch: netlink: Message has 8 unknown bytes. [ 294.064955][T11770] validate_nla: 2 callbacks suppressed [ 294.064976][T11770] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 294.194459][T11776] openvswitch: netlink: Message has 8 unknown bytes. [ 294.221687][T11776] netlink: 'syz.1.1620': attribute type 12 has an invalid length. [ 295.110730][T11818] netlink: 'syz.2.1628': attribute type 1 has an invalid length. [ 295.886895][T11834] openvswitch: netlink: Message has 8 unknown bytes. [ 295.900999][T11834] netlink: 'syz.1.1633': attribute type 12 has an invalid length. [ 296.115624][T11844] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 296.143718][T11847] __nla_validate_parse: 29 callbacks suppressed [ 296.143739][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 296.274553][T11852] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 296.319378][T11852] netlink: 'syz.2.1638': attribute type 10 has an invalid length. [ 296.487329][T11858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1641'. [ 296.506718][T11858] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1641'. [ 296.552448][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 296.751032][T11871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1643'. [ 296.832642][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 296.949144][T11883] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1646'. [ 297.312298][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1649'. [ 297.493052][T11896] openvswitch: netlink: Message has 8 unknown bytes. [ 297.534831][T11896] netlink: 'syz.2.1650': attribute type 12 has an invalid length. [ 297.568105][T11892] lo speed is unknown, defaulting to 1000 [ 298.050290][T11901] xt_TCPMSS: Only works on TCP SYN packets [ 298.090041][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 298.169949][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 298.914893][T11924] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 300.180398][T11941] xt_l2tp: missing protocol rule (udp|l2tpip) [ 300.260604][T11944] batadv_slave_1: entered promiscuous mode [ 300.277359][T11949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.354793][T11954] SET target dimension over the limit! [ 300.424698][T11949] batadv_slave_1 (unregistering): left promiscuous mode [ 300.436147][T11949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.492882][T11959] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.501431][T11959] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.509930][T11959] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.521217][T11959] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.174595][T11989] netlink: zone id is out of range [ 301.182298][T11989] netlink: zone id is out of range [ 301.194541][T11989] netlink: del zone limit has 8 unknown bytes [ 301.710439][T11998] __nla_validate_parse: 3 callbacks suppressed [ 301.710462][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 301.999306][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1676'. [ 302.076959][T12008] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 304.409640][T12041] lo speed is unknown, defaulting to 1000 [ 305.506118][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 305.547039][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'. [ 305.633088][T12057] lo speed is unknown, defaulting to 1000 [ 305.669094][T12070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1687'. [ 306.529467][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1689'. [ 307.097047][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 307.131564][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 307.162301][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 307.190338][T12089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1691'. [ 307.225399][T12085] ax25_connect(): syz.2.1690 uses autobind, please contact jreuter@yaina.de [ 307.292921][T12095] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 307.313418][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 307.335638][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 307.484761][T12103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1695'. [ 307.525234][T12103] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1695'. [ 307.733349][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 307.954257][T12119] openvswitch: netlink: Message has 8 unknown bytes. [ 307.989481][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 308.022439][T12119] netlink: 'syz.2.1701': attribute type 12 has an invalid length. [ 308.062936][T12120] syzkaller0: entered promiscuous mode [ 308.068680][T12120] syzkaller0: entered allmulticast mode [ 308.082773][T12126] veth0_vlan: entered allmulticast mode [ 310.206250][T12124] lo speed is unknown, defaulting to 1000 [ 310.460355][T12146] netlink: 'syz.4.1708': attribute type 10 has an invalid length. [ 310.494851][T12146] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 310.928664][T12162] netlink: 'syz.4.1715': attribute type 1 has an invalid length. [ 311.640587][T12187] x_tables: duplicate underflow at hook 1 [ 311.801514][T12199] netlink: 'syz.2.1724': attribute type 1 has an invalid length. [ 312.714393][T12228] __nla_validate_parse: 21 callbacks suppressed [ 312.714415][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 312.776647][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1736'. [ 312.787021][T12231] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1736'. [ 312.885422][T12234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1738'. [ 312.900063][T12234] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1738'. [ 313.168792][T12246] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 313.233930][T12214] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 313.502698][T12258] gtp0: left promiscuous mode [ 313.550645][T12258] erspan0: left promiscuous mode [ 313.621027][T12258] bond2: left promiscuous mode [ 313.630965][T12268] delete_channel: no stack [ 313.667186][T12258] bond2: left allmulticast mode [ 313.733529][T12275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1743'. [ 313.786643][T12258] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.818900][T12258] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.839350][T12258] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.870395][T12258] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.997536][T12280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1748'. [ 314.007762][T12280] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1748'. [ 314.445484][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1756'. [ 314.559721][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'. [ 314.693036][T12311] lo speed is unknown, defaulting to 1000 [ 315.090606][T12317] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 315.097961][T12296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 315.116744][T12317] bond3: entered promiscuous mode [ 315.122410][T12317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.193036][T12317] batadv0: entered promiscuous mode [ 315.229795][T12317] batadv0: entered allmulticast mode [ 315.248751][T12317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.270755][T12317] bond3: (slave batadv0): making interface the new active one [ 315.301435][T12317] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 315.504856][T12334] sctp: [Deprecated]: syz.4.1763 (pid 12334) Use of int in max_burst socket option deprecated. [ 315.504856][T12334] Use struct sctp_assoc_value instead [ 315.974578][T12347] ip6tnl1: entered allmulticast mode [ 316.367027][T12370] vlan1: entered promiscuous mode [ 316.372153][T12370] vlan1: entered allmulticast mode [ 316.718567][T12384] ax25_connect(): syz.2.1775 uses autobind, please contact jreuter@yaina.de [ 317.075310][T12384] lo speed is unknown, defaulting to 1000 [ 317.334989][T12407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.342587][T12375] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 317.514501][T12411] netlink: 'syz.0.1783': attribute type 1 has an invalid length. [ 317.861891][T12429] __nla_validate_parse: 15 callbacks suppressed [ 317.861914][T12429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1786'. [ 317.961699][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 318.452494][T12449] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1786'. [ 318.521802][T12449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1786'. [ 318.547224][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'. [ 319.098903][T12480] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 319.118759][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 319.143657][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 319.217749][T12481] ip6gretap0: entered promiscuous mode [ 319.236866][T12481] batadv_slave_0: entered promiscuous mode [ 319.253147][T12481] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 319.268416][T12481] Cannot create hsr debugfs directory [ 319.282876][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 319.346734][T12458] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 319.907859][T12500] netlink: 'syz.0.1802': attribute type 39 has an invalid length. [ 319.976807][T12502] netlink: zone id is out of range [ 319.982109][T12502] netlink: zone id is out of range [ 320.006531][T12502] netlink: del zone limit has 8 unknown bytes [ 320.386681][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 320.654993][T12521] delete_channel: no stack [ 320.860969][T12524] netlink: 'syz.0.1808': attribute type 1 has an invalid length. [ 320.896214][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 321.626421][T12545] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 321.673431][T12525] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 322.050258][T12557] netlink: 'syz.2.1815': attribute type 10 has an invalid length. [ 322.559825][T12570] netlink: 'syz.2.1818': attribute type 39 has an invalid length. [ 322.943874][T12576] __nla_validate_parse: 6 callbacks suppressed [ 322.943896][T12576] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1821'. [ 322.973552][T12474] Set syz1 is full, maxelem 65536 reached [ 323.231660][T12585] openvswitch: netlink: Message has 8 unknown bytes. [ 323.297242][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 323.332122][T12585] netlink: 'syz.4.1823': attribute type 12 has an invalid length. [ 323.511604][T12594] Cannot find set identified by id 0 to match [ 323.596421][T12596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1825'. [ 323.616766][T12596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1825'. [ 323.739838][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1829'. [ 323.928573][T12578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.113286][T12612] ip6gretap0: entered promiscuous mode [ 324.120619][T12612] batadv_slave_0: entered promiscuous mode [ 324.131519][T12612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.139993][T12612] Cannot create hsr debugfs directory [ 324.271165][T12592] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 324.392050][T12624] netlink: 'syz.3.1836': attribute type 39 has an invalid length. [ 324.593887][T12630] openvswitch: netlink: Message has 8 unknown bytes. [ 324.608186][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 324.621521][T12630] netlink: 'syz.1.1838': attribute type 12 has an invalid length. [ 324.803582][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 325.009323][T12647] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1845'. [ 325.312077][T12663] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 325.384537][T12666] netlink: zone id is out of range [ 325.400302][T12666] netlink: zone id is out of range [ 325.405571][T12666] netlink: del zone limit has 8 unknown bytes [ 325.731768][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1853'. [ 325.935144][T12653] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 326.015588][T12683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1856'. [ 326.186977][T12694] netlink: 'syz.2.1859': attribute type 39 has an invalid length. [ 326.320179][T12680] lo speed is unknown, defaulting to 1000 [ 326.710378][T12717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.871471][T12722] netlink: 'syz.4.1864': attribute type 10 has an invalid length. [ 327.090693][T12685] lo speed is unknown, defaulting to 1000 [ 327.431135][T12734] pim6reg: entered allmulticast mode [ 327.445853][T12734] pim6reg: left allmulticast mode [ 327.801283][T12743] xt_SECMARK: invalid mode: 0 [ 328.266565][T12752] vxcan1: entered allmulticast mode [ 328.308276][T12762] netlink: 'syz.2.1876': attribute type 39 has an invalid length. [ 328.554754][T12764] __nla_validate_parse: 5 callbacks suppressed [ 328.554779][T12764] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1877'. [ 328.608349][T12767] openvswitch: netlink: Message has 8 unknown bytes. [ 328.749479][T12771] netlink: 'syz.3.1877': attribute type 12 has an invalid length. [ 330.366629][T12776] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 330.610830][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1883'. [ 330.742475][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 331.143939][T12806] netlink: 'syz.1.1890': attribute type 39 has an invalid length. [ 331.594580][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 331.712151][T12828] ip6t_rpfilter: unknown options [ 331.858594][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 332.002811][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 332.039364][T12847] bridge5: entered promiscuous mode [ 332.044635][T12847] bridge5: entered allmulticast mode [ 332.092139][T12849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.219183][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 332.309630][T12861] Unknown options in mask 1f4 [ 332.507613][T12877] netlink: 'syz.4.1916': attribute type 4 has an invalid length. [ 332.515496][T12877] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1916'. [ 332.645865][T12881] delete_channel: no stack [ 333.323883][T12921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1933'. [ 333.346111][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 333.355135][T12921] netlink: 'syz.3.1933': attribute type 2 has an invalid length. [ 333.378945][T12925] openvswitch: netlink: Message has 8 unknown bytes. [ 333.433326][T12925] netlink: 'syz.0.1935': attribute type 12 has an invalid length. [ 333.747877][T12940] Cannot find set identified by id 0 to match [ 333.849718][T12940] pim6reg: entered allmulticast mode [ 333.918158][T12940] pim6reg: left allmulticast mode [ 333.947957][T12953] __nla_validate_parse: 3 callbacks suppressed [ 333.947979][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 334.071184][T12958] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.099937][T12958] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.114001][T12958] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.149668][T12958] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.553776][T12980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1959'. [ 334.565126][T12980] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1959'. [ 335.217987][T13000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1968'. [ 335.236369][T13000] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1968'. [ 335.253350][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'. [ 335.689180][T13027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1981'. [ 335.702291][T13027] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1981'. [ 335.833523][T13033] openvswitch: netlink: Message has 8 unknown bytes. [ 335.860928][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1983'. [ 335.887364][T13033] netlink: 'syz.3.1983': attribute type 12 has an invalid length. [ 335.909282][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1984'. [ 336.164084][T13053] netlink: 'syz.0.1989': attribute type 21 has an invalid length. [ 336.340804][T13060] netlink: 'syz.3.1993': attribute type 9 has an invalid length. [ 336.354393][T13062] IPVS: length: 108 != 24 [ 336.809108][T13088] netlink: 'syz.1.2003': attribute type 12 has an invalid length. [ 337.039963][T13099] netlink: zone id is out of range [ 337.053616][T13099] netlink: zone id is out of range [ 337.062794][T13099] netlink: zone id is out of range [ 337.071828][T13099] netlink: del zone limit has 4 unknown bytes [ 337.193288][T13109] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 337.275833][T13108] netlink: 'syz.1.2010': attribute type 10 has an invalid length. [ 337.650393][T13122] netlink: 'syz.2.2017': attribute type 12 has an invalid length. [ 338.072114][T13147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.317002][T13154] openvswitch: netlink: Message has 8 unknown bytes. [ 338.348783][T13154] netlink: 'syz.3.2025': attribute type 12 has an invalid length. [ 338.801872][T13168] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 338.911964][T13172] netlink: 'syz.0.2033': attribute type 12 has an invalid length. [ 339.247153][T13185] openvswitch: netlink: Message has 8 unknown bytes. [ 339.281092][T13185] __nla_validate_parse: 6 callbacks suppressed [ 339.281112][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 339.321880][T13184] delete_channel: no stack [ 339.328772][T13185] netlink: 'syz.3.2039': attribute type 12 has an invalid length. [ 339.346598][T13187] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2040'. [ 339.501881][T13198] openvswitch: netlink: Message has 8 unknown bytes. [ 339.522636][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 339.536402][T13198] netlink: 'syz.0.2044': attribute type 12 has an invalid length. [ 339.548065][T13197] ip6gretap0: entered promiscuous mode [ 339.556446][T13197] batadv_slave_0: entered promiscuous mode [ 339.649445][T13205] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2046'. [ 339.845113][T13211] netlink: 'syz.0.2048': attribute type 12 has an invalid length. [ 340.007384][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 340.113132][T13223] delete_channel: no stack [ 340.158727][T13227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2055'. [ 340.168339][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'. [ 340.177492][T13227] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2055'. [ 340.195565][T13227] netlink: 'syz.0.2055': attribute type 2 has an invalid length. [ 340.204336][T13227] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2055'. [ 340.381560][T13234] openvswitch: netlink: Message has 8 unknown bytes. [ 340.411822][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 340.433830][T13234] netlink: 'syz.0.2058': attribute type 12 has an invalid length. [ 340.800547][T13255] netlink: 'syz.2.2065': attribute type 12 has an invalid length. [ 340.912034][T13259] delete_channel: no stack [ 341.368773][T13283] netlink: zone id is out of range [ 341.373967][T13283] netlink: zone id is out of range [ 341.401789][T13283] netlink: del zone limit has 8 unknown bytes [ 341.643316][T13296] delete_channel: no stack [ 342.249057][T13329] openvswitch: netlink: Message has 8 unknown bytes. [ 342.318983][T13336] delete_channel: no stack [ 342.558112][T13349] Cannot find add_set index 0 as target [ 342.695244][T13353] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 343.063955][T13371] delete_channel: no stack [ 343.840049][T13414] delete_channel: no stack [ 343.920052][T13416] openvswitch: netlink: Message has 8 unknown bytes. [ 343.953710][T13416] validate_nla: 6 callbacks suppressed [ 343.953731][T13416] netlink: 'syz.4.2137': attribute type 12 has an invalid length. [ 343.957955][T13421] openvswitch: netlink: Message has 8 unknown bytes. [ 344.064976][T13421] netlink: 'syz.2.2139': attribute type 12 has an invalid length. [ 344.552621][T13441] __nla_validate_parse: 28 callbacks suppressed [ 344.552643][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 344.578038][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 344.706919][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2151'. [ 344.727031][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2152'. [ 344.733796][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'. [ 344.756076][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2151'. [ 344.765826][T13448] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2151'. [ 344.805490][T13448] netlink: 'syz.2.2151': attribute type 2 has an invalid length. [ 344.814323][T13448] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2151'. [ 344.855481][T13456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2154'. [ 344.884100][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 344.941462][T13456] netlink: 'syz.0.2154': attribute type 2 has an invalid length. [ 345.425586][T13482] netlink: 'syz.4.2166': attribute type 2 has an invalid length. [ 345.655337][T13497] delete_channel: no stack [ 345.827805][T13508] xt_recent: Unsupported userspace flags (00000042) [ 346.091981][T13523] netlink: 'syz.1.2185': attribute type 39 has an invalid length. [ 346.365765][T13531] delete_channel: no stack [ 346.732299][T13559] netlink: 'syz.3.2201': attribute type 39 has an invalid length. [ 346.988667][T13572] delete_channel: no stack [ 347.495118][T13594] netlink: 'syz.2.2218': attribute type 2 has an invalid length. [ 347.801916][T13598] delete_channel: no stack [ 348.226393][T13629] netlink: 'syz.0.2231': attribute type 39 has an invalid length. [ 348.393293][T13639] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 348.459743][T13641] delete_channel: no stack [ 349.406161][T13691] validate_nla: 1 callbacks suppressed [ 349.406187][T13691] netlink: 'syz.2.2261': attribute type 6 has an invalid length. [ 349.637065][T13702] netlink: 'syz.2.2263': attribute type 39 has an invalid length. [ 349.970880][T13715] __nla_validate_parse: 20 callbacks suppressed [ 349.970902][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 350.846625][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 350.915286][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 350.928073][T13757] netlink: zone id is out of range [ 350.933353][T13757] netlink: zone id is out of range [ 350.938937][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'. [ 350.948094][T13757] netlink: del zone limit has 8 unknown bytes [ 351.118113][T13767] netlink: 'syz.0.2293': attribute type 39 has an invalid length. [ 352.040084][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 352.161796][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 352.172502][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 352.493167][T13833] openvswitch: netlink: Message has 8 unknown bytes. [ 352.517181][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 352.552900][T13833] netlink: 'syz.3.2318': attribute type 12 has an invalid length. [ 352.735499][T13845] netlink: 'syz.2.2322': attribute type 39 has an invalid length. [ 352.898917][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2326'. [ 353.262387][T13871] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2333'. [ 353.562752][T13879] openvswitch: netlink: Message has 8 unknown bytes. [ 353.605215][T13879] netlink: 'syz.3.2336': attribute type 12 has an invalid length. [ 353.794943][T13889] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 353.960787][T13895] openvswitch: netlink: Message has 8 unknown bytes. [ 353.998946][T13895] netlink: 'syz.0.2343': attribute type 12 has an invalid length. [ 354.189821][T13909] netlink: 'syz.3.2347': attribute type 39 has an invalid length. [ 354.677414][T13936] openvswitch: netlink: Message has 8 unknown bytes. [ 354.693551][T13936] netlink: 'syz.1.2362': attribute type 12 has an invalid length. [ 355.022698][T13948] __nla_validate_parse: 4 callbacks suppressed [ 355.022763][T13948] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2367'. [ 355.043343][T13948] netlink: 'syz.3.2367': attribute type 1 has an invalid length. [ 355.092223][T13952] netlink: zone id is out of range [ 355.101031][T13952] netlink: zone id is out of range [ 355.321591][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 355.336182][T13961] netlink: 'syz.0.2374': attribute type 12 has an invalid length. [ 355.363002][T13962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2373'. [ 355.375320][T13966] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2376'. [ 355.386651][T13962] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2373'. [ 355.591236][T13974] netlink: 'syz.2.2377': attribute type 39 has an invalid length. [ 355.808233][T13982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2383'. [ 355.823403][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'. [ 355.834318][T13982] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2383'. [ 355.848168][T13982] netlink: 'syz.3.2383': attribute type 2 has an invalid length. [ 355.860568][T13982] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2383'. [ 356.253079][T14004] tipc: Enabling of bearer rejected, failed to enable media [ 356.370204][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 356.544799][T14016] netlink: 'syz.4.2398': attribute type 2 has an invalid length. [ 356.710582][T14025] net_ratelimit: 5 callbacks suppressed [ 356.710604][T14025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.849676][T13992] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 356.887014][T14034] openvswitch: netlink: Message has 8 unknown bytes. [ 356.939429][T14034] netlink: 'syz.4.2407': attribute type 12 has an invalid length. [ 357.167483][T14046] netlink: 'syz.0.2411': attribute type 2 has an invalid length. [ 358.057922][T14093] openvswitch: netlink: Message has 8 unknown bytes. [ 358.073880][T14093] netlink: 'syz.2.2433': attribute type 12 has an invalid length. [ 358.170226][T14060] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 358.794559][T14120] openvswitch: netlink: Message has 8 unknown bytes. [ 358.812334][T14120] netlink: 'syz.2.2442': attribute type 12 has an invalid length. [ 358.953297][T14127] netlink: zone id is out of range [ 358.962710][T14127] netlink: zone id is out of range [ 358.969150][T14127] netlink: del zone limit has 8 unknown bytes [ 359.692253][T14159] openvswitch: netlink: Message has 8 unknown bytes. [ 359.708263][T14159] validate_nla: 1 callbacks suppressed [ 359.708283][T14159] netlink: 'syz.4.2456': attribute type 12 has an invalid length. [ 360.283976][T14174] __nla_validate_parse: 23 callbacks suppressed [ 360.283999][T14174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2461'. [ 360.306516][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 360.321614][T14174] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2461'. [ 360.345038][T14180] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2464'. [ 360.347981][T14174] netlink: 'syz.3.2461': attribute type 2 has an invalid length. [ 360.378776][T14174] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2461'. [ 360.457810][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 360.749073][T14198] netlink: zone id is out of range [ 360.764212][T14198] netlink: zone id is out of range [ 360.835704][T14204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2471'. [ 360.850622][T14204] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2471'. [ 361.062556][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 361.346356][T14223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2478'. [ 361.355430][T14223] netlink: 'syz.0.2478': attribute type 2 has an invalid length. [ 362.398560][T14267] netlink: 'syz.2.2492': attribute type 2 has an invalid length. [ 362.745679][T14275] tipc: Enabling of bearer rejected, failed to enable media [ 363.965047][T14311] net_ratelimit: 2 callbacks suppressed [ 363.965072][T14311] netlink: zone id is out of range [ 363.993621][T14311] netlink: zone id is out of range [ 364.009281][T14311] netlink: del zone limit has 8 unknown bytes [ 364.870922][T14334] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 365.922583][T14371] __nla_validate_parse: 11 callbacks suppressed [ 365.922604][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2532'. [ 366.009316][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2531'. [ 366.031556][T14375] openvswitch: netlink: Message has 8 unknown bytes. [ 366.065448][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2533'. [ 366.099202][T14375] netlink: 'syz.3.2533': attribute type 12 has an invalid length. [ 366.487171][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2541'. [ 366.819995][T14412] openvswitch: netlink: Message has 8 unknown bytes. [ 366.852918][T14412] netlink: 'syz.3.2547': attribute type 12 has an invalid length. [ 367.206410][T14432] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2555'. [ 367.587263][T14448] delete_channel: no stack [ 367.753357][T14461] netlink: 'syz.4.2564': attribute type 3 has an invalid length. [ 367.772402][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 367.838688][T14464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2567'. [ 367.864133][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2567'. [ 367.897633][T14464] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2567'. [ 367.917844][T14464] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 367.932209][T14464] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2567'. [ 368.460742][T14500] nicvf0: tun_chr_ioctl cmd 1074025676 [ 368.469176][T14500] nicvf0: owner set to 0 [ 368.581740][T14503] netlink: 'syz.1.2585': attribute type 2 has an invalid length. [ 368.617095][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 369.244140][T14547] netlink: 'syz.3.2599': attribute type 2 has an invalid length. [ 369.372547][T14555] netlink: 'syz.1.2602': attribute type 16 has an invalid length. [ 369.384909][T14555] netlink: 'syz.1.2602': attribute type 2 has an invalid length. [ 369.456818][T14561] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 369.762678][T14577] netlink: zone id is out of range [ 369.768332][T14577] netlink: zone id is out of range [ 369.773599][T14577] netlink: del zone limit has 8 unknown bytes [ 370.603257][T14614] netlink: zone id is out of range [ 370.608896][T14614] netlink: zone id is out of range [ 370.614063][T14614] netlink: del zone limit has 8 unknown bytes [ 370.667251][T14615] netlink: zone id is out of range [ 370.692197][T14615] netlink: zone id is out of range [ 370.706056][T14615] netlink: del zone limit has 8 unknown bytes [ 370.877442][T14627] netlink: 'syz.0.2630': attribute type 2 has an invalid length. [ 370.949931][T14631] __nla_validate_parse: 24 callbacks suppressed [ 370.949954][T14631] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2632'. [ 370.986833][T14631] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 371.484029][T14660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2645'. [ 371.493541][T14660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2645'. [ 371.502896][T14660] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2645'. [ 371.520719][T14660] netlink: 'syz.2.2645': attribute type 2 has an invalid length. [ 371.532342][T14660] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2645'. [ 371.963485][T14685] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 372.111016][T14694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2660'. [ 372.123223][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 372.133164][T14694] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2660'. [ 372.143318][T14694] netlink: 'syz.0.2660': attribute type 2 has an invalid length. [ 372.166770][T14694] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2660'. [ 372.260770][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 372.877798][T14732] tun0: tun_chr_ioctl cmd 1074025677 [ 372.883464][T14732] tun0: linktype set to 512 [ 373.990792][T14778] netem: change failed [ 375.461902][T14834] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 375.854089][T14841] net_ratelimit: 16 callbacks suppressed [ 375.854111][T14841] netlink: zone id is out of range [ 375.867020][T14841] netlink: zone id is out of range [ 375.872374][T14841] netlink: del zone limit has 8 unknown bytes [ 375.967354][T14842] __nla_validate_parse: 6 callbacks suppressed [ 375.967420][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 376.256295][T14854] netlink: 'syz.2.2718': attribute type 11 has an invalid length. [ 377.012989][T14749] Set syz1 is full, maxelem 65536 reached [ 377.484844][T14899] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2738'. [ 377.640743][T14911] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 377.781700][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 378.015455][T14933] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2750'. [ 378.187455][T14939] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2752'. [ 379.054967][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 379.070138][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 379.155231][T14980] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2766'. [ 379.343874][ T58] hid-generic 0005:10CF:0008.0002: item fetching failed at offset 0/1 [ 379.361631][ T58] hid-generic 0005:10CF:0008.0002: probe with driver hid-generic failed with error -22 [ 379.690731][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 379.711031][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 380.152651][T15030] tap0: tun_chr_ioctl cmd 1074025681 [ 381.063210][T15072] __nla_validate_parse: 3 callbacks suppressed [ 381.063234][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'. [ 381.322145][T15083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2806'. [ 381.332931][T15083] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2806'. [ 381.529829][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2808'. [ 381.851273][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 382.528174][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 382.548287][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 382.579254][T15150] netlink: 'syz.3.2829': attribute type 16 has an invalid length. [ 382.598765][T15150] netlink: 'syz.3.2829': attribute type 3 has an invalid length. [ 382.616212][T15150] netlink: 'syz.3.2829': attribute type 1 has an invalid length. [ 382.633319][T15150] netlink: 64022 bytes leftover after parsing attributes in process `syz.3.2829'. [ 382.995878][T15170] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 383.096823][T15177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2839'. [ 383.113402][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2839'. [ 383.136735][T15177] netlink: 'syz.3.2839': attribute type 2 has an invalid length. [ 384.767090][T15241] netlink: 'syz.2.2862': attribute type 3 has an invalid length. [ 384.778605][T15241] netlink: 'syz.2.2862': attribute type 3 has an invalid length. [ 385.863845][T15262] netlink: 'syz.3.2870': attribute type 12 has an invalid length. [ 385.874025][T15266] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 386.285060][T15284] netlink: zone id is out of range [ 386.290429][T15284] netlink: zone id is out of range [ 386.295571][T15284] netlink: del zone limit has 8 unknown bytes [ 387.034548][T15297] lo speed is unknown, defaulting to 1000 [ 387.264584][T15309] __nla_validate_parse: 11 callbacks suppressed [ 387.264606][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2887'. [ 387.430606][T15315] syz.3.2888[15315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.430726][T15315] syz.3.2888[15315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.479906][T15315] syz.3.2888[15315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.631159][T15321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2891'. [ 387.660845][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2891'. [ 387.670524][T15321] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2891'. [ 387.680121][T15321] netlink: 'syz.0.2891': attribute type 2 has an invalid length. [ 387.688218][T15321] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2891'. [ 387.737721][T15326] syzkaller1: entered promiscuous mode [ 387.743266][T15326] syzkaller1: entered allmulticast mode [ 387.854002][T15297] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.338764][T15344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2901'. [ 388.746561][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 388.797065][T15358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2904'. [ 388.817789][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2904'. [ 388.833363][T15358] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2904'. [ 388.844835][T15358] netlink: 'syz.3.2904': attribute type 2 has an invalid length. [ 388.982527][T15357] netlink: 'syz.0.2905': attribute type 12 has an invalid length. [ 390.116378][T15374] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 390.728235][T15388] netlink: zone id is out of range [ 390.733424][T15388] netlink: zone id is out of range [ 390.738899][T15388] netlink: del zone limit has 8 unknown bytes [ 391.664433][T15428] tipc: Enabled bearer , priority 10 [ 392.175747][T15453] syzkaller1: entered promiscuous mode [ 392.182221][T15453] syzkaller1: entered allmulticast mode [ 392.408745][T15469] __nla_validate_parse: 7 callbacks suppressed [ 392.408769][T15469] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2950'. [ 392.522535][T15477] xt_hashlimit: max too large, truncated to 1048576 [ 392.539477][T15477] No such timeout policy "syz1" [ 392.664799][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 393.059697][T15504] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2964'. [ 393.205609][T15512] ip6gre1: entered promiscuous mode [ 393.213011][T15512] ip6gre1: entered allmulticast mode [ 393.395669][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'. [ 393.613127][T15526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2975'. [ 393.744025][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 393.760834][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 394.191842][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2987'. [ 394.329825][T15569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2990'. [ 394.507906][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2992'. [ 394.619851][T15581] netlink: 'syz.1.2998': attribute type 12 has an invalid length. [ 395.362712][T15622] netlink: 'syz.1.3012': attribute type 12 has an invalid length. [ 395.989697][T15647] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 396.244530][T15658] netlink: 'syz.2.3026': attribute type 12 has an invalid length. [ 396.716415][T15684] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 396.862361][T15695] netlink: 'syz.3.3038': attribute type 1 has an invalid length. [ 397.539624][T15735] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 397.680949][T15739] __nla_validate_parse: 11 callbacks suppressed [ 397.680973][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3051'. [ 397.915469][T15749] netlink: 'syz.4.3056': attribute type 1 has an invalid length. [ 397.931696][T15752] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3058'. [ 397.933983][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3056'. [ 398.389173][T15773] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 398.630859][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 398.659142][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 399.095896][T15793] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 399.103834][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3072'. [ 399.699213][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 399.709328][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 399.948865][T15829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3086'. [ 399.958672][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 400.105665][T15839] netlink: 'syz.1.3087': attribute type 1 has an invalid length. [ 400.377158][T15842] delete_channel: no stack [ 400.683099][T15862] sctp: [Deprecated]: syz.1.3095 (pid 15862) Use of int in max_burst socket option deprecated. [ 400.683099][T15862] Use struct sctp_assoc_value instead [ 401.120801][T15873] netlink: zone id is out of range [ 401.137239][T15873] netlink: zone id is out of range [ 401.160572][T15873] netlink: del zone limit has 8 unknown bytes [ 401.664321][T15880] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 401.669984][T15747] Set syz1 is full, maxelem 65536 reached [ 401.893598][T15893] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 402.520644][T15923] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 402.800605][T15935] netlink: del zone limit has 4 unknown bytes [ 403.030997][T15943] bond0: (slave macvlan4): Opening slave failed [ 403.292852][T15955] netlink: 'syz.1.3131': attribute type 1 has an invalid length. [ 403.302093][T15955] __nla_validate_parse: 9 callbacks suppressed [ 403.302112][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3131'. [ 403.579553][T15966] netlink: del zone limit has 4 unknown bytes [ 403.599743][T15969] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 403.841084][T15982] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3142'. [ 404.106846][T15995] netlink: 'syz.4.3148': attribute type 1 has an invalid length. [ 404.114638][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3148'. [ 404.264172][T15999] netlink: del zone limit has 4 unknown bytes [ 404.508211][T16014] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3154'. [ 404.720256][T16022] batadv0: entered promiscuous mode [ 404.729453][T16022] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 404.740261][T16022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.748467][T16022] Cannot create hsr debugfs directory [ 404.755716][T16022] hsr0: Slave B (wlan0) is not up; please bring it up to get a fully working HSR network [ 404.767925][T16026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3156'. [ 404.779381][T16022] hsr0: entered allmulticast mode [ 404.784586][T16026] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3156'. [ 404.794264][T16022] batadv0: entered allmulticast mode [ 404.800000][T16022] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 404.999258][T16033] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 405.007565][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3162'. [ 405.023774][T16031] delete_channel: no stack [ 405.297551][T16036] dccp_v6_rcv: dropped packet with invalid checksum [ 405.331198][T16038] netlink: zone id is out of range [ 405.340814][T16038] netlink: del zone limit has 4 unknown bytes [ 405.873994][T16050] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3169'. [ 406.115234][T16061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3171'. [ 406.137188][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3171'. [ 406.490260][T16067] delete_channel: no stack [ 406.530105][T16068] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 406.656770][T16065] netlink: 'syz.0.3174': attribute type 12 has an invalid length. [ 406.800126][T16029] Set syz1 is full, maxelem 65536 reached [ 406.869293][T16073] netlink: zone id is out of range [ 406.874486][T16073] netlink: del zone limit has 4 unknown bytes [ 407.603201][T16103] wg1: entered promiscuous mode [ 407.765690][T16106] delete_channel: no stack [ 408.345562][T16125] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 408.354107][T16127] __nla_validate_parse: 13 callbacks suppressed [ 408.354124][T16127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3196'. [ 408.369628][T16127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 408.378704][T16127] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3196'. [ 408.491648][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 408.504565][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'. [ 408.687738][T16136] delete_channel: no stack [ 408.822423][T16144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3204'. [ 408.844792][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3204'. [ 408.849639][T16149] netlink: zone id is out of range [ 408.859230][T16149] netlink: del zone limit has 8 unknown bytes [ 408.881646][T16144] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3204'. [ 408.905144][T16144] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3204'. [ 408.970306][T16152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3208'. [ 409.381254][T16174] netlink: 'syz.4.3215': attribute type 2 has an invalid length. [ 409.505153][T16182] bond0: (slave syz_tun): Releasing backup interface [ 409.557974][T16182] ip6gretap0: left allmulticast mode [ 409.566715][T16182] ip6gretap0: left promiscuous mode [ 409.572107][T16182] bridge0: port 1(ip6gretap0) entered disabled state [ 409.615342][T16182] bond0: (slave bond_slave_1): Releasing backup interface [ 409.625271][T16190] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 409.642225][T16182] bond1: (slave ip6gretap1): Removing an active aggregator [ 409.667141][T16182] bond1: (slave ip6gretap1): Releasing backup interface [ 409.688078][T16182] bond2: (slave bridge1): Releasing active interface [ 409.704178][T16182] bond3: (slave batadv0): Releasing active interface [ 409.748061][T16190] netlink: 'syz.3.3219': attribute type 12 has an invalid length. [ 409.960246][T16201] netlink: zone id is out of range [ 409.965446][T16201] netlink: del zone limit has 8 unknown bytes [ 410.535368][T16227] tipc: Enabling of bearer rejected, failed to enable media [ 410.627406][T16230] tipc: Enabled bearer , priority 0 [ 410.681870][T16237] bond1: entered promiscuous mode [ 410.716562][T16237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.728348][T16237] bond2: entered promiscuous mode [ 410.733830][T16237] bond1: (slave bond2): Enslaving as an active interface with an up link [ 410.743800][T16230] mac80211_hwsim hwsim10 €Â: renamed from syzkaller0 (while UP) [ 410.763883][T16230] tipc: Disabling bearer [ 410.785216][T16242] bond1 (unregistering): (slave bond2): Releasing backup interface [ 410.808274][T16242] bond2: left promiscuous mode [ 410.844884][T16242] bond1 (unregistering): Released all slaves [ 411.560987][T16270] delete_channel: no stack [ 411.971820][T16294] [ 411.974218][T16294] ============================= [ 411.979236][T16294] WARNING: suspicious RCU usage [ 411.984159][T16294] 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 Not tainted [ 411.991613][T16294] ----------------------------- [ 411.996604][T16294] net/ethtool/common.c:873 suspicious rcu_dereference_protected() usage! [ 412.005138][T16294] [ 412.005138][T16294] other info that might help us debug this: [ 412.005138][T16294] [ 412.015570][T16294] [ 412.015570][T16294] rcu_scheduler_active = 2, debug_locks = 1 [ 412.023847][T16294] 1 lock held by syz.2.3263/16294: [ 412.029085][T16294] #0: ffff8880607ce858 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xf0f/0x33b0 [ 412.038935][T16294] [ 412.038935][T16294] stack backtrace: [ 412.044857][T16294] CPU: 0 UID: 0 PID: 16294 Comm: syz.2.3263 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 412.055675][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 412.065769][T16294] Call Trace: [ 412.069061][T16294] [ 412.072003][T16294] dump_stack_lvl+0x241/0x360 [ 412.076708][T16294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.081930][T16294] ? __pfx__printk+0x10/0x10 [ 412.086554][T16294] lockdep_rcu_suspicious+0x226/0x340 [ 412.091955][T16294] __ethtool_get_ts_info+0x97/0x410 [ 412.097191][T16294] ethtool_get_phc_vclocks+0xa1/0x160 [ 412.102588][T16294] ? __pfx_ethtool_get_phc_vclocks+0x10/0x10 [ 412.108589][T16294] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 412.114596][T16294] ? dev_get_by_index+0x23/0x2d0 [ 412.119557][T16294] sock_set_timestamping+0x3e2/0xab0 [ 412.124863][T16294] ? __pfx_sock_set_timestamping+0x10/0x10 [ 412.130683][T16294] sk_setsockopt+0x2150/0x33b0 [ 412.135473][T16294] ? __pfx_sk_setsockopt+0x10/0x10 [ 412.140604][T16294] ? __pfx___might_resched+0x10/0x10 [ 412.145908][T16294] ? __lock_acquire+0x1397/0x2100 [ 412.150995][T16294] udp_lib_setsockopt+0x11d/0xc10 [ 412.156053][T16294] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 412.161620][T16294] ? __pfx_aa_sk_perm+0x10/0x10 [ 412.166502][T16294] udpv6_setsockopt+0x73/0xb0 [ 412.171217][T16294] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 412.177476][T16294] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 412.183394][T16294] do_sock_setsockopt+0x3af/0x720 [ 412.188457][T16294] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 412.194019][T16294] ? __fget_files+0x395/0x410 [ 412.198714][T16294] ? __fget_files+0x2a/0x410 [ 412.203329][T16294] __x64_sys_setsockopt+0x1ee/0x280 [ 412.208555][T16294] do_syscall_64+0xf3/0x230 [ 412.213079][T16294] ? clear_bhb_loop+0x35/0x90 [ 412.217783][T16294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.223732][T16294] RIP: 0033:0x7ff4ff185d19 [ 412.228172][T16294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.247794][T16294] RSP: 002b:00007ff4fff07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.256232][T16294] RAX: ffffffffffffffda RBX: 00007ff4ff375fa0 RCX: 00007ff4ff185d19 [ 412.264218][T16294] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000005 [ 412.272198][T16294] RBP: 00007ff4ff201a20 R08: 0000000000000004 R09: 0000000000000000 [ 412.280191][T16294] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 412.288180][T16294] R13: 0000000000000000 R14: 00007ff4ff375fa0 R15: 00007ffda2b55cd8 [ 412.296190][T16294] [ 412.358536][T16299] sch_tbf: burst 4398 is lower than device lo mtu (39798) !