last executing test programs: 2.451928173s ago: executing program 4 (id=11275): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/111, &(0x7f0000000080)=0x6f) socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x2) shutdown(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xc}], 0x4, 0x40012020, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0xd}, {0xa, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c0002801f0001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.160725642s ago: executing program 3 (id=11279): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8) recvmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000280)=""/154, 0x9a}], 0x5, &(0x7f00000003c0)=""/161, 0xa1}, 0x10000) (async) recvmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000280)=""/154, 0x9a}], 0x5, &(0x7f00000003c0)=""/161, 0xa1}, 0x10000) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000004c0), &(0x7f0000000500)=0x4) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000540)=0xff, 0x4) (async) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000540)=0xff, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000005c0)) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000600)) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000680)={@private0}, &(0x7f00000006c0)=0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000680)={@private0, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getqdisc={0x38, 0x26, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0xfff3}, {0x9, 0x7}, {0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x40) connect$pppl2tp(r3, &(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @remote}, 0x2, 0x4, 0x4, 0x1}}, 0x2e) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x8}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000bc0)={0x8, 0x0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x0, 0x2, 0x3, 0x8001, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0xb}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%-5lx \x00'}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000dc0)={0x0, 0x1}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, r1, 0x5, 0x4, 0x2}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x13, 0x12, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r5}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x80, 0x4, 0xb, 0x9, 0x955f}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000a40)='syzkaller\x00', 0x9, 0xf3, &(0x7f0000000a80)=""/243, 0x41100, 0x0, '\x00', r4, @fallback=0xb, r0, 0x8, &(0x7f0000000b80)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x1, &(0x7f0000000e80)=[r7, r8, r9, r10, r11], &(0x7f0000000ec0)=[{0x2, 0x6, 0xc, 0x8}], 0x10, 0x8}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000fc0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001000), &(0x7f0000001040)=0x4) (async) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001000), &(0x7f0000001040)=0x4) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000001080)=""/9, &(0x7f00000010c0)=0x9) (async) getsockopt$packet_buf(r3, 0x107, 0x5, &(0x7f0000001080)=""/9, &(0x7f00000010c0)=0x9) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000001100), &(0x7f0000001140)=0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)={@ifindex=r4, 0xffffffffffffffff, 0x35, 0x1, r7, @void, @value=r12}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)={@ifindex=r4, 0xffffffffffffffff, 0x35, 0x1, r7, @void, @value=r12}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000011c0)={0x1, 0x9, 0x60000, 0x101}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001200)={0x3, 0x8, 0x6, 0x3ff}, 0x8) (async) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001200)={0x3, 0x8, 0x6, 0x3ff}, 0x8) 1.919445699s ago: executing program 3 (id=11283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000000)=0x9c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x9}}]}, 0x58}}, 0x110) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0xf519aab62bc48069, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040841) 1.812584081s ago: executing program 2 (id=11284): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffdba, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x24000050) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r7) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 1.684547212s ago: executing program 1 (id=11287): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r3 = socket(0x11, 0x3, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000180)={'b', ' *:* ', 'rwm\x00'}, 0xa) r5 = socket$alg(0x26, 0x5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7f, '\x00', 0x0, r1, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r6, 0x58, &(0x7f0000000580)}, 0x10) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000004480)="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", 0x7f0, 0x40000, 0x0, 0x0) r8 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe88001e000100000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000200100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a40e000000000000023500000200000000000000000000004c0014007368613100"/244], 0x13c}}, 0x0) write$cgroup_devices(r8, &(0x7f0000000100)={'a', ' *:* ', 'rwm\x00'}, 0xa) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)={0x1ac, r10, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x83, 0x3, "47b1ff5fb3721166c7663e05d85aefd637a701d1233ef1d208d3b2f6a0d43a3e2ff829f6d75516497bb9d37166f5918bf475263a441dd9584e12741d4ad0e2a19e557a5316d9b3a63af5026aa8c2f3f95fce068732349addc90d37de9759ff1560bde2eb3cbc775747718b62feed286da51913d5a7f57e0c035a9ce4f5a586"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "8e0d3cfc50906bd0f0a1bb90c4fd97eed403c9c461dc177441eec738"}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x730e9bb4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff8a}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x580000}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaa}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x82}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4040001}, 0x2008880) 1.55745552s ago: executing program 2 (id=11288): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "80c90800005207b7"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000340)) unshare(0x6020400) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87) r5 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000220) recvmsg$unix(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001540)=""/64, 0x40}, {&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f00000011c0)=""/182, 0xb6}, {&(0x7f0000001280)=""/182, 0xb6}], 0x5, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x10101) syz_emit_ethernet(0x6e, &(0x7f0000001340)={@local, @multicast, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x67, 0x0, 0x0, 0x0, 0x0, 0x4}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) ioctl$sock_netdev_private(r3, 0x89f7, &(0x7f00000001c0)="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") 1.53894374s ago: executing program 4 (id=11289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x15, 0x301, 0x70bd2d, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2c, &(0x7f00000001c0)=0x800, 0x4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r9, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r7, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800b00010062726964676500000c000280050009000600000008000a00", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20044094) 1.368180254s ago: executing program 0 (id=11290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x11, 0x0, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008847"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.212318062s ago: executing program 0 (id=11291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x22, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00'}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x7, @vifc_lcl_addr=@private=0xa010101, @remote}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000100)) epoll_create1(0x0) 1.021705737s ago: executing program 4 (id=11292): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000815000103000a000000f0e88c4d55"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) 946.072859ms ago: executing program 0 (id=11293): socket$nl_route(0x10, 0x3, 0x0) (async) clock_gettime(0x3, &(0x7f0000000540)) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x0, 0x35, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x1109bf22e1799352) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x24, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040850}, 0x20040880) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 945.211776ms ago: executing program 1 (id=11294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x1c, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x2, 0x4, 0x401, 0x6, 0xe4b}, @llc={@llc={0xfe, 0x8e, '\t', "b3de7f"}}}, 0x14) 896.253463ms ago: executing program 3 (id=11295): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c0000000000029087ac1e0001ac14142200009078640101f41ad2416216b3185a72f7ef273d393926a1b96e02c0a9a1f96edc532d12a8c76537919baf863e3e378fc104d1e7fb781a00000000000000"], 0x0) 807.173999ms ago: executing program 0 (id=11296): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/38, 0x26}}], 0x1, 0x12141, 0x0) 797.778935ms ago: executing program 2 (id=11297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) shutdown(r1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r2, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 743.227468ms ago: executing program 4 (id=11298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@getchain={0x64, 0x66, 0x0, 0x0, 0x2000, {}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x1}]}, 0x64}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000010000104000000000001000000000000", @ANYRES32=r6, @ANYBLOB="000100006c300000500012800b000100697036746e6c0000400002801400"], 0x70}}, 0xeb64d656001f6f32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 727.727462ms ago: executing program 3 (id=11299): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 662.229116ms ago: executing program 1 (id=11300): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 564.122657ms ago: executing program 4 (id=11301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4f19a42de84e378f719a8685902cda3efe000000df007110"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x34c}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r4, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) 563.56421ms ago: executing program 0 (id=11302): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000002c0)=0x1, 0x4) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x4) splice(r3, &(0x7f0000000240)=0x9, r2, &(0x7f0000000280)=0xa0df, 0x2, 0x3) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600000000000000000000b672", @ANYRES32=0x0, @ANYBLOB="adffa888000000002400128009000100626f6e64000000001400028008001c008c0400000500010004000000"], 0x44}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x800) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000002c0)=0x1, 0x4) (async) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async) listen(r3, 0x4) (async) splice(r3, &(0x7f0000000240)=0x9, r2, &(0x7f0000000280)=0xa0df, 0x2, 0x3) (async) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close(r3) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600000000000000000000b672", @ANYRES32=0x0, @ANYBLOB="adffa888000000002400128009000100626f6e64000000001400028008001c008c0400000500010004000000"], 0x44}}, 0x0) (async) 535.897311ms ago: executing program 1 (id=11303): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000000)=""/206, &(0x7f0000000440)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x40) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x21, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 527.197441ms ago: executing program 2 (id=11304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x70, 0x1e, 0x399, 0x0, 0x0, {{@in6=@mcast1}, @in6=@local}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x44, 0x12, 0x1, 0x0, 0x0, "", [@generic="c5bab308a905152c2aa7d5c865164e166997c6b595594ebfbeedae9ba806527fbab40f714ad80f00000000000010000000000000"]}, 0x44}], 0x1}, 0xc011) 380.486723ms ago: executing program 3 (id=11305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r3, 0x11}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 325.677351ms ago: executing program 0 (id=11306): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09012bbd7000fbdbdf258100000008000300", @ANYRES32=r5, @ANYBLOB="1800330084000a0008021100000108021100000000f00800ebff0500ffffffffffff00006c5ce40163a2ad3d4d999a212f0c03ddd06a0469bd1c5eba7b8a0b5cd138"], 0x40}, 0x1, 0x0, 0x0, 0x80040c0}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d49108bc436a", 0x20) close(r0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09012bbd7000fbdbdf258100000008000300", @ANYRES32=r5, @ANYBLOB="1800330084000a0008021100000108021100000000f00800ebff0500ffffffffffff00006c5ce40163a2ad3d4d999a212f0c03ddd06a0469bd1c5eba7b8a0b5cd138"], 0x40}, 0x1, 0x0, 0x0, 0x80040c0}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d49108bc436a", 0x20) (async) close(r0) (async) 291.872563ms ago: executing program 1 (id=11307): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) 204.112779ms ago: executing program 2 (id=11308): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) 202.878358ms ago: executing program 4 (id=11309): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x2) listen(r0, 0x0) 164.432487ms ago: executing program 2 (id=11310): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @private2, 0x40}], 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0xfffffffffffffce5, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50) 160.707664ms ago: executing program 3 (id=11311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x1, 0x0) shutdown(r1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r3, 0x1}, 0x14}}, 0x0) accept(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 0s ago: executing program 1 (id=11312): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = epoll_create(0x4) epoll_pwait(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40810) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x4c080) kernel console output (not intermixed with test programs): link: Unknown key attributes 2 [ 752.985830][T32688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.019288][T32688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.044213][T32688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 753.191170][T32688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.211182][T32688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.226264][T32688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 753.459875][T32688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.483417][T32688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.504831][T32688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 753.700925][T27276] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.727468][T27276] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.749666][T27276] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 753.804204][T27276] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.818752][T27276] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.834504][T27276] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 753.951437][T27279] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.960157][T27279] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 753.990208][T27279] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 754.000268][T27279] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.017165][T27279] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 754.026310][T27279] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 754.075829][ T359] netdevsim netdevsim2: Direct firmware load for /. failed with error -2 [ 754.091567][ T359] netdevsim netdevsim2: Falling back to sysfs fallback for: /. [ 754.159903][ T363] bridge_slave_0: left allmulticast mode [ 754.167578][ T363] bridge_slave_0: left promiscuous mode [ 754.188007][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.243276][ T363] bridge_slave_1: left allmulticast mode [ 754.249120][ T363] bridge_slave_1: left promiscuous mode [ 754.261039][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.283566][ T363] bond0: (slave bond_slave_0): Releasing backup interface [ 754.301804][ T363] bond0: (slave bond_slave_1): Releasing backup interface [ 754.320779][ T363] team0: Port device team_slave_0 removed [ 754.331927][ T363] team0: Port device team_slave_1 removed [ 754.338461][ T363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.352242][ T363] bond1: (slave wireguard0): Releasing backup interface [ 754.360041][ T363] wireguard0: left promiscuous mode [ 754.370719][ T363] bond2: (slave geneve2): Releasing backup interface [ 754.390933][ T363] bond3: left promiscuous mode [ 754.405392][ T363] bridge0: port 3(bond3) entered disabled state [ 754.416525][ T363] bond4: (slave veth3): Releasing active interface [ 754.428313][ T363] bond5: (slave bond6): Releasing backup interface [ 754.435275][ T363] bond5: (slave bond6): the permanent HWaddr of slave - fa:d1:e4:c5:27:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 754.453103][ T363] bond5: (slave gretap1): making interface the new active one [ 754.468506][ T382] __nla_validate_parse: 15 callbacks suppressed [ 754.468527][ T382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7620'. [ 754.489752][ T363] bond5: (slave gretap1): Releasing backup interface [ 754.519048][ T369] team0: Mode changed to "broadcast" [ 754.542462][ T373] team0: Device gtp2 is up. Set it down before adding it as a team port [ 754.578524][T27277] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.598801][T27277] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.664188][T27277] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.696925][ T363] syz.0.7617 (363) used greatest stack depth: 16360 bytes left [ 754.712101][T27277] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 754.919345][ T397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7626'. [ 754.935499][ T393] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 754.961892][ T397] nbd: must specify at least one socket [ 755.035780][ T393] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 755.090270][ T405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7625'. [ 755.096916][ T393] gretap1: entered promiscuous mode [ 755.122651][ T393] gretap1: entered allmulticast mode [ 755.162455][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'. [ 755.233766][ T410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7629'. [ 755.320876][ T410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7629'. [ 755.338969][ T416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7631'. [ 755.518297][ T424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7633'. [ 755.785077][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7638'. [ 755.799195][ T442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7639'. [ 755.851054][ T447] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001 [ 756.004403][ T450] netlink: 'syz.3.7642': attribute type 1 has an invalid length. [ 756.350537][ T463] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 756.430047][ T478] xt_socket: unknown flags 0x50 [ 756.517254][ T480] netlink: 'syz.1.7650': attribute type 11 has an invalid length. [ 756.526849][ T480] netlink: 'syz.1.7650': attribute type 11 has an invalid length. [ 756.702689][ T489] netlink: 'syz.1.7653': attribute type 10 has an invalid length. [ 756.736243][ T489] dummy0: entered promiscuous mode [ 756.759505][ T489] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 756.787909][ T492] nftables ruleset with unbound chain [ 756.957283][ T507] netlink: 'syz.0.7658': attribute type 2 has an invalid length. [ 757.142414][ T513] IPVS: length: 8 != 1152 [ 758.008716][ T568] netlink: 'syz.2.7676': attribute type 11 has an invalid length. [ 758.055755][ T569] netlink: 'syz.2.7676': attribute type 1 has an invalid length. [ 758.103805][ T569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.179729][ T575] veth1_virt_wifi: default FDB implementation only supports local addresses [ 758.470731][ T589] netlink: 'syz.0.7686': attribute type 83 has an invalid length. [ 758.500204][ T599] netlink: 'syz.3.7687': attribute type 1 has an invalid length. [ 758.638735][ T599] bond3: entered promiscuous mode [ 758.668848][ T599] 8021q: adding VLAN 0 to HW filter on device bond3 [ 759.076194][ T627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.522816][ T654] __nla_validate_parse: 15 callbacks suppressed [ 759.522837][ T654] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7703'. [ 759.957567][ T674] nbd: must specify a size in bytes for the device [ 760.283637][ T682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7712'. [ 760.336624][ T682] pimreg: entered allmulticast mode [ 760.362935][ T691] netlink: 'syz.1.7714': attribute type 12 has an invalid length. [ 760.369028][ T694] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7713'. [ 760.394779][ T692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7716'. [ 760.409469][ T695] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7715'. [ 761.160000][ T739] netlink: 'syz.0.7729': attribute type 1 has an invalid length. [ 761.171055][ T739] netlink: 'syz.0.7729': attribute type 4 has an invalid length. [ 761.181215][ T739] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.7729'. [ 761.270685][ T747] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7729'. [ 761.468817][ T756] delete_channel: no stack [ 761.565502][ T760] ip6gre1: entered allmulticast mode [ 761.740398][ T776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7740'. [ 761.853095][ T782] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7743'. [ 761.936494][ T785] lo: entered promiscuous mode [ 761.942327][ T785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.322823][ T814] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7753'. [ 762.397116][ T817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.687754][ T837] netlink: 'syz.4.7760': attribute type 1 has an invalid length. [ 763.090281][ T858] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 763.220641][ T861] tap0: tun_chr_ioctl cmd 1074025676 [ 763.246660][ T861] tap0: owner set to 0 [ 763.593225][ T878] openvswitch: netlink: Flow key attr not present in new flow. [ 763.872612][ T897] netlink: 'syz.0.7773': attribute type 13 has an invalid length. [ 763.880753][ T897] netlink: 'syz.0.7773': attribute type 13 has an invalid length. [ 763.902521][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047723c00: rx timeout, send abort [ 764.317847][ T915] macvtap2: entered promiscuous mode [ 764.328883][ T915] erspan0: entered promiscuous mode [ 764.341118][ T915] macvtap2: entered allmulticast mode [ 764.410827][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047723c00: abort rx timeout. Force session deactivation [ 764.574158][ T936] syzkaller0: entered promiscuous mode [ 764.579967][ T936] syzkaller0: entered allmulticast mode [ 764.590468][ T936] netlink: 'syz.2.7786': attribute type 4 has an invalid length. [ 765.020297][ T959] netlink: 'syz.4.7789': attribute type 83 has an invalid length. [ 765.124307][ T968] __nla_validate_parse: 10 callbacks suppressed [ 765.124328][ T968] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7792'. [ 765.370455][ T983] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7797'. [ 765.400474][ T986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7797'. [ 765.506917][ T992] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7800'. [ 765.811527][ T998] can: request_module (can-proto-0) failed. [ 765.877272][ T1013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 766.158083][ T1013] tipc: Enabled bearer , priority 0 [ 766.263510][ T1019] syzkaller0: entered promiscuous mode [ 766.273582][ T1019] syzkaller0: entered allmulticast mode [ 766.344369][ T1011] tipc: Resetting bearer [ 766.400734][ T1007] tipc: Resetting bearer [ 766.450671][ T1007] tipc: Disabling bearer [ 766.460208][ T1035] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7808'. [ 766.474750][ T1036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7807'. [ 766.523464][ T1031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.120006][ T1076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7820'. [ 767.178385][ T1074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7820'. [ 769.073645][ T1073] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 769.083449][ T1073] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 769.093940][ T1073] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 769.413666][ T1104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7827'. [ 769.748796][ T1115] netlink: 'syz.3.7829': attribute type 5 has an invalid length. [ 769.777083][ T1113] bridge_slave_0: entered promiscuous mode [ 769.800119][ T1115] netlink: 'syz.3.7829': attribute type 2 has an invalid length. [ 770.001914][ T1121] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 770.236202][ T1129] __nla_validate_parse: 4 callbacks suppressed [ 770.236229][ T1129] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7837'. [ 770.245411][ T1130] netlink: 'syz.3.7836': attribute type 1 has an invalid length. [ 770.350899][ T1130] bond4: entered promiscuous mode [ 770.366666][ T1130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 770.488312][ T1143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7841'. [ 770.590458][ T1147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7841'. [ 770.645460][ T1154] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 770.671007][ T1152] netlink: 'syz.3.7843': attribute type 2 has an invalid length. [ 770.698125][ T1152] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7843'. [ 770.716245][ T1152] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7843'. [ 770.808744][ T1158] syzkaller0: entered allmulticast mode [ 771.037508][ T1180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7852'. [ 771.086957][ T1180] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 771.103291][ T1182] nft_compat: unsupported protocol 0 [ 771.114055][ T1182] nft_compat: unsupported protocol 0 [ 771.119588][ T1182] nft_compat: unsupported protocol 0 [ 771.130193][ T1182] nft_compat: unsupported protocol 0 [ 771.136975][ T1185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7855'. [ 771.151543][ T1182] nft_compat: unsupported protocol 0 [ 771.160545][ T1182] nft_compat: unsupported protocol 0 [ 771.170429][ T1182] nft_compat: unsupported protocol 0 [ 771.190809][ T1182] nft_compat: unsupported protocol 0 [ 771.217812][ T1182] nft_compat: unsupported protocol 0 [ 771.223668][ T1182] nft_compat: unsupported protocol 0 [ 771.249334][ T1182] nft_compat: unsupported protocol 0 [ 771.255468][ T1182] nft_compat: unsupported protocol 0 [ 771.288422][ T1182] nft_compat: unsupported protocol 0 [ 771.316556][ T1182] nft_compat: unsupported protocol 0 [ 771.339039][ T1182] nft_compat: unsupported protocol 0 [ 771.345700][ T1189] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 771.380943][ T1182] nft_compat: unsupported protocol 0 [ 771.388449][ T1182] nft_compat: unsupported protocol 0 [ 771.407375][ T1182] nft_compat: unsupported protocol 0 [ 771.417368][ T1189] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 771.432899][ T1182] nft_compat: unsupported protocol 0 [ 771.452782][ T1189] gretap0: entered promiscuous mode [ 771.458061][ T1189] gretap0: entered allmulticast mode [ 771.466392][ T1182] nft_compat: unsupported protocol 0 [ 771.475833][ T1182] nft_compat: unsupported protocol 0 [ 771.497569][ T1204] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 771.523097][ T1182] nft_compat: unsupported protocol 0 [ 771.555272][ T1182] nft_compat: unsupported protocol 0 [ 771.565716][ T1182] nft_compat: unsupported protocol 0 [ 771.613445][ T1182] nft_compat: unsupported protocol 0 [ 771.635907][ T1182] nft_compat: unsupported protocol 0 [ 771.653015][ T1182] nft_compat: unsupported protocol 0 [ 771.679248][ T1182] nft_compat: unsupported protocol 0 [ 771.690492][ T1216] netlink: 'syz.1.7860': attribute type 10 has an invalid length. [ 771.700962][ T1182] nft_compat: unsupported protocol 0 [ 771.704613][ T1219] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 771.711171][ T1182] nft_compat: unsupported protocol 0 [ 771.726148][ T1217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7861'. [ 771.728730][ T1182] nft_compat: unsupported protocol 0 [ 771.740944][ T1220] netlink: 'syz.1.7860': attribute type 10 has an invalid length. [ 771.750734][ T1182] nft_compat: unsupported protocol 0 [ 771.760989][ T1182] nft_compat: unsupported protocol 0 [ 771.768030][ T1216] dummy0: left promiscuous mode [ 771.908273][ T1227] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7862'. [ 772.055456][ T1241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7865'. [ 772.584762][ T1279] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 772.639998][ T1270] can: request_module (can-proto-3) failed. [ 772.723363][ T1290] netlink: 'syz.3.7878': attribute type 21 has an invalid length. [ 773.254745][ T1318] openvswitch: netlink: Multiple metadata blocks provided [ 773.348091][ T1318] gtp2: entered promiscuous mode [ 773.380869][ T1318] gtp2: entered allmulticast mode [ 773.402866][ T1322] netlink: 'syz.1.7886': attribute type 18 has an invalid length. [ 773.499434][ T1327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.917755][ T1357] syzkaller1: entered promiscuous mode [ 773.934409][ T1357] syzkaller1: entered allmulticast mode [ 774.074818][ T1360] hsr0 speed is unknown, defaulting to 1000 [ 774.086078][ T1360] wg1 speed is unknown, defaulting to 1000 [ 774.188025][ T1372] netlink: 'syz.1.7899': attribute type 3 has an invalid length. [ 774.625693][ T1390] openvswitch: netlink: IP tunnel dst address not specified [ 774.708877][ T1360] wg1 speed is unknown, defaulting to 1000 [ 774.800383][ T1393] 0{X: entered promiscuous mode [ 774.806211][ T1393] 0{X: left allmulticast mode [ 774.863137][ T1392] 1{X: renamed from 30{X [ 774.893543][ T1392] 1{X: left promiscuous mode [ 774.912649][ T1392] 1{X: entered allmulticast mode [ 774.952265][ T1392] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 775.506102][ T1418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.677739][ T1429] __nla_validate_parse: 15 callbacks suppressed [ 775.677760][ T1429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7920'. [ 775.887552][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7921'. [ 775.979557][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7921'. [ 776.420062][ T1465] netlink: 'syz.4.7929': attribute type 2 has an invalid length. [ 776.454247][ T1466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7928'. [ 776.454956][ T1465] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7929'. [ 776.655772][ T1473] netlink: 'syz.2.7930': attribute type 1 has an invalid length. [ 776.820078][ T1479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7932'. [ 776.853330][ T1479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7932'. [ 777.860046][ T8107] wg1 speed is unknown, defaulting to 1000 [ 777.864320][ T6455] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.875219][T27277] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.894952][ T1501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7936'. [ 777.911963][ T8107] syz2: Port: 1 Link DOWN [ 777.935228][ T1491] hsr0 speed is unknown, defaulting to 1000 [ 777.987173][T27277] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.996643][ T1491] wg1 speed is unknown, defaulting to 1000 [ 778.009273][ T1503] : entered promiscuous mode [ 778.048609][T27277] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.639478][ T1491] wg1 speed is unknown, defaulting to 1000 [ 778.649350][ T1530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7944'. [ 778.973051][ T1545] tipc: Enabled bearer , priority 0 [ 778.989149][ T1545] syzkaller0: entered promiscuous mode [ 778.997403][ T1545] syzkaller0: entered allmulticast mode [ 779.054060][ T1545] tipc: Resetting bearer [ 779.091077][ T1544] tipc: Resetting bearer [ 779.176067][ T1544] tipc: Disabling bearer [ 779.209841][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7953'. [ 779.974225][ T1583] netlink: 'syz.1.7962': attribute type 11 has an invalid length. [ 780.016720][ T1583] netlink: 'syz.1.7962': attribute type 29 has an invalid length. [ 780.045110][ T1583] netlink: 'syz.1.7962': attribute type 29 has an invalid length. [ 780.319339][ T1593] netlink: 'syz.1.7965': attribute type 23 has an invalid length. [ 780.358426][ T1596] netlink: 'syz.4.7966': attribute type 4 has an invalid length. [ 780.819383][ T1619] __nla_validate_parse: 8 callbacks suppressed [ 780.819403][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7972'. [ 780.872076][ T1622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7972'. [ 781.016628][ T1619] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7972'. [ 781.315105][ T1635] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7978'. [ 781.542466][ T1653] netlink: 'syz.4.7982': attribute type 1 has an invalid length. [ 781.605492][ T1653] netlink: 'syz.4.7982': attribute type 10 has an invalid length. [ 781.641863][ T1658] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7984'. [ 781.670811][ T1660] syzkaller1: entered promiscuous mode [ 781.691565][ T1660] syzkaller1: entered allmulticast mode [ 781.797365][ T1669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7986'. [ 781.999994][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7993'. [ 782.116929][ T1677] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 782.184881][ T1686] netlink: 'syz.2.7996': attribute type 10 has an invalid length. [ 782.220216][ T1686] team0: Port device dummy0 added [ 782.276461][ T1693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.396285][ T1700] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8001'. [ 782.408406][ T1700] netlink: 'syz.2.8001': attribute type 10 has an invalid length. [ 782.421050][ T1700] team0: Device ipvlan1 failed to register rx_handler [ 782.656794][ T1714] openvswitch: netlink: IPv4 tun info is not correct [ 782.781832][ T1723] netlink: 'syz.2.8003': attribute type 29 has an invalid length. [ 782.823951][ T1723] netlink: 'syz.2.8003': attribute type 29 has an invalid length. [ 783.009660][ T1729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8007'. [ 783.051888][ T1735] netlink: 'syz.2.8010': attribute type 10 has an invalid length. [ 783.065969][ T1735] team0: Device hsr_slave_0 failed to register rx_handler [ 783.102571][ T1735] IPv6: NLM_F_CREATE should be specified when creating new route [ 783.234256][ T1739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8011'. [ 783.673702][ T1756] netlink: 'syz.2.8015': attribute type 23 has an invalid length. [ 783.692505][ T1756] netlink: 'syz.2.8015': attribute type 23 has an invalid length. [ 784.193053][ T1777] netlink: 'syz.0.8022': attribute type 5 has an invalid length. [ 785.535452][ T1835] geneve2: entered promiscuous mode [ 785.550980][ T1835] geneve2: entered allmulticast mode [ 786.016336][ T1853] __nla_validate_parse: 4 callbacks suppressed [ 786.016360][ T1853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8045'. [ 786.048857][ T1855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8047'. [ 786.075868][T27272] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 786.093352][T27272] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 786.102840][ T1859] openvswitch: netlink: Actions may not be safe on all matching packets [ 786.112640][ T8119] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 786.127106][ T8119] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 786.152024][ T1855] lo: left promiscuous mode [ 786.159003][ T1855] bridge_slave_0: left promiscuous mode [ 786.198210][ T1855] bond1: left promiscuous mode [ 786.235122][ T1855] mac80211_hwsim hwsim74 syzkaller0: left promiscuous mode [ 786.253580][ T1855] veth3: left promiscuous mode [ 786.260527][ T1855] syzkaller1: left promiscuous mode [ 786.293433][ T1855] geneve3: left promiscuous mode [ 786.303337][ T1855] macvtap2: left promiscuous mode [ 786.308619][ T1855] erspan0: left promiscuous mode [ 786.916358][ T30] audit: type=1804 audit(1758391745.675:15): pid=1892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8060" name="/newroot/453/cgroup.controllers" dev="tmpfs" ino=2320 res=1 errno=0 [ 787.004026][ T30] audit: type=1800 audit(1758391745.725:16): pid=1892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8060" name="cgroup.controllers" dev="tmpfs" ino=2320 res=0 errno=0 [ 787.097175][ T8119] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 787.419866][ T1916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8064'. [ 787.423684][ T1914] tipc: Enabled bearer , priority 0 [ 787.488689][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8068'. [ 787.599502][ T1914] syzkaller0: entered promiscuous mode [ 787.607668][ T1914] syzkaller0: entered allmulticast mode [ 787.656298][ T1914] tipc: Resetting bearer [ 787.705506][ T1933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8071'. [ 787.722469][ T1911] tipc: Resetting bearer [ 787.771187][ T1911] tipc: Disabling bearer [ 787.934126][ T1949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8075'. [ 788.102609][ T1956] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 788.165647][ T1964] geneve2: entered promiscuous mode [ 788.178282][ T1964] geneve2: entered allmulticast mode [ 788.188494][ T6455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 788.209138][ T6455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 788.242163][ T1966] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8078'. [ 788.263283][ T6455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 788.287781][ T6455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 788.299110][ T1972] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8078'. [ 788.375512][ T1975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8080'. [ 788.485229][ T1979] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 788.674364][ T1989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8086'. [ 788.749720][ T1996] RDS: rds_bind could not find a transport for ::ffff:35.78.0.0, load rds_tcp or rds_rdma? [ 788.750490][ T1998] sctp: [Deprecated]: syz.4.8088 (pid 1998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.750490][ T1998] Use struct sctp_sack_info instead [ 788.934895][ T2010] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 788.950771][ T2010] validate_nla: 1 callbacks suppressed [ 788.950794][ T2010] netlink: 'syz.3.8095': attribute type 2 has an invalid length. [ 789.272136][ T2021] netlink: 'syz.4.8099': attribute type 4 has an invalid length. [ 789.469626][ T2041] netlink: 'syz.3.8104': attribute type 13 has an invalid length. [ 789.819017][ T2041] bridge0: port 3(0!) entered blocking state [ 789.826895][ T2041] bridge0: port 3(0!) entered forwarding state [ 789.846540][ T2041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.881148][ T2060] netlink: 'syz.4.8110': attribute type 7 has an invalid length. [ 790.131482][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 790.174783][ T2075] tipc: Enabled bearer , priority 10 [ 790.593458][ T2096] bridge3: entered allmulticast mode [ 790.617429][ T2091] hsr0 speed is unknown, defaulting to 1000 [ 790.637538][ T2098] dvmrp0: entered allmulticast mode [ 790.645365][ T2091] wg1 speed is unknown, defaulting to 1000 [ 790.845573][ T2109] netlink: 'syz.2.8126': attribute type 9 has an invalid length. [ 790.979703][ T2091] wg1 speed is unknown, defaulting to 1000 [ 791.001892][ T2112] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 791.049643][ T2112] __nla_validate_parse: 7 callbacks suppressed [ 791.049662][ T2112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8127'. [ 791.075701][ T2115] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8128'. [ 791.144725][ T2115] netlink: 'syz.0.8128': attribute type 25 has an invalid length. [ 791.291943][ T5879] tipc: Node number set to 3589319625 [ 791.357503][ T2123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8131'. [ 791.479011][ T2128] gtp3: entered promiscuous mode [ 791.498258][ T2128] gtp3: entered allmulticast mode [ 791.540674][ T2128] gtp4: entered promiscuous mode [ 791.559933][ T2128] gtp4: entered allmulticast mode [ 791.617717][ T2128] gtp5: entered promiscuous mode [ 791.639965][ T2128] gtp5: entered allmulticast mode [ 791.683408][ T2128] gtp6: entered promiscuous mode [ 791.707306][ T2128] gtp6: entered allmulticast mode [ 791.747861][ T2128] gtp7: entered promiscuous mode [ 791.760294][ T2140] netlink: 'syz.2.8138': attribute type 1 has an invalid length. [ 791.774711][ T2128] gtp7: entered allmulticast mode [ 791.790026][ T2128] gtp8: entered promiscuous mode [ 791.796551][ T2128] gtp8: entered allmulticast mode [ 791.833130][ T2128] gtp9: entered promiscuous mode [ 791.839556][ T2128] gtp9: entered allmulticast mode [ 791.885995][ T2128] gtp10: entered promiscuous mode [ 791.892420][ T2128] gtp10: entered allmulticast mode [ 791.908373][ T2128] gtp11: entered promiscuous mode [ 791.914233][ T2128] gtp11: entered allmulticast mode [ 791.928572][ T2128] gtp12: entered promiscuous mode [ 791.936056][ T2128] gtp12: entered allmulticast mode [ 791.965791][ T2128] gtp13: entered promiscuous mode [ 791.970940][ T2128] gtp13: entered allmulticast mode [ 791.984977][ T2128] gtp14: entered promiscuous mode [ 791.990048][ T2128] gtp14: entered allmulticast mode [ 792.043615][ T2128] gtp15: entered promiscuous mode [ 792.049822][ T2128] gtp15: entered allmulticast mode [ 792.079837][ T2128] gtp16: entered promiscuous mode [ 792.086777][ T2128] gtp16: entered allmulticast mode [ 792.112619][ T2128] gtp17: entered promiscuous mode [ 792.117929][ T2128] gtp17: entered allmulticast mode [ 792.124947][ T2142] tipc: Started in network mode [ 792.130058][ T2142] tipc: Node identity 0e9122f0b4fd, cluster identity 4711 [ 792.138743][ T2142] tipc: Enabled bearer , priority 0 [ 792.156650][ T2128] gtp18: entered promiscuous mode [ 792.163820][ T2128] gtp18: entered allmulticast mode [ 792.179387][ T2128] gtp19: entered promiscuous mode [ 792.188027][ T2128] gtp19: entered allmulticast mode [ 792.215893][ T2142] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 792.299510][ T2145] syzkaller0: entered promiscuous mode [ 792.316276][ T2145] syzkaller0: entered allmulticast mode [ 792.327181][ T2142] tipc: Resetting bearer [ 792.350453][ T2128] gtp20: entered promiscuous mode [ 792.361159][ T2128] gtp20: entered allmulticast mode [ 792.379347][ T2141] tipc: Resetting bearer [ 792.446756][ T2141] tipc: Disabling bearer [ 792.648427][ T2152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8141'. [ 792.972962][ T2169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8147'. [ 793.199319][ T2183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8149'. [ 793.538016][ T2198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8153'. [ 793.589849][ T2198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8153'. [ 793.619816][ T2198] netlink: 'syz.0.8153': attribute type 1 has an invalid length. [ 793.658780][ T2198] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8153'. [ 793.844433][ T2215] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8158'. [ 794.022539][ T2226] netlink: 'syz.1.8159': attribute type 29 has an invalid length. [ 794.072993][ T2232] netlink: 'syz.4.8161': attribute type 1 has an invalid length. [ 794.081065][ T2233] netlink: 'syz.4.8161': attribute type 1 has an invalid length. [ 794.213444][ T2236] bridge0: mtu less than device minimum [ 794.828059][ T2272] veth9: entered allmulticast mode [ 795.101553][ T2287] netlink: 'syz.4.8179': attribute type 2 has an invalid length. [ 795.393736][ T2309] netlink: 'syz.2.8184': attribute type 1 has an invalid length. [ 795.563978][ T2316] netlink: 'syz.1.8186': attribute type 1 has an invalid length. [ 795.891808][ T2330] syz.1.8190: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 795.931656][ T2338] nbd6: detected capacity change from 0 to 63 [ 795.974577][ T2330] CPU: 1 UID: 0 PID: 2330 Comm: syz.1.8190 Not tainted syzkaller #0 PREEMPT(full) [ 795.974619][ T2330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 795.974633][ T2330] Call Trace: [ 795.974642][ T2330] [ 795.974652][ T2330] dump_stack_lvl+0x189/0x250 [ 795.974687][ T2330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.974712][ T2330] ? __pfx__printk+0x10/0x10 [ 795.974743][ T2330] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 795.974768][ T2330] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 795.974795][ T2330] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 795.974823][ T2330] warn_alloc+0x214/0x310 [ 795.974862][ T2330] ? __pfx_warn_alloc+0x10/0x10 [ 795.974905][ T2330] ? __get_vm_area_node+0x28f/0x300 [ 795.974935][ T2330] ? nf_tables_newset+0x132b/0x2530 [ 795.974967][ T2330] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 795.975027][ T2330] ? alloc_pages_mpol+0x3cd/0x4a0 [ 795.975059][ T2330] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 795.975095][ T2330] ? rcu_is_watching+0x15/0xb0 [ 795.975118][ T2330] ? nf_tables_newset+0x132b/0x2530 [ 795.975145][ T2330] ? nf_tables_newset+0x132b/0x2530 [ 795.975170][ T2330] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 795.975200][ T2330] ? nf_tables_newset+0x132b/0x2530 [ 795.975227][ T2330] ? nft_table_lookup+0x211/0x230 [ 795.975251][ T2330] ? nft_set_lookup+0x128/0x150 [ 795.975279][ T2330] ? __pfx_nft_hash_estimate+0xf/0x10 [ 795.975304][ T2330] nf_tables_newset+0x132b/0x2530 [ 795.975348][ T2330] ? __pfx_nf_tables_newset+0x10/0x10 [ 795.975402][ T2330] ? __nla_parse+0x40/0x60 [ 795.975430][ T2330] nfnetlink_rcv+0x112f/0x2520 [ 795.975501][ T2330] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 795.975552][ T2330] ? ref_tracker_free+0x63a/0x7d0 [ 795.975626][ T2330] ? __netlink_deliver_tap+0x807/0x850 [ 795.975649][ T2330] ? netlink_deliver_tap+0x2e/0x1b0 [ 795.975692][ T2330] netlink_unicast+0x82f/0x9e0 [ 795.975734][ T2330] ? __pfx_netlink_unicast+0x10/0x10 [ 795.975767][ T2330] ? netlink_sendmsg+0x642/0xb30 [ 795.975787][ T2330] ? skb_put+0x11b/0x210 [ 795.975816][ T2330] netlink_sendmsg+0x805/0xb30 [ 795.975855][ T2330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.975899][ T2330] ? aa_sock_msg_perm+0xf1/0x1d0 [ 795.975923][ T2330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 795.975945][ T2330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.975970][ T2330] __sock_sendmsg+0x219/0x270 [ 795.976006][ T2330] ____sys_sendmsg+0x505/0x830 [ 795.976040][ T2330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.976077][ T2330] ? import_iovec+0x74/0xa0 [ 795.976108][ T2330] ___sys_sendmsg+0x21f/0x2a0 [ 795.976137][ T2330] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.976205][ T2330] ? __fget_files+0x2a/0x420 [ 795.976224][ T2330] ? __fget_files+0x3a0/0x420 [ 795.976252][ T2330] __x64_sys_sendmsg+0x19b/0x260 [ 795.976277][ T2330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 795.976309][ T2330] ? fput+0xa0/0xd0 [ 795.976331][ T2330] ? do_syscall_64+0xbe/0x3b0 [ 795.976354][ T2330] do_syscall_64+0xfa/0x3b0 [ 795.976371][ T2330] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.976389][ T2330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.976406][ T2330] ? clear_bhb_loop+0x60/0xb0 [ 795.976427][ T2330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.976444][ T2330] RIP: 0033:0x7f358718ec29 [ 795.976460][ T2330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.976475][ T2330] RSP: 002b:00007f3587fde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.976494][ T2330] RAX: ffffffffffffffda RBX: 00007f35873d5fa0 RCX: 00007f358718ec29 [ 795.976507][ T2330] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 795.976518][ T2330] RBP: 00007f3587211e41 R08: 0000000000000000 R09: 0000000000000000 [ 795.976529][ T2330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.976540][ T2330] R13: 00007f35873d6038 R14: 00007f35873d5fa0 R15: 00007ffc631aa428 [ 795.976568][ T2330] [ 795.976587][ T2330] Mem-Info: [ 796.375659][ T2330] active_anon:4646 inactive_anon:0 isolated_anon:0 [ 796.375659][ T2330] active_file:3208 inactive_file:40154 isolated_file:0 [ 796.375659][ T2330] unevictable:768 dirty:99 writeback:0 [ 796.375659][ T2330] slab_reclaimable:13887 slab_unreclaimable:212240 [ 796.375659][ T2330] mapped:29312 shmem:1356 pagetables:1244 [ 796.375659][ T2330] sec_pagetables:0 bounce:0 [ 796.375659][ T2330] kernel_misc_reclaimable:0 [ 796.375659][ T2330] free:1205023 free_pcp:14061 free_cma:0 [ 796.432104][ T5873] block nbd6: Receive control failed (result -32) [ 796.459583][ T2330] Node 0 active_anon:18484kB inactive_anon:0kB active_file:12832kB inactive_file:160416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116948kB dirty:396kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15964kB pagetables:4832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.507555][ T2362] netlink: 'syz.3.8198': attribute type 29 has an invalid length. [ 796.529150][ T2362] netlink: 'syz.3.8198': attribute type 29 has an invalid length. [ 796.553350][ T2330] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.583807][ T2362] __nla_validate_parse: 8 callbacks suppressed [ 796.583826][ T2362] netlink: 500 bytes leftover after parsing attributes in process `syz.3.8198'. [ 796.607637][ T2366] netlink: 500 bytes leftover after parsing attributes in process `syz.3.8198'. [ 796.627602][ T2330] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.682476][ T2330] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 796.711895][ T2330] Node 0 DMA32 free:913856kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18232kB inactive_anon:0kB active_file:12832kB inactive_file:158844kB unevictable:1536kB writepending:396kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:42508kB local_pcp:24304kB free_cma:0kB [ 796.826890][ T2330] lowmem_reserve[]: 0 0 1 1 1 [ 796.850613][ T2330] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 796.924957][ T2330] lowmem_reserve[]: 0 0 0 0 0 [ 796.935663][ T2330] Node 1 Normal free:3890480kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13924kB local_pcp:7360kB free_cma:0kB [ 796.975071][ T2330] lowmem_reserve[]: 0 0 0 0 0 [ 796.979929][ T2330] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 796.987857][ T2383] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 797.004537][ T2330] Node 0 DMA32: 1361*4kB (UME) 104*8kB (UME) 62*16kB (UME) 227*32kB (UM) 125*64kB (UME) 71*128kB (UME) 68*256kB (UME) 31*512kB (UME) 13*1024kB (UME) 10*2048kB (UME) 199*4096kB (M) = 913796kB [ 797.068597][ T2330] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 797.072985][ T2383] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 797.182249][ T2399] netlink: 696 bytes leftover after parsing attributes in process `syz.3.8207'. [ 797.214715][ T2330] Node 1 Normal: 242*4kB (UME) 59*8kB (UME) 57*16kB (UME) 224*32kB (UME) 64*64kB (UME) 12*128kB (UME) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3890480kB [ 797.238244][ T2330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.251330][ T2330] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 797.310344][ T2330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 797.342633][ T2330] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 797.366915][ T2330] 45539 total pagecache pages [ 797.377517][ T2330] 0 pages in swap cache [ 797.389249][ T2330] Free swap = 124996kB [ 797.398146][ T2330] Total swap = 124996kB [ 797.403890][ T2330] 2097051 pages RAM [ 797.408030][ T2330] 0 pages HighMem/MovableOnly [ 797.430842][ T2330] 425672 pages reserved [ 797.442135][ T2330] 0 pages cma reserved [ 797.783226][ T2411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8210'. [ 797.947487][ T2418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8212'. [ 797.971748][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.010956][ T2418] erspan0: entered promiscuous mode [ 798.023092][ T2418] macvtap1: entered promiscuous mode [ 798.029567][ T2418] macvtap1: entered allmulticast mode [ 798.042395][ T2418] erspan0: entered allmulticast mode [ 798.166484][ T2435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8213'. [ 798.666673][ T2459] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 798.736241][ T2472] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8224'. [ 798.798755][ T2471] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8224'. [ 798.985038][ T2487] syzkaller1: left allmulticast mode [ 799.896076][ T2530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.921731][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8239'. [ 799.945500][ T2535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8238'. [ 800.077916][ T2547] netlink: 'syz.4.8240': attribute type 12 has an invalid length. [ 800.169934][ T2559] ip6_vti0: entered allmulticast mode [ 800.194343][ T2559] dvmrp0: left allmulticast mode [ 800.199573][ T2559] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 800.299236][ T2555] ip6_vti0: left allmulticast mode [ 801.253028][ T2647] sctp: [Deprecated]: syz.3.8263 (pid 2647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 801.253028][ T2647] Use struct sctp_sack_info instead [ 801.330060][ T2649] netlink: 'syz.1.8264': attribute type 1 has an invalid length. [ 801.338410][ T2649] netlink: 'syz.1.8264': attribute type 3 has an invalid length. [ 801.347189][ T2649] NCSI netlink: No device for ifindex 0 [ 801.390391][T27270] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.405502][T27270] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.426293][T27270] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.578396][ T2672] tipc: Enabling of bearer rejected, already enabled [ 801.605492][ T2677] __nla_validate_parse: 13 callbacks suppressed [ 801.605512][ T2677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8270'. [ 801.875153][ T2697] netlink: 'syz.4.8277': attribute type 10 has an invalid length. [ 801.886772][ T2697] wlan1: mtu less than device minimum [ 801.895427][ T2697] `: (slave wlan1): Error -22 calling dev_set_mtu [ 801.909629][ T2704] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8278'. [ 802.069743][ T2719] tipc: Enabled bearer , priority 10 [ 802.095111][ T2722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8284'. [ 802.095798][ T2719] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 802.106237][ T2723] netlink: 'syz.3.8282': attribute type 1 has an invalid length. [ 802.121116][ T2719] tipc: Enabled bearer , priority 10 [ 802.136858][ T2719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8281'. [ 802.138223][ T2725] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8283'. [ 802.168076][ T2725] openvswitch: netlink: Flow key attr not present in new flow. [ 802.218505][ T2723] bond6: entered promiscuous mode [ 802.225258][ T2723] 8021q: adding VLAN 0 to HW filter on device bond6 [ 802.310968][ T2730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.344213][ T2730] bond6: (slave bond7): making interface the new active one [ 802.371782][ T2730] bond7: entered promiscuous mode [ 802.388514][ T2730] bond6: (slave bond7): Enslaving as an active interface with an up link [ 802.764288][ T2756] team0 (unregistering): Port device team_slave_0 removed [ 802.779800][ T2756] team0 (unregistering): Port device team_slave_1 removed [ 802.799134][ T2756] team0 (unregistering): Port device bridge0 removed [ 802.926202][ T2772] netlink: 'syz.4.8291': attribute type 2 has an invalid length. [ 802.935270][ T2772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8291'. [ 803.149742][ T2776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8293'. [ 803.172566][ T2777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8292'. [ 803.179794][ T2781] ip6erspan0: entered promiscuous mode [ 803.182308][ T8107] tipc: Node number set to 1070628771 [ 803.198764][ T2781] ip6erspan0: entered allmulticast mode [ 803.302110][ T2787] netlink: 'syz.4.8295': attribute type 1 has an invalid length. [ 803.697759][ T2822] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8302'. [ 803.977563][ T2832] netlink: 436 bytes leftover after parsing attributes in process `syz.1.8306'. [ 804.317074][ T2866] netlink: 'syz.0.8312': attribute type 2 has an invalid length. [ 804.794754][ T2896] openvswitch: netlink: Missing key (keys=40, expected=100) [ 805.456442][ T2932] netlink: 'syz.4.8327': attribute type 5 has an invalid length. [ 805.530574][ T2946] veth0: entered promiscuous mode [ 805.612531][ T2953] netlink: 'syz.4.8333': attribute type 1 has an invalid length. [ 805.629983][ T2946] veth0: left promiscuous mode [ 805.912964][ T2977] tipc: Enabled bearer , priority 0 [ 805.954252][ T2979] syzkaller0: entered promiscuous mode [ 805.959793][ T2979] syzkaller0: entered allmulticast mode [ 806.042738][ T2979] tipc: Resetting bearer [ 806.197324][ T2979] tipc: Disabling bearer [ 806.279784][ T3003] bridge_slave_0: invalid flags given to default FDB implementation [ 806.358109][ T6454] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 806.380874][ T6454] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 806.389787][ T8107] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 806.582718][ T8107] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 806.732744][ T3037] __nla_validate_parse: 11 callbacks suppressed [ 806.732778][ T3037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8356'. [ 806.812592][ T3037] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8356'. [ 806.852361][ T3037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8356'. [ 806.864548][ T3042] netlink: 'syz.4.8359': attribute type 2 has an invalid length. [ 806.936275][ T3048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8361'. [ 807.084924][ T3056] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8363'. [ 807.123786][ T3056] netlink: 'syz.0.8363': attribute type 21 has an invalid length. [ 807.332827][ T8107] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 807.883769][ T3086] netlink: 'syz.3.8372': attribute type 10 has an invalid length. [ 808.159664][ T3104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8377'. [ 808.197641][ T3108] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 808.356190][ T3116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8380'. [ 808.389544][ T3119] netlink: 'syz.0.8382': attribute type 1 has an invalid length. [ 808.415951][ T3119] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8382'. [ 808.433785][ T3119] netlink: 'syz.0.8382': attribute type 1 has an invalid length. [ 808.448234][ T3119] netlink: 'syz.0.8382': attribute type 2 has an invalid length. [ 808.460562][ T3119] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8382'. [ 808.483276][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8382'. [ 808.496590][ T3121] sctp: [Deprecated]: syz.2.8383 (pid 3121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 808.496590][ T3121] Use struct sctp_sack_info instead [ 808.525304][ T3121] netlink: 'syz.2.8383': attribute type 21 has an invalid length. [ 808.600810][ T6454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.614514][ T6454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.051589][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 814.611475][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 817.811587][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 829.834166][ T3214] __nla_validate_parse: 6 callbacks suppressed [ 829.834186][ T3214] netlink: 312 bytes leftover after parsing attributes in process `syz.4.8407'. [ 830.318895][ T3239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8413'. [ 830.328912][ T3239] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 830.337231][ T3239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.348937][ T3239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8413'. [ 830.366912][ T3239] geneve4: entered promiscuous mode [ 830.403519][ T3241] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8415'. [ 830.425340][ T3241] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8415'. [ 830.426355][ T3242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8413'. [ 830.671921][ T3250] openvswitch: netlink: Actions may not be safe on all matching packets [ 830.797232][ T3261] openvswitch: netlink: Actions may not be safe on all matching packets [ 831.034071][ T3276] tipc: Enabled bearer , priority 0 [ 831.051739][ T3276] syzkaller0: entered promiscuous mode [ 831.056008][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8428'. [ 831.072124][ T3276] syzkaller0: entered allmulticast mode [ 831.099826][ T3276] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 831.109892][ T3276] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 831.123896][ T3279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8428'. [ 831.156008][ T3276] tipc: Resetting bearer [ 831.205155][ T3275] tipc: Resetting bearer [ 831.264668][ T3275] tipc: Disabling bearer [ 831.315512][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8430'. [ 831.708678][ T3323] macsec0: entered promiscuous mode [ 831.722699][ T3323] macsec0: entered allmulticast mode [ 831.767895][ T3323] veth1_macvtap: entered allmulticast mode [ 831.788616][ T3323] macsec0: left promiscuous mode [ 831.804215][ T3323] macsec0: left allmulticast mode [ 831.809410][ T3323] veth1_macvtap: left allmulticast mode [ 831.856993][ T3331] syzkaller0: entered promiscuous mode [ 831.864315][ T3331] syzkaller0: entered allmulticast mode [ 831.891456][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 832.239718][ T3358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8446'. [ 832.452793][ T3373] openvswitch: netlink: Missing key (keys=40, expected=100) [ 832.470179][ T3373] !: renamed from dummy0 (while UP) [ 832.605771][ T3379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.648751][ T3370] bond0: entered promiscuous mode [ 832.658788][ T3370] bond0: left promiscuous mode [ 832.838645][ T3396] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 832.853151][ T3396] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 832.865553][ T3398] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 832.877468][ T3398] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 832.906471][ T3400] netlink: 'syz.0.8454': attribute type 1 has an invalid length. [ 833.083721][ T3395] gretap2: entered promiscuous mode [ 834.095173][ T3461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.115608][T27273] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.139015][T27273] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.156021][T27273] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.169641][T27273] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.231663][T27273] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.260885][T27273] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.288865][T27273] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.319332][T27273] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.365032][ T3472] tipc: Enabled bearer , priority 0 [ 834.378874][ T3472] syzkaller0: entered promiscuous mode [ 834.387932][ T3472] syzkaller0: entered allmulticast mode [ 834.700581][ T3496] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 834.729104][ T3493] gretap0: entered promiscuous mode [ 834.736424][ T3493] gretap0: left promiscuous mode [ 834.773311][ T3498] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 834.784136][ T3480] tipc: Resetting bearer [ 834.857077][ T3480] tipc: Disabling bearer [ 835.017800][ T3513] netlink: 'syz.1.8486': attribute type 1 has an invalid length. [ 835.028567][ T3514] __nla_validate_parse: 8 callbacks suppressed [ 835.028585][ T3514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8486'. [ 835.214032][ T3526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8489'. [ 835.289276][ T3528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8491'. [ 835.322937][ T3528] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8491'. [ 835.423375][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8495'. [ 835.573029][ T3551] netlink: 'syz.1.8499': attribute type 21 has an invalid length. [ 835.614864][ T3551] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 835.727236][ T3553] veth5: entered allmulticast mode [ 836.127331][ T3580] sctp: [Deprecated]: syz.0.8505 (pid 3580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 836.127331][ T3580] Use struct sctp_sack_info instead [ 836.553124][ T3605] Bluetooth: MGMT ver 1.23 [ 836.944814][ T3626] tunl0: entered promiscuous mode [ 836.952284][ T3626] netlink: 'syz.2.8517': attribute type 3 has an invalid length. [ 836.975570][ T3626] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8517'. [ 837.371094][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8524'. [ 837.423764][ T3653] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 837.520121][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8526'. [ 837.553798][ T3664] netlink: 'syz.3.8528': attribute type 2 has an invalid length. [ 838.083872][ T3694] netlink: 'syz.1.8536': attribute type 12 has an invalid length. [ 838.226040][ T3700] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8540'. [ 838.257794][ T3700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8540'. [ 838.312380][ T3700] netlink: 'syz.3.8540': attribute type 23 has an invalid length. [ 839.345572][ T3748] netlink: 'syz.3.8554': attribute type 10 has an invalid length. [ 839.398032][ T3748] bridge0: port 3(0!) entered disabled state [ 839.717959][ T3768] 8021q: adding VLAN 0 to HW filter on device bond10 [ 840.156224][ T3786] tipc: Enabling of bearer rejected, failed to enable media [ 840.166945][ T3791] netlink: 'syz.2.8567': attribute type 3 has an invalid length. [ 840.170584][ T3799] sctp: [Deprecated]: syz.0.8568 (pid 3799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.170584][ T3799] Use struct sctp_sack_info instead [ 840.179231][ T3791] __nla_validate_parse: 6 callbacks suppressed [ 840.179252][ T3791] netlink: 766 bytes leftover after parsing attributes in process `syz.2.8567'. [ 840.269610][ T3794] hsr0 speed is unknown, defaulting to 1000 [ 840.270333][ T3781] netlink: 200792 bytes leftover after parsing attributes in process `syz.3.8563'. [ 840.278722][ T3794] wg1 speed is unknown, defaulting to 1000 [ 840.530439][ T3794] wg1 speed is unknown, defaulting to 1000 [ 841.350331][ T3850] netlink: 26 bytes leftover after parsing attributes in process `syz.1.8580'. [ 841.441028][ T3852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8579'. [ 841.471007][ T3855] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8582'. [ 841.892102][ T3877] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8587'. [ 842.057265][ T3884] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8589'. [ 842.278626][ T3889] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 845.384822][ T3931] tipc: Enabling of bearer rejected, failed to enable media [ 845.616502][ T3963] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8605'. [ 845.918681][ T3981] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8609'. [ 846.450145][ T4004] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 846.467951][ T4004] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 846.611106][ T4017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8623'. [ 847.079478][ T4044] netlink: 'syz.0.8631': attribute type 11 has an invalid length. [ 847.122237][ T4044] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8631'. [ 847.164160][ T4044] netlink: 'syz.0.8631': attribute type 2 has an invalid length. [ 847.180940][ T4044] netlink: 'syz.0.8631': attribute type 2 has an invalid length. [ 847.190666][ T4044] netlink: 'syz.0.8631': attribute type 4 has an invalid length. [ 847.205931][ T4044] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8631'. [ 847.218302][ T4044] `: renamed from bond0 [ 847.292107][ T5873] block nbd7: Receive control failed (result -32) [ 847.433369][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8636'. [ 847.587410][ T4071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8641'. [ 847.763964][ T4081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8643'. [ 847.777951][ T4082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8644'. [ 847.932929][ T4086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8646'. [ 848.449416][ T4110] vlan2: entered allmulticast mode [ 848.469193][ T4110] hsr0: entered allmulticast mode [ 848.495973][ T4110] hsr_slave_0: entered allmulticast mode [ 848.548237][ T4110] hsr_slave_1: entered allmulticast mode [ 848.577483][ T4114] tunl0: entered promiscuous mode [ 848.609967][ T4114] netlink: 'syz.1.8654': attribute type 3 has an invalid length. [ 848.954485][ T4125] hsr0 speed is unknown, defaulting to 1000 [ 848.976065][ T4125] wg1 speed is unknown, defaulting to 1000 [ 849.584004][ T4125] wg1 speed is unknown, defaulting to 1000 [ 849.815355][ T4170] syzkaller1: entered promiscuous mode [ 849.836611][ T4170] syzkaller1: entered allmulticast mode [ 849.872243][ T4170] syzkaller1: left promiscuous mode [ 849.877628][ T4170] syzkaller1: left allmulticast mode [ 850.122662][ T4181] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 850.355630][ T4189] netlink: 'syz.2.8676': attribute type 1 has an invalid length. [ 850.356155][ T4187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 850.970311][ T4215] __nla_validate_parse: 12 callbacks suppressed [ 850.970333][ T4215] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8683'. [ 851.084607][ T4216] can: request_module (can-proto-0) failed. [ 851.098189][ T4218] can: request_module (can-proto-0) failed. [ 851.267118][ T4228] netlink: 'syz.1.8686': attribute type 10 has an invalid length. [ 851.278450][ T4225] can: request_module (can-proto-5) failed. [ 851.306279][ T4228] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 851.377686][ T4228] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 851.757208][ T4250] netlink: 'syz.4.8692': attribute type 1 has an invalid length. [ 851.800327][ T4250] netlink: 'syz.4.8692': attribute type 2 has an invalid length. [ 851.818729][ T4250] netlink: 'syz.4.8692': attribute type 1 has an invalid length. [ 851.829676][ T4250] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.8692'. [ 851.974176][ T4260] macvtap1: entered promiscuous mode [ 851.979534][ T4260] macvtap1: entered allmulticast mode [ 852.040098][ T4262] bridge_slave_0: entered promiscuous mode [ 852.498195][ T4297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8709'. [ 852.664641][ T4295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8708'. [ 852.674931][ T4295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8708'. [ 852.680110][ T4312] nft_compat: unsupported protocol 1 [ 852.713651][ T4295] virtio_net virtio1 eth0: entered promiscuous mode [ 852.749736][ T4295] virtio_net virtio1 eth0: left promiscuous mode [ 853.259932][ T4347] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.8723'. [ 853.278877][ T4347] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 853.766854][ T4375] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 854.029484][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8733'. [ 854.047965][ T4378] : renamed from hsr0 (while UP) [ 854.545646][ T4396] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8737'. [ 854.568477][ T4396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8737'. [ 854.574884][ T4398] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8736'. [ 854.596033][ T4401] IPVS: Unknown mcast interface: vcan0 [ 854.846086][ T4413] netlink: 'syz.2.8741': attribute type 1 has an invalid length. [ 854.872201][ T4413] netlink: 'syz.2.8741': attribute type 1 has an invalid length. [ 854.897793][ T4413] netlink: 'syz.2.8741': attribute type 1 has an invalid length. [ 855.029911][ T4425] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 855.307970][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.593670][ T4449] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 855.893963][ T4465] sctp: [Deprecated]: syz.2.8756 (pid 4465) Use of int in maxseg socket option. [ 855.893963][ T4465] Use struct sctp_assoc_value instead [ 856.285229][ T4483] __nla_validate_parse: 6 callbacks suppressed [ 856.285253][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8762'. [ 856.416938][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8764'. [ 856.812359][ T4506] netlink: 'syz.3.8770': attribute type 1 has an invalid length. [ 856.827969][ T4506] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8770'. [ 856.884059][ T4508] delete_channel: no stack [ 856.893953][ T4509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8770'. [ 857.146833][ T4509] hsr_slave_0: left promiscuous mode [ 857.178280][ T4509] hsr_slave_1: left promiscuous mode [ 857.466167][T17746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.476708][T17746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.485625][T17746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.502074][T17746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.510098][T17746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.908300][ T4539] ksmbd: Unknown IPC event: 1, ignore. [ 857.967789][T27270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.997499][T27270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.052223][ T4517] hsr0 speed is unknown, defaulting to 1000 [ 858.060136][ T4517] wg1 speed is unknown, defaulting to 1000 [ 858.298215][T27270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.336379][T27270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.352686][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8785'. [ 858.535384][T27270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.547978][T27270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.571042][ T4517] wg1 speed is unknown, defaulting to 1000 [ 858.650163][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8790'. [ 858.676326][T27270] bond0: (slave netdevsim0): Releasing backup interface [ 858.718239][T27270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.760147][T27270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.834264][ T4581] scsi_nl_rcv_msg: discarding partial skb [ 859.109000][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8794'. [ 859.536844][ T4617] netlink: 9324 bytes leftover after parsing attributes in process `syz.0.8796'. [ 859.572488][ T5873] Bluetooth: hci2: command tx timeout [ 861.255844][T27270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.268552][T27270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.284488][T27270] bond0 (unregistering): Released all slaves [ 861.299952][T27270] bond1 (unregistering): Released all slaves [ 861.317197][T27270] bond2 (unregistering): (slave veth5): Releasing backup interface [ 861.329588][T27270] bond2 (unregistering): Released all slaves [ 861.474528][T27270] bond3 (unregistering): Released all slaves [ 861.600100][T27270] bond4 (unregistering): (slave veth7): Releasing active interface [ 861.610964][T27270] bond4 (unregistering): Released all slaves [ 861.656278][ T5873] Bluetooth: hci2: command tx timeout [ 861.754095][T27270] bond5 (unregistering): Released all slaves [ 861.770031][T27270] bond6 (unregistering): Released all slaves [ 861.786760][T27270] bond7 (unregistering): Released all slaves [ 861.802024][T27270] bond8 (unregistering): Released all slaves [ 861.821102][T27270] bond9 (unregistering): Released all slaves [ 861.848096][ T4607] : entered promiscuous mode [ 862.047175][T27270] tipc: Disabling bearer [ 862.054348][T27270] tipc: Left network mode [ 862.062161][ T6454] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.077513][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8803'. [ 862.095459][ T6454] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.249888][ T6454] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.275405][ T6454] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.422229][ T4649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8808'. [ 862.656651][ T4660] netlink: 'syz.3.8811': attribute type 21 has an invalid length. [ 862.701523][ T4660] netlink: 'syz.3.8811': attribute type 6 has an invalid length. [ 862.753949][ T4660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8811'. [ 863.037429][ T4683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8815'. [ 863.112968][ T4681] sctp: [Deprecated]: syz.0.8816 (pid 4681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 863.112968][ T4681] Use struct sctp_sack_info instead [ 863.219940][ T4690] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8818'. [ 863.249431][ T4690] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8818'. [ 863.270925][ T4690] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8818'. [ 863.439348][ T4702] netlink: 'syz.0.8819': attribute type 1 has an invalid length. [ 863.556882][ T4702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.592813][ T4517] chnl_net:caif_netlink_parms(): no params data found [ 863.725947][ T4713] IPVS: ip_vs_add_dest(): server weight less than zero [ 863.733360][ T5873] Bluetooth: hci2: command tx timeout [ 863.746932][ T5917] IPVS: starting estimator thread 0... [ 863.819032][ T4718] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8824'. [ 863.851846][ T4715] IPVS: using max 27 ests per chain, 64800 per kthread [ 864.108592][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8826'. [ 864.118538][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8826'. [ 864.373633][ T4733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.448889][T27270] hsr_slave_0: left promiscuous mode [ 864.456927][T27270] hsr_slave_1: left promiscuous mode [ 864.465500][T27270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.477116][T27270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.499323][T27270] veth1_macvtap: left promiscuous mode [ 865.610249][ T4517] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.618898][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.626338][ T4517] bridge_slave_0: entered allmulticast mode [ 865.637824][ T4517] bridge_slave_0: entered promiscuous mode [ 865.647963][ T4517] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.655746][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.663214][ T4517] bridge_slave_1: entered allmulticast mode [ 865.671278][ T4517] bridge_slave_1: entered promiscuous mode [ 865.817192][ T5873] Bluetooth: hci2: command tx timeout [ 865.826048][ T4759] hsr0 speed is unknown, defaulting to 1000 [ 865.888256][ T4517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.899096][ T4759] wg1 speed is unknown, defaulting to 1000 [ 865.924352][ T4517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.097657][ T4768] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 866.193546][ T4517] team0: Port device team_slave_0 added [ 866.242846][ T4517] team0: Port device team_slave_1 added [ 866.416236][ T4517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.434588][ T4517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.481944][ T4517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.517831][ T4759] wg1 speed is unknown, defaulting to 1000 [ 866.524346][ T4517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.524365][ T4517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.524390][ T4517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.669796][T27270] IPVS: stop unused estimator thread 0... [ 866.677106][ T4517] hsr_slave_0: entered promiscuous mode [ 866.699800][ T4517] hsr_slave_1: entered promiscuous mode [ 866.732842][ T4517] debugfs: 'hsr0' already exists in 'hsr' [ 866.738750][ T4517] Cannot create hsr debugfs directory [ 867.359546][ T4808] __nla_validate_parse: 7 callbacks suppressed [ 867.359566][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8850'. [ 867.898602][ T5873] Bluetooth: hci2: command tx timeout [ 868.393948][ T4849] veth0_to_bond: entered allmulticast mode [ 868.474445][ T4517] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 868.494434][ T4517] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 868.517766][ T4517] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 868.553954][ T4517] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 868.758880][ T4517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.809487][ T4517] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.867057][T27279] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.874310][T27279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.899631][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.906868][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.246936][ T4890] netlink: 'syz.0.8874': attribute type 12 has an invalid length. [ 869.360721][ T4896] Bluetooth: MGMT ver 1.23 [ 869.594138][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8879'. [ 869.646538][ T4905] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8878'. [ 869.689749][ T4517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.858458][ T4517] veth0_vlan: entered promiscuous mode [ 869.898213][ T4517] veth1_vlan: entered promiscuous mode [ 869.975705][ T4517] veth0_macvtap: entered promiscuous mode [ 869.997593][ T4517] veth1_macvtap: entered promiscuous mode [ 870.026643][ T4517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.065860][ T4517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.135057][ T6455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.155432][ T6455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.201009][ T6455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.216410][ T6455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.246902][ T4928] tipc: Enabling of bearer rejected, failed to enable media [ 870.257452][ T4930] netlink: 'syz.3.8887': attribute type 1 has an invalid length. [ 870.267972][ T4930] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8887'. [ 870.289434][ T4930] netlink: 'syz.3.8887': attribute type 1 has an invalid length. [ 870.459255][ T4947] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 870.859467][ T4946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8891'. [ 871.220541][T27273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.224050][ T4963] netlink: 'syz.2.8894': attribute type 9 has an invalid length. [ 871.245041][T27273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.441056][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.467594][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.742896][ T4986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8902'. [ 872.034893][ T5003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 872.042281][ T5003] IPv6: NLM_F_CREATE should be set when creating new route [ 872.049597][ T5003] IPv6: NLM_F_CREATE should be set when creating new route [ 872.079790][ T5003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 872.294280][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8914'. [ 872.321631][ T5024] netlink: 'syz.1.8913': attribute type 25 has an invalid length. [ 872.342597][ T5024] netlink: 'syz.1.8913': attribute type 25 has an invalid length. [ 872.759487][ T5038] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8920'. [ 873.015860][ T5052] netlink: 'syz.1.8924': attribute type 7 has an invalid length. [ 873.532988][T17746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.548149][T17746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.558937][T17746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.570390][T17746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.580101][T17746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 873.626551][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8933'. [ 873.638370][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8934'. [ 873.657376][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8933'. [ 873.658371][ T5074] hsr0 speed is unknown, defaulting to 1000 [ 873.683571][ T5074] wg1 speed is unknown, defaulting to 1000 [ 874.229716][ T5074] wg1 speed is unknown, defaulting to 1000 [ 874.240145][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8940'. [ 874.267929][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 874.335387][ T8121] hid-generic 0005:0005:0008.0001: unknown main item tag 0x0 [ 874.377360][ T8121] hid-generic 0005:0005:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 874.638179][ T5123] tipc: Enabling of bearer rejected, failed to enable media [ 874.848023][ T5074] chnl_net:caif_netlink_parms(): no params data found [ 875.126808][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.143293][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.154538][ T5074] bridge_slave_0: entered allmulticast mode [ 875.168748][ T5074] bridge_slave_0: entered promiscuous mode [ 875.195015][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.240050][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.264073][ T5074] bridge_slave_1: entered allmulticast mode [ 875.280647][ T5074] bridge_slave_1: entered promiscuous mode [ 875.299529][ T5148] netlink: 'syz.0.8953': attribute type 33 has an invalid length. [ 875.327247][ T5148] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8953'. [ 875.396553][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.448711][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.563870][ T5074] team0: Port device team_slave_0 added [ 875.569561][ T5160] netlink: 'syz.2.8955': attribute type 6 has an invalid length. [ 875.593493][ T5074] team0: Port device team_slave_1 added [ 875.652236][ T5873] Bluetooth: hci0: command tx timeout [ 875.733818][ T5164] C: entered promiscuous mode [ 875.777699][ T5164] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 875.852139][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.859179][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.913174][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.924711][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8959'. [ 875.933991][ T5172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8959'. [ 875.969554][ T5173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8959'. [ 875.995334][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.042054][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.153832][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.445684][ T5074] hsr_slave_0: entered promiscuous mode [ 876.476839][ T5074] hsr_slave_1: entered promiscuous mode [ 876.492417][ T5074] debugfs: 'hsr0' already exists in 'hsr' [ 876.501713][ T5074] Cannot create hsr debugfs directory [ 877.110357][ T5074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.194829][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8968'. [ 877.276951][ T5074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.439334][ T5074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.478334][ T5228] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 877.515655][ T5229] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 877.857777][ T5242] __nla_validate_parse: 2 callbacks suppressed [ 877.857798][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8974'. [ 877.929066][ T5235] bond0: (slave rose0): Error: Device can not be enslaved while up [ 877.942258][ T5245] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8974'. [ 878.094414][ T5074] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 878.109590][ T5074] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 878.124283][ T5248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8975'. [ 878.137810][ T5074] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 878.157476][ T5074] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 878.446534][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.686197][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.713667][ T5266] mac80211_hwsim hwsim74 syzkaller0: entered promiscuous mode [ 878.723471][ T5266] tipc: Resetting bearer [ 878.736449][T27270] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.743662][T27270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.813526][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.820737][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.942673][T27270] tipc: Resetting bearer [ 879.527190][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.676674][ T5074] veth0_vlan: entered promiscuous mode [ 879.720628][ T5074] veth1_vlan: entered promiscuous mode [ 879.847181][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8989'. [ 879.862128][ T5074] veth0_macvtap: entered promiscuous mode [ 879.893044][ T5074] veth1_macvtap: entered promiscuous mode [ 879.956033][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.979595][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.028581][T27279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.059953][T27272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.082517][T27272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.097786][T27272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.330957][T27277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.357783][T27277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.509748][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.530041][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.445330][ T5345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9001'. [ 881.742930][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9003'. [ 881.753949][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9003'. [ 881.754077][ T5356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9004'. [ 881.808818][ T5356] Bluetooth: MGMT ver 1.23 [ 881.835301][ T5159] Set syz1 is full, maxelem 65536 reached [ 881.874767][ T5362] netlink: 'syz.0.9004': attribute type 1 has an invalid length. [ 881.929065][ T5353] smc: net device erspan0 erased user defined pnetid SYZ0 [ 881.950223][ T5353] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 882.129227][ T5377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9009'. [ 882.260069][ T5385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9011'. [ 882.283966][ T5385] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 882.369898][ T5387] netlink: 'syz.4.9013': attribute type 1 has an invalid length. [ 882.646453][ T5418] tipc: Trying to set illegal importance in message [ 882.658496][ T5414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.155843][ T5444] __nla_validate_parse: 4 callbacks suppressed [ 883.155865][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9030'. [ 883.235158][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9031'. [ 883.460480][ T5465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9035'. [ 883.526478][ T5468] netlink: 'syz.2.9036': attribute type 1 has an invalid length. [ 883.534885][ T5468] netlink: 'syz.2.9036': attribute type 1 has an invalid length. [ 883.652733][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9034'. [ 883.663559][ T5472] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9037'. [ 883.710046][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9034'. [ 883.796588][ T5477] netlink: 'syz.1.9039': attribute type 2 has an invalid length. [ 883.809171][ T5477] netlink: 'syz.1.9039': attribute type 1 has an invalid length. [ 883.838145][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9039'. [ 884.128182][ T5494] sctp: [Deprecated]: syz.3.9045 (pid 5494) Use of int in maxseg socket option. [ 884.128182][ T5494] Use struct sctp_assoc_value instead [ 884.376585][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.387403][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.584823][ T5527] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 884.872721][ T5540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9053'. [ 884.922950][ T5540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9053'. [ 885.427144][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9061'. [ 886.083707][ T5587] lo: entered promiscuous mode [ 886.114858][ T5587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 886.345554][ T5596] tipc: Started in network mode [ 886.379250][ T5596] tipc: Node identity b6ff447ff23e, cluster identity 4711 [ 886.422347][ T5596] tipc: Enabled bearer , priority 0 [ 886.429401][ T5605] syzkaller0: entered promiscuous mode [ 886.452185][ T5605] syzkaller0: entered allmulticast mode [ 886.503733][T27277] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.537372][T27277] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.569096][ T5596] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 886.682328][T27277] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.973355][ T5596] tipc: Resetting bearer [ 886.986965][T27277] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.153656][ T5595] tipc: Resetting bearer [ 887.429097][ T5595] tipc: Disabling bearer [ 887.443179][ T8121] tipc: Node number set to 1153516671 [ 887.469823][ T5633] ipvlan0: entered promiscuous mode [ 887.632286][ T5646] sysfs: cannot create duplicate filename '/class/ieee80211/!d4QN寿$ULvDUDw}z' [ 887.686440][ T5646] CPU: 0 UID: 0 PID: 5646 Comm: syz.3.9084 Not tainted syzkaller #0 PREEMPT(full) [ 887.686472][ T5646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 887.686486][ T5646] Call Trace: [ 887.686496][ T5646] [ 887.686506][ T5646] dump_stack_lvl+0x189/0x250 [ 887.686541][ T5646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.686568][ T5646] ? __pfx__printk+0x10/0x10 [ 887.686604][ T5646] ? kernfs_path_from_node+0x2f/0x290 [ 887.686629][ T5646] ? kernfs_path_from_node+0x250/0x290 [ 887.686651][ T5646] ? kernfs_path_from_node+0x2f/0x290 [ 887.686680][ T5646] sysfs_warn_dup+0x8e/0xa0 [ 887.686704][ T5646] sysfs_do_create_link_sd+0xc0/0x110 [ 887.686753][ T5646] device_add_class_symlinks+0x1cf/0x240 [ 887.686784][ T5646] device_add+0x475/0xb50 [ 887.686815][ T5646] wiphy_register+0x1ba6/0x28d0 [ 887.686858][ T5646] ? __pfx_wiphy_register+0x10/0x10 [ 887.686880][ T5646] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 887.686915][ T5646] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 887.686952][ T5646] ieee80211_register_hw+0x3484/0x4100 [ 887.687004][ T5646] ? ieee80211_register_hw+0x1491/0x4100 [ 887.687045][ T5646] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 887.687080][ T5646] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 887.687122][ T5646] ? __hrtimer_setup+0x187/0x210 [ 887.687151][ T5646] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 887.687177][ T5646] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 887.687243][ T5646] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 887.687272][ T5646] ? trace_kmalloc+0x1f/0xd0 [ 887.687297][ T5646] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 887.687327][ T5646] ? kstrndup+0xbf/0x160 [ 887.687362][ T5646] hwsim_new_radio_nl+0xea4/0x1b10 [ 887.687397][ T5646] ? __pfx___nla_validate_parse+0x10/0x10 [ 887.687439][ T5646] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 887.687486][ T5646] ? __nla_parse+0x40/0x60 [ 887.687514][ T5646] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 887.687555][ T5646] genl_family_rcv_msg_doit+0x215/0x300 [ 887.687594][ T5646] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 887.687641][ T5646] ? bpf_lsm_capable+0x9/0x20 [ 887.687669][ T5646] ? security_capable+0x7e/0x2e0 [ 887.687710][ T5646] genl_rcv_msg+0x60e/0x790 [ 887.687747][ T5646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.687775][ T5646] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 887.687825][ T5646] netlink_rcv_skb+0x205/0x470 [ 887.687845][ T5646] ? __lock_acquire+0xab9/0xd20 [ 887.687876][ T5646] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.687906][ T5646] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 887.687954][ T5646] ? down_read+0x1ad/0x2e0 [ 887.687982][ T5646] genl_rcv+0x28/0x40 [ 887.688008][ T5646] netlink_unicast+0x82f/0x9e0 [ 887.688053][ T5646] ? __pfx_netlink_unicast+0x10/0x10 [ 887.688094][ T5646] ? netlink_sendmsg+0x642/0xb30 [ 887.688114][ T5646] ? skb_put+0x11b/0x210 [ 887.688149][ T5646] netlink_sendmsg+0x805/0xb30 [ 887.688184][ T5646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.688212][ T5646] ? aa_sock_msg_perm+0xf1/0x1d0 [ 887.688237][ T5646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 887.688260][ T5646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.688284][ T5646] __sock_sendmsg+0x219/0x270 [ 887.688320][ T5646] ____sys_sendmsg+0x505/0x830 [ 887.688353][ T5646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.688392][ T5646] ? import_iovec+0x74/0xa0 [ 887.688425][ T5646] ___sys_sendmsg+0x21f/0x2a0 [ 887.688454][ T5646] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.688532][ T5646] ? __fget_files+0x2a/0x420 [ 887.688552][ T5646] ? __fget_files+0x3a0/0x420 [ 887.688584][ T5646] __x64_sys_sendmsg+0x19b/0x260 [ 887.688621][ T5646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.688662][ T5646] ? rcu_is_watching+0x15/0xb0 [ 887.688692][ T5646] ? do_syscall_64+0xbe/0x3b0 [ 887.688732][ T5646] do_syscall_64+0xfa/0x3b0 [ 887.688753][ T5646] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.688772][ T5646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.688790][ T5646] ? clear_bhb_loop+0x60/0xb0 [ 887.688812][ T5646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.688829][ T5646] RIP: 0033:0x7f9447f8ec29 [ 887.688846][ T5646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.688862][ T5646] RSP: 002b:00007f9448d45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.688882][ T5646] RAX: ffffffffffffffda RBX: 00007f94481d5fa0 RCX: 00007f9447f8ec29 [ 887.688895][ T5646] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 887.688907][ T5646] RBP: 00007f9448011e41 R08: 0000000000000000 R09: 0000000000000000 [ 887.688918][ T5646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.688928][ T5646] R13: 00007f94481d6038 R14: 00007f94481d5fa0 R15: 00007ffee6df2bf8 [ 887.688959][ T5646] [ 888.295813][ T5650] hsr0 speed is unknown, defaulting to 1000 [ 888.385527][ T5650] wg1 speed is unknown, defaulting to 1000 [ 889.133938][ T5690] netlink: 'syz.3.9095': attribute type 1 has an invalid length. [ 889.162551][ T5690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.209630][ T5692] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 889.260781][ T5692] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 889.369135][ T5650] wg1 speed is unknown, defaulting to 1000 [ 889.963885][ T5710] __nla_validate_parse: 8 callbacks suppressed [ 889.963906][ T5710] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9101'. [ 890.687891][ T5729] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9108'. [ 891.359602][ T5751] netlink: 'syz.0.9115': attribute type 1 has an invalid length. [ 891.407452][ T5751] netlink: 'syz.0.9115': attribute type 2 has an invalid length. [ 891.451100][ T5751] netlink: 'syz.0.9115': attribute type 2 has an invalid length. [ 891.533330][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9115'. [ 891.543446][ T5757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9116'. [ 891.578137][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9115'. [ 891.783183][ T5765] openvswitch: netlink: Actions may not be safe on all matching packets [ 892.400011][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9128'. [ 892.586842][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9129'. [ 892.766956][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9133'. [ 892.944020][ T5833] C: renamed from lo [ 893.308768][ T5842] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9135'. [ 893.424585][ T5857] netlink: 'syz.2.9135': attribute type 2 has an invalid length. [ 893.441048][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9135'. [ 893.463634][ T5842] netlink: 'syz.2.9135': attribute type 2 has an invalid length. [ 914.821024][ T5863] __nla_validate_parse: 1 callbacks suppressed [ 914.821045][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9143'. [ 914.872761][ T5868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9140'. [ 914.884293][ T5866] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9141'. [ 915.193859][ T5892] netlink: 'syz.3.9150': attribute type 10 has an invalid length. [ 915.204643][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9148'. [ 915.232375][ T5884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 915.277738][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.293638][ T5892] bridge_slave_1: left allmulticast mode [ 915.312288][ T5892] bridge_slave_1: left promiscuous mode [ 915.320025][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.365041][ T5892] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 915.402399][ T5894] hsr0 speed is unknown, defaulting to 1000 [ 915.429179][ T5898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 915.430646][ T5894] wg1 speed is unknown, defaulting to 1000 [ 915.436563][ T5898] IPv6: NLM_F_CREATE should be set when creating new route [ 915.564101][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9152'. [ 915.588361][ T5908] netlink: 'syz.3.9153': attribute type 1 has an invalid length. [ 915.734660][ T5914] bond1: (slave bridge1): making interface the new active one [ 915.743368][ T5914] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 915.852734][ T5894] wg1 speed is unknown, defaulting to 1000 [ 916.125252][ T5933] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 916.539038][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9164'. [ 916.561884][ T5962] netlink: 'syz.4.9164': attribute type 23 has an invalid length. [ 916.635353][ T5957] gre1: entered promiscuous mode [ 916.666984][ T5957] tipc: Enabled bearer , priority 0 [ 916.756941][ T5967] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 916.850908][ T5971] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9166'. [ 916.889310][ T5957] syzkaller0: entered promiscuous mode [ 916.898445][ T5957] syzkaller0: entered allmulticast mode [ 916.905034][ T5957] tipc: Resetting bearer [ 916.924330][ T5965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9166'. [ 917.069438][ T5967] veth3: entered allmulticast mode [ 917.107609][ T5957] tipc: Resetting bearer [ 919.188050][ T5957] tipc: Disabling bearer [ 919.347897][ T5992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9173'. [ 919.465146][ T5993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.475972][ T6000] netlink: 'syz.2.9174': attribute type 15 has an invalid length. [ 919.588377][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9176'. [ 920.182210][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9182'. [ 920.212617][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9182'. [ 920.243697][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9183'. [ 920.284136][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9183'. [ 920.312330][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9183'. [ 920.511865][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9185'. [ 920.558929][ T6038] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 920.859972][ T4523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 920.885361][ T4523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 920.893718][ T4523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 920.912785][ T4523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 920.922007][ T4523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 921.053809][ T6048] hsr0 speed is unknown, defaulting to 1000 [ 921.065193][ T6054] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9190'. [ 921.065487][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9191'. [ 921.076556][ T6048] wg1 speed is unknown, defaulting to 1000 [ 921.114694][ T6054] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9190'. [ 921.134427][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9191'. [ 921.429100][ T6061] syzkaller0: entered allmulticast mode [ 921.436574][ T6061] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 921.476295][ T6061] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 921.610873][ T6048] wg1 speed is unknown, defaulting to 1000 [ 922.130907][ T6094] netlink: 'syz.1.9202': attribute type 1 has an invalid length. [ 922.200598][ T6097] netlink: 'syz.2.9203': attribute type 11 has an invalid length. [ 922.515503][ T6114] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20000 [ 922.657181][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 922.698307][ T6121] syzkaller0: entered promiscuous mode [ 922.704109][ T6121] syzkaller0: entered allmulticast mode [ 922.724824][ T6122] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 922.753385][ T6121] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 922.792947][ T6126] netlink: 'syz.4.9210': attribute type 18 has an invalid length. [ 922.830087][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.838907][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.848792][ T6048] bridge_slave_0: entered allmulticast mode [ 922.858149][ T6048] bridge_slave_0: entered promiscuous mode [ 922.868052][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.876814][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.884836][ T6048] bridge_slave_1: entered allmulticast mode [ 922.893197][ T6048] bridge_slave_1: entered promiscuous mode [ 922.936051][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.949302][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.993492][ T6048] team0: Port device team_slave_0 added [ 923.003067][ T6048] team0: Port device team_slave_1 added [ 923.011533][ T5873] Bluetooth: hci1: command tx timeout [ 923.045052][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.052955][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.079734][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.094679][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.101820][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.128543][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.268443][ T6048] hsr_slave_0: entered promiscuous mode [ 923.278787][ T6048] hsr_slave_1: entered promiscuous mode [ 923.292804][ T6048] debugfs: 'hsr0' already exists in 'hsr' [ 923.298851][ T6048] Cannot create hsr debugfs directory [ 923.677885][ T6151] netlink: 'syz.3.9215': attribute type 1 has an invalid length. [ 924.240696][ T6166] netlink: 'syz.2.9221': attribute type 2 has an invalid length. [ 924.299170][ T6048] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.317864][ T6048] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 924.348283][ T6168] tipc: Enabling of bearer rejected, failed to enable media [ 924.414038][ T6048] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.428084][ T6048] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 924.517021][ T6048] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.542811][ T6048] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 924.639045][ T6183] IPv6: NLM_F_CREATE should be specified when creating new route [ 924.668908][ T6048] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.692419][ T6048] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 925.091349][ T5873] Bluetooth: hci1: command tx timeout [ 925.200388][ T6048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 925.226626][ T6199] __nla_validate_parse: 13 callbacks suppressed [ 925.226647][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9233'. [ 925.298364][ T6048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 925.307996][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9236'. [ 925.325062][ T6048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 925.388237][ T6048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 925.607424][ T6234] pim6reg1: entered promiscuous mode [ 925.632763][ T6234] pim6reg1: entered allmulticast mode [ 925.772569][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9243'. [ 925.809380][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.853085][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9243'. [ 925.880901][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.905800][ T6249] netlink: 'syz.1.9244': attribute type 1 has an invalid length. [ 925.975857][T27270] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.983232][T27270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.998109][ T6245] IPVS: persistence engine module ip_vs_pe_ not found [ 926.012709][T27270] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.019948][T27270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.083495][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9246'. [ 926.114726][ T6249] bond1: (slave bridge2): making interface the new active one [ 926.123665][ T6249] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 926.140218][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9246'. [ 926.735227][ T6276] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9250'. [ 926.746067][ T6276] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9250'. [ 926.834303][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.923434][ T6280] bond2: entered allmulticast mode [ 926.930098][ T6280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 926.940480][ T6280] bridge0: port 3(bond2) entered blocking state [ 926.947657][ T6280] bridge0: port 3(bond2) entered disabled state [ 926.957966][ T6280] bond2: entered promiscuous mode [ 926.965418][ T6280] bridge0: port 3(bond2) entered blocking state [ 926.971909][ T6280] bridge0: port 3(bond2) entered forwarding state [ 926.982536][ T6289] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 927.007715][T27279] bridge0: port 3(bond2) entered disabled state [ 927.106628][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.174470][ T5873] Bluetooth: hci1: command tx timeout [ 927.238657][ T6048] veth0_vlan: entered promiscuous mode [ 927.260245][ T6048] veth1_vlan: entered promiscuous mode [ 927.275632][ T6305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 927.361565][ T6048] veth0_macvtap: entered promiscuous mode [ 927.440291][ T6048] veth1_macvtap: entered promiscuous mode [ 927.469180][ T6309] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 927.554652][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9261'. [ 927.575817][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.576489][ T6314] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20003 [ 927.595945][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.614573][ T6312] netlink: 'syz.4.9261': attribute type 30 has an invalid length. [ 927.624671][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9261'. [ 927.656796][T27276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.770567][T27276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.812543][T27276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.868733][T27276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.156567][ T6340] batman_adv: batadv0: Removing interface: team0 [ 928.247837][ T6343] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 928.375312][ T6340] team0: Port device 0! removed [ 928.419913][ T6340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 928.506328][ T6343] bond0: entered allmulticast mode [ 928.521800][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.553710][ T6455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.585431][ T6455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.764605][T27279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.788295][T27279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.878979][ T6362] veth1_to_bond: entered allmulticast mode [ 928.898050][ T6362] netlink: 'syz.1.9274': attribute type 1 has an invalid length. [ 929.075107][ T6370] bond0: (slave bond_slave_1): Releasing backup interface [ 929.165404][ T6370] veth1_to_bond (unregistering): left allmulticast mode [ 929.173511][ T6381] netlink: 'syz.3.9278': attribute type 2 has an invalid length. [ 929.256340][ T5873] Bluetooth: hci1: command tx timeout [ 929.937610][ T6417] netlink: 'syz.0.9290': attribute type 11 has an invalid length. [ 929.998191][ T6418] can: request_module (can-proto-0) failed. [ 930.257627][ T6435] netlink: 'syz.2.9295': attribute type 10 has an invalid length. [ 930.267172][ T6435] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 930.360897][ T6437] __nla_validate_parse: 10 callbacks suppressed [ 930.360921][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9296'. [ 930.881010][ T6465] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 931.068503][ T6477] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20000 [ 931.099629][ T6478] IPVS: set_ctl: invalid protocol: 137 10.1.1.0:20000 [ 931.115556][ T6472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.273861][ T6488] C: left promiscuous mode [ 931.303079][ T6493] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9310'. [ 931.305313][ T6488] tunl0: left promiscuous mode [ 931.352706][ T6488] batadv0: left promiscuous mode [ 931.372885][ T6488] batadv0: left allmulticast mode [ 931.390778][ T6488] veth0_to_bond: left allmulticast mode [ 931.424378][ T6488] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 931.447564][ T6488] veth3: left promiscuous mode [ 931.455698][ T6488] veth3: left allmulticast mode [ 931.510736][ T6488] geneve2: left promiscuous mode [ 931.519097][ T6488] geneve2: left allmulticast mode [ 931.568895][ T6488] bridge3: left allmulticast mode [ 931.587227][ T6506] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9311'. [ 931.599607][ T6488] veth9: left allmulticast mode [ 931.614854][ T6508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 931.630416][ T6488] ip6erspan0: left promiscuous mode [ 931.638057][ T6488] ip6erspan0: left allmulticast mode [ 931.706294][T27279] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.746557][T27279] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 931.782723][T27279] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.804126][T27279] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 931.825373][T27279] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.835250][T27279] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 931.920338][T27279] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.935413][T27279] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 931.946648][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9316'. [ 931.980536][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9313'. [ 931.990724][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9313'. [ 932.136927][ T6528] netlink: 'syz.2.9320': attribute type 1 has an invalid length. [ 932.316504][ T6535] tipc: Enabled bearer , priority 0 [ 932.325627][ T6535] syzkaller0: entered promiscuous mode [ 932.331318][ T6535] syzkaller0: entered allmulticast mode [ 932.341871][ T6535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 932.397989][ T6535] tipc: Resetting bearer [ 932.426132][ T6534] tipc: Resetting bearer [ 932.748818][ T6534] tipc: Disabling bearer [ 932.862479][ T6549] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9327'. [ 932.888188][ T6551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 932.906145][ T6549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9327'. [ 932.956135][ T6553] nbd: couldn't find a device at index 3 [ 933.038298][ T6557] xt_l2tp: invalid flags combination: 8 [ 933.157792][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.408508][ T6577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9337'. [ 933.526417][ T6579] syzkaller0: entered promiscuous mode [ 933.549054][ T6579] syzkaller0: entered allmulticast mode [ 933.561103][ T6586] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9340'. [ 933.676177][ T6591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.848184][ T3466] IPVS: starting estimator thread 0... [ 933.944379][ T6598] IPVS: using max 23 ests per chain, 55200 per kthread [ 934.105371][ T6600] netlink: 'syz.1.9343': attribute type 1 has an invalid length. [ 934.282549][ T6611] netlink: 'syz.0.9347': attribute type 1 has an invalid length. [ 935.112501][ T6649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.036216][ T6633] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 937.049053][ T6633] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 937.059304][ T6633] gretap1: entered promiscuous mode [ 937.069860][ T6633] gretap1: entered allmulticast mode [ 937.105007][ T6637] dvmrp0: entered allmulticast mode [ 937.288455][ T6662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 937.516416][ T6678] __nla_validate_parse: 7 callbacks suppressed [ 937.516439][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9365'. [ 937.565852][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9367'. [ 937.578463][ T6678] openvswitch: netlink: Flow actions attr not present in new flow. [ 937.588236][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9367'. [ 937.743017][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9371'. [ 937.819381][ T6699] warn_alloc: 1 callbacks suppressed [ 937.819400][ T6699] syz.2.9373: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 937.861772][ T6699] CPU: 1 UID: 0 PID: 6699 Comm: syz.2.9373 Not tainted syzkaller #0 PREEMPT(full) [ 937.861816][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 937.861834][ T6699] Call Trace: [ 937.861843][ T6699] [ 937.861853][ T6699] dump_stack_lvl+0x189/0x250 [ 937.861900][ T6699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.861926][ T6699] ? __pfx__printk+0x10/0x10 [ 937.861956][ T6699] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 937.861983][ T6699] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 937.862010][ T6699] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 937.862039][ T6699] warn_alloc+0x214/0x310 [ 937.862072][ T6699] ? stack_depot_save_flags+0x40/0x860 [ 937.862108][ T6699] ? __pfx_warn_alloc+0x10/0x10 [ 937.862143][ T6699] ? kasan_save_track+0x4f/0x80 [ 937.862170][ T6699] ? xskq_create+0x56/0x170 [ 937.862189][ T6699] ? xsk_init_queue+0xb0/0x110 [ 937.862205][ T6699] ? xsk_setsockopt+0x4dc/0x8d0 [ 937.862233][ T6699] ? do_sock_setsockopt+0x17c/0x1b0 [ 937.862257][ T6699] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 937.862279][ T6699] ? do_syscall_64+0xfa/0x3b0 [ 937.862301][ T6699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.862331][ T6699] __vmalloc_node_range_noprof+0x125/0x12f0 [ 937.862400][ T6699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 937.862432][ T6699] ? xskq_create+0x56/0x170 [ 937.862455][ T6699] ? __kasan_kmalloc+0x93/0xb0 [ 937.862489][ T6699] vmalloc_user_noprof+0xad/0xf0 [ 937.862520][ T6699] ? xskq_create+0xbf/0x170 [ 937.862543][ T6699] xskq_create+0xbf/0x170 [ 937.862567][ T6699] xsk_init_queue+0xb0/0x110 [ 937.862591][ T6699] xsk_setsockopt+0x4dc/0x8d0 [ 937.862626][ T6699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 937.862658][ T6699] ? __pfx_aa_sk_perm+0x10/0x10 [ 937.862694][ T6699] ? aa_sock_opt_perm+0xff/0x1b0 [ 937.862720][ T6699] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 937.862743][ T6699] ? __pfx_xsk_setsockopt+0x10/0x10 [ 937.862792][ T6699] do_sock_setsockopt+0x17c/0x1b0 [ 937.862822][ T6699] __x64_sys_setsockopt+0x13f/0x1b0 [ 937.862853][ T6699] do_syscall_64+0xfa/0x3b0 [ 937.862880][ T6699] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.862901][ T6699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.862922][ T6699] ? clear_bhb_loop+0x60/0xb0 [ 937.862947][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.862967][ T6699] RIP: 0033:0x7ff1dbd8ec29 [ 937.862986][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.863004][ T6699] RSP: 002b:00007ff1dcc25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 937.863025][ T6699] RAX: ffffffffffffffda RBX: 00007ff1dbfd5fa0 RCX: 00007ff1dbd8ec29 [ 937.863040][ T6699] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 937.863053][ T6699] RBP: 00007ff1dbe11e41 R08: 0000000000000004 R09: 0000000000000000 [ 937.863066][ T6699] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.863080][ T6699] R13: 00007ff1dbfd6038 R14: 00007ff1dbfd5fa0 R15: 00007fff7a367668 [ 937.863114][ T6699] [ 937.863123][ T6699] Mem-Info: [ 937.925793][ T6704] netlink: 'syz.0.9374': attribute type 10 has an invalid length. [ 938.026075][ T6699] active_anon:4596 inactive_anon:0 isolated_anon:0 [ 938.026075][ T6699] active_file:3336 inactive_file:40209 isolated_file:0 [ 938.026075][ T6699] unevictable:768 dirty:87 writeback:0 [ 938.026075][ T6699] slab_reclaimable:14001 slab_unreclaimable:162449 [ 938.026075][ T6699] mapped:29336 shmem:1356 pagetables:1152 [ 938.026075][ T6699] sec_pagetables:0 bounce:0 [ 938.026075][ T6699] kernel_misc_reclaimable:0 [ 938.026075][ T6699] free:1257647 free_pcp:13295 free_cma:0 [ 938.250229][ T6699] Node 0 active_anon:18376kB inactive_anon:0kB active_file:13344kB inactive_file:160636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117148kB dirty:344kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16728kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 938.284650][ T6699] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 938.317545][ T6699] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 938.337925][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9377'. [ 938.352207][ T6699] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 938.363609][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9373'. [ 938.363750][ T6699] Node 0 [ 938.374032][ T6710] netlink: 'syz.1.9376': attribute type 6 has an invalid length. [ 938.381421][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9377'. [ 938.385777][ T6699] DMA32 free:1122876kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18424kB inactive_anon:0kB active_file:13344kB inactive_file:159064kB unevictable:1536kB writepending:364kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:41084kB local_pcp:20496kB free_cma:0kB [ 938.408280][ T6700] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9373'. [ 938.432467][ T6699] lowmem_reserve[]: 0 0 1 1 1 [ 938.441894][ T6699] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 938.482403][ T6699] lowmem_reserve[]: 0 0 0 0 0 [ 938.487277][ T6699] Node 1 Normal free:3893328kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11076kB local_pcp:5568kB free_cma:0kB [ 938.553315][ T6699] lowmem_reserve[]: 0 0 0 0 0 [ 938.564321][ T6699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 938.622509][ T6699] Node 0 DMA32: 1177*4kB (UM) 539*8kB (UM) 232*16kB (UME) 303*32kB (UM) 92*64kB (UME) 54*128kB (UM) 33*256kB (UM) 16*512kB (UME) 6*1024kB (M) 4*2048kB (ME) 258*4096kB (UM) = 1122972kB [ 938.648046][ T6699] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 938.667361][ T6699] Node 1 Normal: 242*4kB (UME) 59*8kB (UME) 57*16kB (UME) 257*32kB (UME) 78*64kB (UME) 15*128kB (UME) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3893328kB [ 938.705745][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.726265][ T6699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.737030][ T6699] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 938.748644][ T6699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 938.753572][ T6707] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 938.766834][ T6699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 938.798737][ T6699] 44897 total pagecache pages [ 938.804622][ T6699] 0 pages in swap cache [ 938.810694][ T6699] Free swap = 124996kB [ 938.817635][ T6699] Total swap = 124996kB [ 938.830074][ T6699] 2097051 pages RAM [ 938.833759][ T6704] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 938.836396][ T6699] 0 pages HighMem/MovableOnly [ 938.848409][ T6699] 425672 pages reserved [ 938.853517][ T6699] 0 pages cma reserved [ 938.872362][ T6715] dvmrp0: entered allmulticast mode [ 938.908699][ T6713] dvmrp0: left allmulticast mode [ 939.339882][ T6750] netlink: 'syz.0.9388': attribute type 39 has an invalid length. [ 939.378201][ T6754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9389'. [ 939.434078][ T6759] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9389'. [ 939.880935][ T6766] erspan0: entered promiscuous mode [ 939.944286][ T6766] gretap0: entered promiscuous mode [ 939.963690][ T6766] gretap0: left promiscuous mode [ 940.000196][ T6766] erspan0: left promiscuous mode [ 940.040173][ T6772] netlink: 'syz.1.9395': attribute type 11 has an invalid length. [ 940.074372][ T6776] netlink: 'syz.0.9396': attribute type 4 has an invalid length. [ 940.137940][ T6780] netlink: 'syz.3.9398': attribute type 1 has an invalid length. [ 940.182548][ T6780] netlink: 'syz.3.9398': attribute type 3 has an invalid length. [ 940.250497][ T6783] netlink: 'syz.1.9399': attribute type 12 has an invalid length. [ 940.296000][ T6789] lo: entered promiscuous mode [ 940.302952][ T6789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 940.609315][ T6802] hsr0 speed is unknown, defaulting to 1000 [ 940.617914][ T6802] wg1 speed is unknown, defaulting to 1000 [ 940.627183][ T6807] netlink: 'syz.2.9407': attribute type 1 has an invalid length. [ 940.660700][ T6804] netlink: 'syz.3.9406': attribute type 5 has an invalid length. [ 940.709950][ T6804] netlink: 'syz.3.9406': attribute type 5 has an invalid length. [ 940.737390][ T6807] 8021q: adding VLAN 0 to HW filter on device bond6 [ 940.940827][ T6811] bond6: (slave veth15): Enslaving as an active interface with a down link [ 941.000937][ T6802] wg1 speed is unknown, defaulting to 1000 [ 941.443378][ T6815] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 941.559258][ T6807] bond6: (slave veth17): Enslaving as an active interface with a down link [ 941.983603][ T6838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.030212][ T6836] netlink: 'syz.0.9414': attribute type 1 has an invalid length. [ 942.148630][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 942.653734][ T6851] __nla_validate_parse: 136 callbacks suppressed [ 942.653758][ T6851] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9418'. [ 942.736461][ T6849] netlink: 'syz.1.9416': attribute type 29 has an invalid length. [ 942.848223][ T6857] openvswitch: netlink: Actions may not be safe on all matching packets [ 942.990489][T17746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 943.020370][T17746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 943.046505][T17746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 943.070460][T17746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 943.078595][T17746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 943.267288][ T6858] hsr0 speed is unknown, defaulting to 1000 [ 943.327676][ T6858] wg1 speed is unknown, defaulting to 1000 [ 943.343876][ T6870] team0: Device hsr_slave_0 failed to register rx_handler [ 943.435184][ T6872] veth1_macvtap: left promiscuous mode [ 944.016819][ T6858] wg1 speed is unknown, defaulting to 1000 [ 944.699263][ T6908] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9434'. [ 944.778696][ T6914] openvswitch: netlink: Flow key attr not present in new flow. [ 945.047186][ T6929] validate_nla: 4 callbacks suppressed [ 945.047207][ T6929] netlink: 'syz.4.9440': attribute type 1 has an invalid length. [ 945.172344][ T5873] Bluetooth: hci4: command tx timeout [ 945.330231][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9441'. [ 945.345106][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9440'. [ 945.370672][ T6936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 945.382712][ T6936] bond3: (slave bond4): making interface the new active one [ 945.390797][ T6936] bond3: (slave bond4): Enslaving as an active interface with an up link [ 945.524555][ T6929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 945.580371][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 945.930022][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9445'. [ 945.966325][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9445'. [ 945.995584][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9448'. [ 946.008239][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9448'. [ 946.019613][ T6980] netlink: 'syz.4.9449': attribute type 23 has an invalid length. [ 946.196221][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.203892][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.211309][ T6858] bridge_slave_0: entered allmulticast mode [ 946.219748][ T6858] bridge_slave_0: entered promiscuous mode [ 946.231006][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.238387][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.246028][ T6858] bridge_slave_1: entered allmulticast mode [ 946.256348][ T6858] bridge_slave_1: entered promiscuous mode [ 946.422405][ T6998] netlink: 'syz.0.9453': attribute type 1 has an invalid length. [ 946.450346][ T6998] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9453'. [ 946.477920][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.517727][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.701052][ T7015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9458'. [ 946.735801][ T7015] netlink: 'syz.1.9458': attribute type 5 has an invalid length. [ 946.773141][ T7008] netlink: 'syz.1.9458': attribute type 1 has an invalid length. [ 946.795425][ T6858] team0: Port device team_slave_0 added [ 946.824554][ T6858] team0: Port device team_slave_1 added [ 946.964140][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.982133][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.079152][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.133457][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.140457][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.233841][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.251607][ T5873] Bluetooth: hci4: command tx timeout [ 947.845251][ T6858] hsr_slave_0: entered promiscuous mode [ 947.882720][ T6858] hsr_slave_1: entered promiscuous mode [ 947.889351][ T6858] debugfs: 'hsr0' already exists in 'hsr' [ 947.946167][ T6858] Cannot create hsr debugfs directory [ 948.679926][ T7083] __nla_validate_parse: 2 callbacks suppressed [ 948.679947][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9473'. [ 948.775345][ T7088] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 948.955534][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9476'. [ 949.057311][ T7098] syzkaller1: entered promiscuous mode [ 949.077447][ T7098] syzkaller1: entered allmulticast mode [ 949.196435][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9479'. [ 949.230044][ T7102] netlink: 'syz.4.9479': attribute type 2 has an invalid length. [ 949.280146][ T7102] netlink: 'syz.4.9479': attribute type 2 has an invalid length. [ 949.306651][ T7102] netlink: 'syz.4.9479': attribute type 1 has an invalid length. [ 949.332084][ T5873] Bluetooth: hci4: command tx timeout [ 949.350081][ T7106] tipc: Enabled bearer , priority 0 [ 949.364005][ T7104] syzkaller0: entered promiscuous mode [ 949.369636][ T7104] syzkaller0: entered allmulticast mode [ 949.376582][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9481'. [ 949.485399][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9483'. [ 949.502751][ T7104] tipc: Resetting bearer [ 949.535808][ T7103] tipc: Resetting bearer [ 949.615559][ T7103] tipc: Disabling bearer [ 949.813289][ T7131] netlink: 'syz.3.9490': attribute type 2 has an invalid length. [ 949.831980][ T7131] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9490'. [ 949.849535][ T7132] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9487'. [ 950.096058][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9494'. [ 950.155970][ T7149] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9492'. [ 950.158597][ T6858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 950.205989][ T6858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 950.212588][ T7151] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9495'. [ 950.241285][ T6858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 950.276039][ T6858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 950.415451][ T7167] tipc: Enabling of bearer rejected, failed to enable media [ 950.489343][ T7169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 950.689166][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.777238][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.810636][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.817928][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.939466][T27273] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.946747][T27273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.979028][ T7185] vlan0: entered promiscuous mode [ 950.987028][ T7185] syz_tun: entered promiscuous mode [ 951.159138][ T6858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 951.189462][ T6858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 951.415612][ T5873] Bluetooth: hci4: command tx timeout [ 951.924205][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.457091][ T7240] bond0: (slave rose0): Error: Device can not be enslaved while up [ 952.552054][ T6858] veth0_vlan: entered promiscuous mode [ 952.583582][ T6858] veth1_vlan: entered promiscuous mode [ 952.668786][ T6858] veth0_macvtap: entered promiscuous mode [ 952.728205][ T6858] veth1_macvtap: entered promiscuous mode [ 952.791107][ T7251] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 952.799632][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.806640][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.917182][ T6455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.966703][ T6455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.989602][ T6455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.016952][ T7261] netlink: 'syz.3.9524': attribute type 11 has an invalid length. [ 953.092411][ T6455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.691028][ T6455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.705934][ T6455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.874602][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.899339][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.566192][ T7305] dvmrp1: entered allmulticast mode [ 954.813872][ T7333] __nla_validate_parse: 6 callbacks suppressed [ 954.813894][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9547'. [ 954.835528][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9547'. [ 954.979189][ T7340] tipc: Enabling of bearer rejected, failed to enable media [ 955.034934][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9551'. [ 955.266841][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9555'. [ 955.295769][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9553'. [ 955.420600][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9552'. [ 955.667846][ T7378] netlink: 'syz.3.9560': attribute type 1 has an invalid length. [ 955.967719][ T7392] netlink: 'syz.0.9568': attribute type 1 has an invalid length. [ 955.980353][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9568'. [ 956.132942][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9569'. [ 956.179332][ T8115] IPVS: starting estimator thread 0... [ 956.272295][ T7397] IPVS: using max 33 ests per chain, 79200 per kthread [ 956.607496][T17746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 956.620642][T17746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 956.633128][T17746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 956.662835][T17746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 956.684565][T17746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 956.990945][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9574'. [ 957.020677][ T7406] hsr0 speed is unknown, defaulting to 1000 [ 957.046456][ T7406] wg1 speed is unknown, defaulting to 1000 [ 957.568830][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9580'. [ 958.489086][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.509890][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.771842][T17746] Bluetooth: hci3: command tx timeout [ 958.942163][ T7406] wg1 speed is unknown, defaulting to 1000 [ 958.990477][ T3485] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.033863][ T3485] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.072869][ T3485] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.093436][ T3485] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.629468][ T7481] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 959.717352][ T7485] Unsupported ieee802154 address type: 0 [ 959.757872][ T7485] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 959.791089][ T7485] tunl0: entered promiscuous mode [ 959.796571][ T7485] netlink: 'syz.1.9594': attribute type 3 has an invalid length. [ 960.083009][ T7498] __nla_validate_parse: 3 callbacks suppressed [ 960.083032][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9598'. [ 960.299208][ T7511] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 960.530639][ T7406] chnl_net:caif_netlink_parms(): no params data found [ 960.703119][ T7533] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9607'. [ 960.830092][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.850843][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.859595][T17746] Bluetooth: hci3: command tx timeout [ 960.880179][ T7406] bridge_slave_0: entered allmulticast mode [ 960.899351][ T7406] bridge_slave_0: entered promiscuous mode [ 960.917437][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.927011][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.935729][ T7406] bridge_slave_1: entered allmulticast mode [ 960.946550][ T7406] bridge_slave_1: entered promiscuous mode [ 960.979918][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9610'. [ 961.050276][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9611'. [ 961.113546][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.146197][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.269885][ T7406] team0: Port device team_slave_0 added [ 961.288877][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9613'. [ 961.299095][ T7406] team0: Port device team_slave_1 added [ 961.389865][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.409981][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.460792][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.479237][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.488271][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.535778][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.756966][ T7406] hsr_slave_0: entered promiscuous mode [ 961.789590][ T7406] hsr_slave_1: entered promiscuous mode [ 961.808961][ T7406] debugfs: 'hsr0' already exists in 'hsr' [ 961.835329][ T7406] Cannot create hsr debugfs directory [ 962.657754][ T7594] netlink: 'syz.1.9624': attribute type 1 has an invalid length. [ 962.661415][ T7592] policy can only be matched on NF_INET_PRE_ROUTING [ 962.671426][ T7592] unable to load match [ 962.932174][T17746] Bluetooth: hci3: command tx timeout [ 963.184668][ T7608] batadv0: entered promiscuous mode [ 963.213131][ T7608] batadv_slave_1: entered promiscuous mode [ 963.232406][ T7608] batadv_slave_1: left promiscuous mode [ 963.244967][ T7608] batadv0: left promiscuous mode [ 963.432191][ T7612] gretap1: entered promiscuous mode [ 963.476002][ T7617] netlink: 'syz.0.9626': attribute type 3 has an invalid length. [ 963.606013][ T7406] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.798568][ T7406] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.905300][ T7406] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 963.992274][ T7406] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.382250][ T7406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 964.517155][ T7651] netlink: 'syz.3.9637': attribute type 1 has an invalid length. [ 964.532559][ T7406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 964.571129][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.585859][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.707238][ T7406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 964.770965][ T7655] 8021q: adding VLAN 0 to HW filter on device bond5 [ 964.792810][ T7655] bond4: (slave bond5): making interface the new active one [ 964.815454][ T7655] bond4: (slave bond5): Enslaving as an active interface with an up link [ 964.888268][ T7657] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 964.902284][ T7657] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 964.925634][ T7406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 964.980186][ T7668] netlink: 'syz.1.9640': attribute type 21 has an invalid length. [ 964.988998][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9640'. [ 965.014948][T17746] Bluetooth: hci3: command tx timeout [ 965.057469][ T7668] netlink: 'syz.1.9640': attribute type 21 has an invalid length. [ 965.076746][T27276] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.083896][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9640'. [ 965.097941][T27276] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.114131][T27276] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.137743][T27276] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 965.432688][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.453836][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9646'. [ 965.478956][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.497426][T27276] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.504661][T27276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.563595][T27274] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.570792][T27274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.762736][ T7696] syzkaller1: entered promiscuous mode [ 965.768267][ T7696] syzkaller1: entered allmulticast mode [ 966.239250][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.450955][ T7727] vlan2: entered promiscuous mode [ 966.458659][ T7727] bridge0: entered promiscuous mode [ 966.517378][ T7725] netlink: 'syz.0.9654': attribute type 1 has an invalid length. [ 966.560842][ T7725] netlink: 'syz.0.9654': attribute type 4 has an invalid length. [ 966.593596][ T7725] netlink: 192 bytes leftover after parsing attributes in process `syz.0.9654'. [ 966.675416][ T7738] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.9659'. [ 966.898004][ T7752] netlink: 'syz.2.9663': attribute type 8 has an invalid length. [ 966.984514][ T7752] pim6reg1: entered promiscuous mode [ 966.989967][ T7752] pim6reg1: entered allmulticast mode [ 967.098133][ T7759] tc_dump_action: action bad kind [ 967.105830][ T7406] veth0_vlan: entered promiscuous mode [ 967.139409][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9664'. [ 967.142667][ T7406] veth1_vlan: entered promiscuous mode [ 967.203835][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9664'. [ 967.318172][ T7406] veth0_macvtap: entered promiscuous mode [ 967.345978][ T7406] veth1_macvtap: entered promiscuous mode [ 967.413261][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9668'. [ 967.413961][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.429975][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9669'. [ 967.509840][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9669'. [ 967.538050][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.608813][T27279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.640041][T27279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.689942][T27279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.719031][T27279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.758579][ T7782] vlan3: entered promiscuous mode [ 968.062027][T27274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.069916][T27274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.273798][T27274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.302964][T27274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.354451][ T7801] syzkaller1: entered promiscuous mode [ 968.378004][ T7801] syzkaller1: entered allmulticast mode [ 968.900827][ T7841] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 969.000785][ T7842] tipc: Enabled bearer , priority 0 [ 969.009954][ T7841] syzkaller0: entered promiscuous mode [ 969.026876][ T7841] syzkaller0: entered allmulticast mode [ 969.134486][ T7841] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 969.220292][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9688'. [ 969.261677][ T7855] tipc: Resetting bearer [ 969.309534][ T7860] netlink: 'syz.1.9689': attribute type 1 has an invalid length. [ 969.311811][ T7862] netlink: 'syz.4.9691': attribute type 1 has an invalid length. [ 969.349019][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.349434][ T7862] netlink: 'syz.4.9691': attribute type 1 has an invalid length. [ 969.374822][ T7855] tipc: Resetting bearer [ 969.427643][ T7855] tipc: Disabling bearer [ 969.619565][ T5879] IPVS: starting estimator thread 0... [ 969.722449][ T7879] IPVS: using max 28 ests per chain, 67200 per kthread [ 969.820401][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.885788][ T7892] tipc: Started in network mode [ 969.891101][ T7892] tipc: Node identity 7e681dc5546f, cluster identity 4711 [ 969.931706][ T7892] tipc: Enabled bearer , priority 0 [ 969.969862][ T7897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 970.380473][ T7891] tipc: Disabling bearer [ 971.073689][ T7958] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9715'. [ 971.433651][ T7974] netlink: 'syz.1.9718': attribute type 1 has an invalid length. [ 971.480404][ T7974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 971.905429][ T7988] : renamed from vlan0 (while UP) [ 972.239566][ T8006] tap0: tun_chr_ioctl cmd 2148553947 [ 972.567579][ T8021] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9732'. [ 972.604994][ T8021] openvswitch: netlink: Flow key attr not present in new flow. [ 972.620363][ T8025] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9732'. [ 972.672492][ T8025] openvswitch: netlink: Flow key attr not present in new flow. [ 972.813686][ T8027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9734'. [ 972.839734][ T8027] openvswitch: netlink: Flow key attr not present in new flow. [ 972.922464][ T8033] netlink: 'syz.2.9735': attribute type 1 has an invalid length. [ 972.940557][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9735'. [ 973.017849][ T8038] tipc: Enabled bearer , priority 0 [ 973.026149][ T8038] syzkaller0: entered promiscuous mode [ 973.034342][ T8038] syzkaller0: entered allmulticast mode [ 973.098107][ T8042] netlink: 'syz.4.9739': attribute type 26 has an invalid length. [ 973.129175][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9739'. [ 973.151444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.160083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.170250][ T8038] tipc: Resetting bearer [ 973.178411][ T8038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.187022][ T8038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.202069][ T8048] netlink: 'syz.2.9740': attribute type 1 has an invalid length. [ 973.216048][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9739'. [ 973.288509][ T8048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 973.298132][ T8051] netlink: 71 bytes leftover after parsing attributes in process `syz.0.9741'. [ 973.312147][ T8032] tipc: Resetting bearer [ 973.385402][ T8032] tipc: Disabling bearer [ 973.443815][ T8047] bond1: (slave gretap1): making interface the new active one [ 973.454486][ T8047] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 973.624782][ T8060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 973.632098][ T8060] IPv6: NLM_F_CREATE should be set when creating new route [ 973.683347][ T8060] netlink: 'syz.0.9745': attribute type 29 has an invalid length. [ 973.852908][ T8066] syzkaller0: entered promiscuous mode [ 973.879096][ T8066] syzkaller0: entered allmulticast mode [ 973.905631][ T8070] netlink: 'syz.0.9750': attribute type 1 has an invalid length. [ 973.923570][ T8070] netlink: 'syz.0.9750': attribute type 3 has an invalid length. [ 973.982943][ T8070] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9750'. [ 974.449959][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9755'. [ 974.470158][ T8096] netlink: 'syz.2.9757': attribute type 10 has an invalid length. [ 974.559558][ T8096] team0: Device ipvlan1 failed to register rx_handler [ 974.611123][ T8111] netlink: 'syz.4.9760': attribute type 1 has an invalid length. [ 974.825904][ T8111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 974.879431][ T8125] can: request_module (can-proto-4) failed. [ 975.131019][ T8142] nbd: nbd0 already in use [ 975.483226][ T8146] netlink: 'syz.4.9770': attribute type 1 has an invalid length. [ 975.734283][ T8174] netlink: 'syz.0.9778': attribute type 1 has an invalid length. [ 975.754898][ T8174] netlink: 'syz.0.9778': attribute type 2 has an invalid length. [ 975.951678][ T8183] syzkaller1: entered promiscuous mode [ 975.960902][ T8183] syzkaller1: entered allmulticast mode [ 975.994868][ T8185] netlink: 'syz.1.9782': attribute type 10 has an invalid length. [ 976.004529][ T8185] dummy0: entered promiscuous mode [ 976.019500][ T8185] bridge0: port 4(dummy0) entered blocking state [ 976.029550][ T8185] bridge0: port 4(dummy0) entered disabled state [ 976.039832][ T8185] dummy0: entered allmulticast mode [ 976.267083][ T8191] vlan2: entered allmulticast mode [ 976.273605][ T8191] hsr0: entered allmulticast mode [ 976.278823][ T8191] hsr_slave_0: entered allmulticast mode [ 976.286093][ T8191] hsr_slave_1: entered allmulticast mode [ 976.339998][ T8197] __nla_validate_parse: 5 callbacks suppressed [ 976.340020][ T8197] netlink: 788 bytes leftover after parsing attributes in process `syz.3.9786'. [ 976.837615][ T8220] veth1_to_bond: entered allmulticast mode [ 976.879565][ T8222] netlink: 'syz.1.9792': attribute type 1 has an invalid length. [ 976.890430][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9791'. [ 977.013494][ T8225] bond0: (slave bond_slave_1): Releasing backup interface [ 977.089695][ T8225] veth1_to_bond (unregistering): left allmulticast mode [ 977.187873][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9795'. [ 977.400894][ T8244] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9797'. [ 977.645327][ T8256] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 977.665512][ T8260] net_ratelimit: 3 callbacks suppressed [ 977.665534][ T8260] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 977.906673][ T8270] sctp: [Deprecated]: syz.4.9805 (pid 8270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 977.906673][ T8270] Use struct sctp_sack_info instead [ 978.372917][ T8280] netlink: 'syz.1.9808': attribute type 1 has an invalid length. [ 978.382380][ T8280] netlink: 'syz.1.9808': attribute type 2 has an invalid length. [ 978.682577][ T8287] netlink: 'syz.0.9810': attribute type 17 has an invalid length. [ 978.695259][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9810'. [ 978.705775][ T8287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9810'. [ 980.600060][ T8277] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 980.615765][ T8277] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 980.962578][ T8305] netlink: 'syz.1.9818': attribute type 1 has an invalid length. [ 981.373170][ T8329] netlink: 'syz.0.9827': attribute type 15 has an invalid length. [ 981.520153][ T8336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9828'. [ 981.549428][ T8336] netlink: 'syz.2.9828': attribute type 10 has an invalid length. [ 981.574044][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.583337][ T8336] bridge_slave_1: left allmulticast mode [ 981.589031][ T8336] bridge_slave_1: left promiscuous mode [ 981.594998][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.614521][ T8336] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 981.794628][ T8353] netlink: 'syz.0.9833': attribute type 21 has an invalid length. [ 981.954379][ T8358] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9836'. [ 981.991078][ T8356] tipc: Started in network mode [ 982.019302][ T8356] tipc: Node identity 9ee6bd0f1262, cluster identity 4711 [ 982.049340][ T8356] tipc: Enabled bearer , priority 0 [ 982.073117][ T8362] syzkaller0: entered promiscuous mode [ 982.078835][ T8362] syzkaller0: entered allmulticast mode [ 982.157747][ T8356] tipc: Resetting bearer [ 982.167587][ T8364] tipc: Enabled bearer , priority 0 [ 982.176121][ T8354] tipc: Resetting bearer [ 982.213025][ T8354] tipc: Disabling bearer [ 982.288690][ T8364] syzkaller0: entered promiscuous mode [ 982.299309][ T8364] syzkaller0: entered allmulticast mode [ 982.306609][ T8364] tipc: Resetting bearer [ 982.372498][ T8363] tipc: Resetting bearer [ 982.573949][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9842'. [ 983.190944][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9843'. [ 983.202270][ T8388] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 983.299762][ T8390] netlink: 'syz.0.9844': attribute type 6 has an invalid length. [ 983.308612][ T8390] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9844'. [ 983.403206][ T8391] netlink: 'syz.0.9844': attribute type 1 has an invalid length. [ 983.412216][ T8391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.479619][ T8392] netlink: 'syz.0.9844': attribute type 32 has an invalid length. [ 983.489506][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9844'. [ 985.312274][ T8363] tipc: Disabling bearer [ 985.342812][ T8392] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 985.494527][ T8396] netlink: 'syz.2.9845': attribute type 1 has an invalid length. [ 985.625614][ T8396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 985.636175][ T8396] bond2: (slave bond3): making interface the new active one [ 985.644706][ T8396] bond2: (slave bond3): Enslaving as an active interface with an up link [ 985.781124][ T8406] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 985.795664][ T8406] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 986.003657][ T8422] netlink: 'syz.0.9854': attribute type 3 has an invalid length. [ 986.032322][ T8422] netlink: 766 bytes leftover after parsing attributes in process `syz.0.9854'. [ 986.105946][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9855'. [ 986.317343][ T8442] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 986.618599][ T8451] netlink: 'syz.0.9863': attribute type 11 has an invalid length. [ 986.692853][ T8451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9863'. [ 986.934495][ T8473] sctp: [Deprecated]: syz.0.9870 (pid 8473) Use of int in max_burst socket option deprecated. [ 986.934495][ T8473] Use struct sctp_assoc_value instead [ 987.236269][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9876'. [ 987.304260][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9877'. [ 987.452838][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9878'. [ 987.498037][ T8502] tipc: Started in network mode [ 987.512427][ T8502] tipc: Node identity 0900000000000000ffffffffffffffff, cluster identity 4711 [ 987.579517][ T8509] pim6reg: entered allmulticast mode [ 987.661213][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 987.754277][ T8516] openvswitch: netlink: Key type 289 is out of range max 32 [ 987.795972][ T8520] netlink: zone id is out of range [ 987.825785][ T8520] netlink: del zone limit has 4 unknown bytes [ 987.903446][ T8528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.175076][ T8540] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9891'. [ 988.196561][ T8540] netlink: 'syz.2.9891': attribute type 2 has an invalid length. [ 988.205742][ T8540] netlink: 'syz.2.9891': attribute type 2 has an invalid length. [ 989.040633][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9900'. [ 989.124694][ T8568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9901'. [ 989.149519][ T8568] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 989.440174][ T8586] netlink: 'syz.3.9905': attribute type 10 has an invalid length. [ 989.479510][ T8586] bond0: (slave ): Enslaving as an active interface with a down link [ 989.514978][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9908'. [ 989.567128][ T8592] veth3: entered promiscuous mode [ 989.731388][ T4523] Bluetooth: hci3: command 0x0405 tx timeout [ 989.907702][ T8611] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9915'. [ 989.975616][ T8619] netlink: 'syz.3.9916': attribute type 4 has an invalid length. [ 990.136536][ T4523] Bluetooth: hci2: command 0x0406 tx timeout [ 990.245570][ T8625] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 990.252762][T32740] IPVS: starting estimator thread 0... [ 990.286789][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9920'. [ 990.362781][ T8630] IPVS: using max 26 ests per chain, 62400 per kthread [ 990.404078][ T8633] netlink: 'syz.0.9923': attribute type 7 has an invalid length. [ 990.427003][ T8633] netlink: 'syz.0.9923': attribute type 8 has an invalid length. [ 990.717006][ T8641] hsr0 speed is unknown, defaulting to 1000 [ 990.761002][ T8641] wg1 speed is unknown, defaulting to 1000 [ 990.803850][ T8646] syzkaller1: entered promiscuous mode [ 990.809385][ T8646] syzkaller1: entered allmulticast mode [ 990.862666][ T8646] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 991.057789][ T8654] netlink: 'syz.3.9930': attribute type 83 has an invalid length. [ 991.120363][ T8654] netlink: 'syz.3.9930': attribute type 83 has an invalid length. [ 991.352951][ T8641] wg1 speed is unknown, defaulting to 1000 [ 991.394925][ T8665] nbd: must specify a size in bytes for the device [ 991.511051][ T8673] openvswitch: netlink: Key type 10512 is out of range max 32 [ 991.617692][ T8675] macvtap1: entered allmulticast mode [ 991.642864][ T8675] veth0_macvtap: entered allmulticast mode [ 991.742373][ T8684] netlink: 'syz.2.9939': attribute type 1 has an invalid length. [ 991.813565][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 991.890352][ T8689] ip6gre1: entered allmulticast mode [ 991.896228][ T8691] netlink: 'syz.3.9942': attribute type 5 has an invalid length. [ 991.975515][ T8691] netlink: 'syz.3.9942': attribute type 1 has an invalid length. [ 992.003142][ T8691] __nla_validate_parse: 8 callbacks suppressed [ 992.003166][ T8691] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9942'. [ 992.020747][ T8694] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.9942'. [ 992.543873][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9947'. [ 992.576946][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9947'. [ 992.712872][ T8719] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 992.985119][ T8726] IPv6: sit1: Disabled Multicast RS [ 993.005173][ T8726] sit1: entered allmulticast mode [ 994.551751][ T8782] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9969'. [ 994.583098][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9969'. [ 994.597559][ T8782] net veth1_virt_wifi .: renamed from virt_wifi0 [ 995.337443][ T8806] IPVS: set_ctl: invalid protocol: 44 172.30.0.4:20003 [ 995.410425][ T8811] netlink: 'syz.2.9979': attribute type 1 has an invalid length. [ 995.436389][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9979'. [ 995.510260][ T8821] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.9981'. [ 995.528901][ T8821] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.9981'. [ 995.558866][ T8821] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.9981'. [ 995.781665][ T8831] bridge5: entered allmulticast mode [ 996.187683][ T8839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 996.204919][ T8837] hsr0 speed is unknown, defaulting to 1000 [ 996.216368][ T8837] wg1 speed is unknown, defaulting to 1000 [ 996.308002][ T8850] 8021q: VLANs not supported on wg2 [ 996.938954][ T8837] wg1 speed is unknown, defaulting to 1000 [ 997.200778][ T8887] bridge0: mtu less than device minimum [ 997.239991][ T8889] __nla_validate_parse: 88 callbacks suppressed [ 997.240012][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10004'. [ 997.289760][ T8892] netlink: 'syz.0.10005': attribute type 2 has an invalid length. [ 997.300642][ T8892] netlink: 'syz.0.10005': attribute type 8 has an invalid length. [ 997.309472][ T8892] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10005'. [ 997.876976][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10012'. [ 998.307096][ T8928] syzkaller0: entered promiscuous mode [ 998.326530][ T8928] syzkaller0: entered allmulticast mode [ 998.366702][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10018'. [ 998.449079][ T8936] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10018'. [ 998.795652][ T8951] netlink: 'syz.3.10020': attribute type 1 has an invalid length. [ 998.814361][ T8951] netlink: 'syz.3.10020': attribute type 3 has an invalid length. [ 998.831933][ T8951] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10020'. [ 998.958322][ T8951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10020'. [ 999.004802][ T8951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10020'. [ 999.385342][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.480783][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10034'. [ 999.595194][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10037'. [ 999.647727][ T8986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1000.529272][ T9032] openvswitch: netlink: Key type 85 is out of range max 32 [ 1000.929143][ T9054] sctp: [Deprecated]: syz.2.10058 (pid 9054) Use of int in maxseg socket option. [ 1000.929143][ T9054] Use struct sctp_assoc_value instead [ 1001.058196][ T9060] netlink: 'syz.3.10059': attribute type 1 has an invalid length. [ 1001.275913][ T9060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1001.314694][ T9060] bond8: (slave gretap2): making interface the new active one [ 1001.325470][ T9060] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1001.555393][ T9092] netlink: 'syz.3.10068': attribute type 1 has an invalid length. [ 1001.828049][ T9102] vlan2: entered promiscuous mode [ 1001.868138][ T9102] bridge0: entered promiscuous mode [ 1002.117197][ T9108] syzkaller1: entered promiscuous mode [ 1002.123988][ T9108] syzkaller1: entered allmulticast mode [ 1002.155764][ T9115] openvswitch: netlink: Flow actions attr not present in new flow. [ 1002.457814][ T9122] __nla_validate_parse: 10 callbacks suppressed [ 1002.459032][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1002.825666][ T9139] netlink: 288 bytes leftover after parsing attributes in process `syz.3.10084'. [ 1003.035008][ T9153] netlink: 'syz.3.10086': attribute type 12 has an invalid length. [ 1003.188449][ T9158] netlink: 'syz.2.10088': attribute type 10 has an invalid length. [ 1003.232822][ T9158] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1003.266955][ T9162] netlink: 'syz.0.10091': attribute type 21 has an invalid length. [ 1003.381539][ T9162] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1003.403465][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10094'. [ 1003.544387][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10095'. [ 1003.608740][ T9177] netlink: 'syz.2.10098': attribute type 21 has an invalid length. [ 1003.634855][ T9177] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10098'. [ 1003.859109][ T9195] netlink: 'syz.2.10102': attribute type 32 has an invalid length. [ 1003.868096][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10102'. [ 1003.928766][ T9195] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 1003.984444][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10104'. [ 1004.006265][ T9202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10104'. [ 1004.212703][ T9211] netlink: 'syz.1.10106': attribute type 1 has an invalid length. [ 1004.363918][ T9215] gretap1: entered promiscuous mode [ 1004.382717][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10106'. [ 1004.428822][ T9219] netlink: 'syz.2.10109': attribute type 1 has an invalid length. [ 1004.498388][ T9219] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1004.706964][ T9233] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10114'. [ 1004.762985][ T9233] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 1004.829824][ T9233] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 1005.252384][ T9264] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 1006.508537][ T9327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1006.781473][ T9351] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1006.788130][ T9351] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1006.906432][ T9357] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1006.956588][ T9351] hsr0 speed is unknown, defaulting to 1000 [ 1007.003089][ T9351] wg1 speed is unknown, defaulting to 1000 [ 1007.529688][ T9384] openvswitch: netlink: IPv4 tun info is not correct [ 1007.560361][ T981] IPVS: starting estimator thread 0... [ 1007.652589][ T9385] IPVS: using max 25 ests per chain, 60000 per kthread [ 1007.717811][ T9351] wg1 speed is unknown, defaulting to 1000 [ 1009.945557][ T9454] netlink: 'syz.1.10176': attribute type 1 has an invalid length. [ 1009.975711][ T9454] netlink: 'syz.1.10176': attribute type 2 has an invalid length. [ 1010.004164][ T9458] __nla_validate_parse: 19 callbacks suppressed [ 1010.004189][ T9458] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.10178'. [ 1010.028390][ T9454] netlink: 'syz.1.10176': attribute type 2 has an invalid length. [ 1010.053796][ T9454] netlink: 'syz.1.10176': attribute type 2 has an invalid length. [ 1010.073598][ T9454] netlink: 'syz.1.10176': attribute type 2 has an invalid length. [ 1010.114968][ T9458] netlink: 576 bytes leftover after parsing attributes in process `syz.2.10178'. [ 1010.570351][ T9475] netlink: 'syz.1.10184': attribute type 1 has an invalid length. [ 1010.585382][ T9475] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10184'. [ 1010.597315][ T9475] netlink: 'syz.1.10184': attribute type 1 has an invalid length. [ 1010.647754][ T9476] netlink: 'syz.1.10184': attribute type 1 has an invalid length. [ 1010.676775][ T9476] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10184'. [ 1010.701978][ T9476] netlink: 'syz.1.10184': attribute type 1 has an invalid length. [ 1010.842753][ T9484] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 1011.150332][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10193'. [ 1011.329394][ T9504] tipc: Started in network mode [ 1011.347698][ T9504] tipc: Node identity 567f22bc399e, cluster identity 4711 [ 1011.363623][ T9504] tipc: Enabled bearer , priority 0 [ 1011.378874][ T9504] syzkaller0: entered promiscuous mode [ 1011.399578][ T9504] syzkaller0: entered allmulticast mode [ 1011.453912][ T9517] netlink: 'syz.2.10197': attribute type 10 has an invalid length. [ 1011.524698][ T9517] team0: Port device dummy0 added [ 1011.545655][ T9504] tipc: Resetting bearer [ 1011.579525][ T9500] tipc: Resetting bearer [ 1011.661838][ T9500] tipc: Disabling bearer [ 1011.883922][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10206'. [ 1012.068728][ T9554] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10209'. [ 1012.232917][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10212'. [ 1012.427208][ T9558] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10212'. [ 1012.492547][ T9574] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.10216'. [ 1012.513704][ T9574] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1012.534917][ T9578] dummy0: left allmulticast mode [ 1012.540181][ T9578] bridge0: port 4(dummy0) entered disabled state [ 1012.569055][ T9578] bridge_slave_0: left allmulticast mode [ 1012.586146][ T9578] bridge_slave_0: left promiscuous mode [ 1012.620429][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.644025][ T9578] bridge_slave_1: left allmulticast mode [ 1012.652403][ T9578] bridge_slave_1: left promiscuous mode [ 1012.666717][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.718194][ T9578] bond0: (slave bond_slave_0): Releasing backup interface [ 1012.734717][ T9578] team0: Port device team_slave_0 removed [ 1012.769390][ T9578] team0: Port device team_slave_1 removed [ 1012.782918][ T9578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.807046][ T9578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.837833][ T9578] bond1: (slave bridge2): Releasing active interface [ 1012.867609][ T9578] bond2: left promiscuous mode [ 1012.888242][ T9578] bridge0: port 3(bond2) entered disabled state [ 1013.223989][ T9599] veth1_macvtap: left promiscuous mode [ 1013.244577][ T9599] team0: Device veth1_macvtap failed to register rx_handler [ 1013.686524][ T9627] lo: left promiscuous mode [ 1014.000945][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.023363][ T9627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.506167][T27279] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.526820][T27279] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.547147][T27279] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.594167][T27273] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.704479][ T9660] tipc: Enabled bearer , priority 10 [ 1014.956937][ T9668] tipc: Enabled bearer , priority 0 [ 1014.973126][ T9668] syzkaller0: entered promiscuous mode [ 1014.978659][ T9668] syzkaller0: entered allmulticast mode [ 1014.999872][ T9667] tipc: Resetting bearer [ 1015.044614][ T9667] tipc: Disabling bearer [ 1015.172452][ T5873] Bluetooth: hci1: command tx timeout [ 1015.287541][ T9686] syzkaller0: entered allmulticast mode [ 1015.353470][ T9686] __nla_validate_parse: 5 callbacks suppressed [ 1015.353493][ T9686] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10249'. [ 1015.493653][ T9694] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 1015.585867][ T9694] syzkaller0: entered promiscuous mode [ 1015.616990][ T9694] syzkaller0: entered allmulticast mode [ 1015.757420][ T9704] validate_nla: 4 callbacks suppressed [ 1015.757442][ T9704] netlink: 'syz.3.10252': attribute type 3 has an invalid length. [ 1015.825541][T21554] tipc: Node number set to 150994944 [ 1015.947643][ T9708] netlink: 596 bytes leftover after parsing attributes in process `syz.3.10252'. [ 1016.188114][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10254'. [ 1016.213399][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.245879][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.270290][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.293233][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.447984][ T9727] netlink: 'syz.3.10258': attribute type 1 has an invalid length. [ 1016.463549][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10255'. [ 1016.477583][ T9727] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10258'. [ 1016.624829][ T9732] netlink: 'syz.4.10260': attribute type 32 has an invalid length. [ 1016.650045][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10260'. [ 1016.657711][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10259'. [ 1016.680716][ T9729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10259'. [ 1016.780188][ T9730] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 1016.816040][ T9732] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 1016.887726][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10262'. [ 1017.480117][ T9765] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 1017.519556][ T9768] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 1017.628425][ T9767] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1017.847033][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10274'. [ 1018.007805][ T9781] veth7: entered allmulticast mode [ 1018.342187][ T9799] macvtap1: entered promiscuous mode [ 1018.347813][ T9799] vlan0: entered promiscuous mode [ 1018.357525][ T9799] macvtap1: entered allmulticast mode [ 1018.371019][ T9799] vlan0: entered allmulticast mode [ 1018.377756][ T9799] veth0_vlan: entered allmulticast mode [ 1018.853312][ T9838] netlink: 'syz.3.10289': attribute type 10 has an invalid length. [ 1018.895828][ T9838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.945510][ T9838] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1018.989541][ T9845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.008783][ T9845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.025791][ T9845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.038866][ T9845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.066140][ T9845] bond0: (slave batadv0): Releasing backup interface [ 1020.028812][ T9889] netlink: 'syz.1.10304': attribute type 6 has an invalid length. [ 1020.054825][ T9889] netlink: 'syz.1.10304': attribute type 5 has an invalid length. [ 1020.545236][ T9910] netlink: 'syz.1.10312': attribute type 2 has an invalid length. [ 1020.548138][ T9916] __nla_validate_parse: 10 callbacks suppressed [ 1020.548163][ T9916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10311'. [ 1020.565219][ T9914] netlink: 'syz.3.10313': attribute type 11 has an invalid length. [ 1020.588830][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10311'. [ 1020.612270][ T9914] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10313'. [ 1020.677859][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10313'. [ 1020.753956][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10314'. [ 1020.855298][ T9930] netlink: 'syz.3.10317': attribute type 3 has an invalid length. [ 1020.945403][ T9919] vlan0 (unregistering): left allmulticast mode [ 1020.952034][ T9919] veth0_vlan (unregistering): left allmulticast mode [ 1020.958998][ T9919] vlan0 (unregistering): left promiscuous mode [ 1021.713817][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10315'. [ 1021.877069][ T9942] : entered promiscuous mode [ 1030.692254][T21554] page_pool_release_retry() stalled pool shutdown: id 229, 1 inflight 60 sec [ 1038.618287][T27276] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 1056.691314][ T4523] Bluetooth: hci1: command 0x0406 tx timeout [ 1066.932130][ T4523] Bluetooth: hci4: command 0x0406 tx timeout [ 1076.186507][ T9947] veth0: entered promiscuous mode [ 1076.251978][ T9946] veth0: left promiscuous mode [ 1076.260399][ T9958] netlink: zone id is out of range [ 1076.292930][ T9958] netlink: del zone limit has 4 unknown bytes [ 1076.364292][ T9958] block nbd8: Unsupported socket: shutdown callout must be supported. [ 1076.556865][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10328'. [ 1076.566212][ T9966] netlink: 'syz.0.10328': attribute type 7 has an invalid length. [ 1076.577150][ T9966] netlink: 'syz.0.10328': attribute type 8 has an invalid length. [ 1076.621357][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10328'. [ 1077.544060][T10011] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1077.567897][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1077.608162][T10015] IPVS: Error joining to the multicast group [ 1077.974394][T10032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10346'. [ 1078.034037][T10035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10349'. [ 1078.073686][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10348'. [ 1078.206379][T10041] netlink: 'syz.1.10350': attribute type 1 has an invalid length. [ 1078.319348][T10044] team0: Port device bridge2 added [ 1078.333896][T10041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10350'. [ 1078.396764][T10053] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1078.545898][T10068] netlink: 'syz.4.10358': attribute type 2 has an invalid length. [ 1078.603937][T10064] netlink: 'syz.3.10357': attribute type 1 has an invalid length. [ 1078.618971][T10064] nbd: error processing sock list [ 1078.628916][T10064] block nbd8: shutting down sockets [ 1078.675687][T10079] netlink: 'syz.4.10361': attribute type 1 has an invalid length. [ 1078.809982][T10079] bond3: entered promiscuous mode [ 1078.820708][T10079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1078.917737][T10083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1078.920863][T10096] netlink: 576 bytes leftover after parsing attributes in process `syz.2.10362'. [ 1078.928284][T10083] bond3: (slave bond4): making interface the new active one [ 1078.944435][T10083] bond4: entered promiscuous mode [ 1078.950895][T10083] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1079.103249][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10365'. [ 1079.234520][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10368'. [ 1079.324390][T10111] veth1_macvtap: left promiscuous mode [ 1079.353364][T10117] mac80211_hwsim hwsim102 : renamed from wlan1 [ 1080.354834][T10131] team0 (unregistering): Port device team_slave_0 removed [ 1080.386590][T10131] team0 (unregistering): Port device team_slave_1 removed [ 1080.402581][T10131] team0 (unregistering): Port device bridge2 removed [ 1080.480233][T10160] syzkaller1: entered promiscuous mode [ 1080.511974][T10160] syzkaller1: entered allmulticast mode [ 1080.956679][T10185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.983683][T10188] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1081.015940][T10188] sctp: [Deprecated]: syz.0.10390 (pid 10188) Use of int in maxseg socket option. [ 1081.015940][T10188] Use struct sctp_assoc_value instead [ 1081.274838][T10208] netlink: 'syz.1.10397': attribute type 1 has an invalid length. [ 1081.499080][T10224] bond5: entered promiscuous mode [ 1081.504840][T10224] bond5: entered allmulticast mode [ 1081.510555][T10224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1081.660599][T10237] __nla_validate_parse: 2 callbacks suppressed [ 1081.660621][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10406'. [ 1081.736837][T10242] netlink: 'syz.1.10407': attribute type 1 has an invalid length. [ 1081.785504][T10242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10407'. [ 1081.798250][T10237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.819782][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10407'. [ 1082.223019][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10413'. [ 1082.252975][T10266] netlink: 'syz.2.10416': attribute type 10 has an invalid length. [ 1082.342986][T10266] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1082.350015][T10271] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10417'. [ 1082.608095][T10284] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.10423'. [ 1082.855864][T10296] bond5: entered allmulticast mode [ 1082.887498][T10296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1082.957875][T10304] netlink: 'syz.0.10426': attribute type 13 has an invalid length. [ 1083.110136][T10310] netlink: 'syz.1.10429': attribute type 1 has an invalid length. [ 1083.120155][T10310] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10429'. [ 1083.140692][T10317] netlink: 'syz.1.10429': attribute type 1 has an invalid length. [ 1083.166253][T10317] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10429'. [ 1083.168369][T10312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.327102][T10321] sctp: [Deprecated]: syz.0.10432 (pid 10321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1083.327102][T10321] Use struct sctp_sack_info instead [ 1083.426991][T10326] netlink: 'syz.1.10433': attribute type 4 has an invalid length. [ 1083.665881][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10437'. [ 1083.977412][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10441'. [ 1084.262911][T10366] netlink: 'syz.2.10445': attribute type 25 has an invalid length. [ 1084.435083][T10363] syzkaller1: entered promiscuous mode [ 1084.440708][T10363] syzkaller1: entered allmulticast mode [ 1084.556716][T10379] Bluetooth: MGMT ver 1.23 [ 1084.574404][T10379] Bluetooth: hci1: too big key_count value 32778 [ 1086.620492][T10480] vlan0: entered allmulticast mode [ 1086.633814][T10480] hsr0: entered allmulticast mode [ 1086.647953][T10480] hsr_slave_0: entered allmulticast mode [ 1086.670251][T10480] hsr_slave_1: entered allmulticast mode [ 1086.868399][T10498] __nla_validate_parse: 5 callbacks suppressed [ 1086.868422][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10485'. [ 1087.203635][T10512] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1087.595018][T10533] lo: Caught tx_queue_len zero misconfig [ 1087.981072][T10535] tipc: Enabled bearer , priority 0 [ 1087.990709][T10549] netlink: 'syz.3.10497': attribute type 1 has an invalid length. [ 1088.000479][T10549] netlink: 'syz.3.10497': attribute type 1 has an invalid length. [ 1088.177583][T10535] tipc: Disabling bearer [ 1088.281058][T10564] geneve2: entered promiscuous mode [ 1088.298481][T10564] geneve2: entered allmulticast mode [ 1088.454184][T10572] Bluetooth: MGMT ver 1.23 [ 1088.472201][T10572] netlink: 'syz.3.10504': attribute type 2 has an invalid length. [ 1088.692327][T10583] netlink: 'syz.4.10508': attribute type 1 has an invalid length. [ 1088.723982][T10585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1088.810134][T10594] netlink: 'syz.1.10511': attribute type 10 has an invalid length. [ 1089.092139][T10583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.178616][T10594] batman_adv: batadv0: Adding interface: team0 [ 1089.193764][T10594] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.228315][T10610] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10514'. [ 1089.239211][T10594] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1089.249482][T10610] netlink: zone id is out of range [ 1089.256416][T10610] netlink: zone id is out of range [ 1089.261877][T10610] netlink: zone id is out of range [ 1089.267857][T10610] netlink: zone id is out of range [ 1089.268686][T10596] lo: left promiscuous mode [ 1089.273327][T10610] netlink: zone id is out of range [ 1089.273356][T10610] netlink: get zone limit has 8 unknown bytes [ 1089.663343][T10596] gre1: left promiscuous mode [ 1089.672035][T10596] gretap1: left promiscuous mode [ 1089.685064][T10596] veth0_macvtap: left allmulticast mode [ 1089.838958][T10583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.897247][ T981] IPVS: starting estimator thread 0... [ 1089.902857][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10515'. [ 1089.919355][T27280] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.966295][T27280] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.011512][T10621] IPVS: using max 26 ests per chain, 62400 per kthread [ 1090.164776][T10583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.200602][T10618] bridge7: entered promiscuous mode [ 1090.206860][T10618] bridge7: entered allmulticast mode [ 1090.216611][T27280] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.244480][T27280] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.266619][T10631] vxcan1: entered promiscuous mode [ 1090.375533][T10583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.565930][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10524'. [ 1090.660835][T10654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1090.747061][T27280] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.787358][T27280] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.854323][T27274] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.881610][T27274] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.028851][T10668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10530'. [ 1091.524267][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10541'. [ 1091.656402][T10704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1091.908554][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10547'. [ 1091.952838][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10547'. [ 1091.969897][T10718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10546'. [ 1092.045431][T10717] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10547'. [ 1092.289545][T10737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1092.317580][T10737] sock: sock_timestamping_bind_phc: sock not bind to device [ 1092.327876][T10737] netlink: 'syz.3.10553': attribute type 21 has an invalid length. [ 1092.338635][T10737] netlink: 'syz.3.10553': attribute type 22 has an invalid length. [ 1092.347402][T10737] netlink: 'syz.3.10553': attribute type 23 has an invalid length. [ 1092.355676][T10737] netlink: 'syz.3.10553': attribute type 25 has an invalid length. [ 1092.366486][T10737] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10553'. [ 1092.500528][T10746] netlink: 'syz.4.10556': attribute type 10 has an invalid length. [ 1092.509755][T10746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10556'. [ 1092.583254][T10749] siw: device registration error -23 [ 1092.631969][T10746] team0: Port device geneve0 added [ 1092.834209][T10761] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10560'. [ 1092.925977][T10770] dvmrp0: entered allmulticast mode [ 1092.953921][T10759] dvmrp0: left allmulticast mode [ 1093.494295][T10788] tipc: Enabling of bearer rejected, media not registered [ 1093.542262][T10793] tipc: Enabling of bearer rejected, media not registered [ 1093.796384][T10799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10572'. [ 1093.820046][T10799] netlink: 388 bytes leftover after parsing attributes in process `syz.1.10572'. [ 1093.915828][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10571'. [ 1093.925778][T10809] bridge_slave_1: left allmulticast mode [ 1093.932340][T10809] bridge_slave_1: left promiscuous mode [ 1093.943269][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.054876][T10809] bridge_slave_0: left allmulticast mode [ 1094.060591][T10809] bridge_slave_0: left promiscuous mode [ 1094.124525][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.175112][T10819] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:25 [ 1094.192719][T10819] IPVS: set_ctl: invalid protocol: 51 172.30.0.5:20000 [ 1094.329736][T10831] netlink: 'syz.4.10580': attribute type 11 has an invalid length. [ 1094.376150][T10835] sctp: [Deprecated]: syz.2.10579 (pid 10835) Use of int in maxseg socket option. [ 1094.376150][T10835] Use struct sctp_assoc_value instead [ 1094.398584][T10831] validate_nla: 3 callbacks suppressed [ 1094.398609][T10831] netlink: 'syz.4.10580': attribute type 6 has an invalid length. [ 1095.077536][T10858] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1095.105683][T10858] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1095.168482][T10859] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1095.186626][T10875] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1095.199504][T10859] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1095.445995][T10882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.520774][T10892] erspan0: entered allmulticast mode [ 1095.608414][T10882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.748844][T10888] hsr0 speed is unknown, defaulting to 1000 [ 1095.828673][T10882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.860371][T10888] wg1 speed is unknown, defaulting to 1000 [ 1096.018664][T10882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.232574][T10918] macvlan0: entered allmulticast mode [ 1096.244637][T27279] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.285416][T27279] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.356643][T27277] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.422978][T27280] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.613926][T10888] wg1 speed is unknown, defaulting to 1000 [ 1096.871017][T10940] openvswitch: netlink: Multiple metadata blocks provided [ 1096.945946][T10943] __nla_validate_parse: 9 callbacks suppressed [ 1096.945967][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10604'. [ 1097.056699][T10943] netlink: 'syz.1.10604': attribute type 13 has an invalid length. [ 1097.067460][T10943] netlink: 'syz.1.10604': attribute type 27 has an invalid length. [ 1097.335769][T10956] xt_limit: Overflow, try lower: 271964/0 [ 1097.447721][T10960] tipc: Enabled bearer , priority 0 [ 1097.464184][T10960] syzkaller0: entered promiscuous mode [ 1097.480064][T10960] syzkaller0: entered allmulticast mode [ 1097.699661][T10967] tipc: Resetting bearer [ 1097.863152][T10957] tipc: Resetting bearer [ 1097.987217][T10957] tipc: Disabling bearer [ 1098.156576][T10978] syzkaller1: entered promiscuous mode [ 1098.171228][T10978] syzkaller1: entered allmulticast mode [ 1098.448564][T11006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10620'. [ 1098.582668][T11008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1098.629965][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10621'. [ 1098.662336][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10621'. [ 1099.150828][T11032] bond5: entered promiscuous mode [ 1099.156905][T11032] bond5: entered allmulticast mode [ 1099.164147][T11032] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1099.397771][T11047] netlink: 'syz.2.10631': attribute type 12 has an invalid length. [ 1099.867251][T11069] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1100.015091][T11080] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10642'. [ 1100.155871][T11085] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1100.183541][T11088] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1100.222787][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1100.252989][T11085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1100.263867][T11090] netlink: 'syz.3.10645': attribute type 1 has an invalid length. [ 1100.285768][T11084] netlink: 'syz.1.10644': attribute type 10 has an invalid length. [ 1100.297282][T11084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.318899][T11093] netlink: 360 bytes leftover after parsing attributes in process `syz.3.10645'. [ 1100.334985][T11084] batman_adv: batadv0: Removing interface: team0 [ 1100.577572][T11096] netlink: 'syz.4.10647': attribute type 4 has an invalid length. [ 1100.578629][T11098] netlink: 'syz.2.10649': attribute type 4 has an invalid length. [ 1100.853218][T11112] netlink: 'syz.4.10652': attribute type 2 has an invalid length. [ 1100.909301][T11113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.133902][T11124] netlink: 'syz.3.10658': attribute type 9 has an invalid length. [ 1102.046227][T11177] netlink: 'syz.0.10676': attribute type 4 has an invalid length. [ 1102.149375][T11181] __nla_validate_parse: 4 callbacks suppressed [ 1102.149396][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10677'. [ 1102.198068][T11183] netlink: 'syz.1.10677': attribute type 27 has an invalid length. [ 1102.509873][T11201] IPv6: sit2: Disabled Multicast RS [ 1102.518916][T11201] sit2: entered allmulticast mode [ 1103.373586][T27279] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.420110][T27279] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.456788][T27279] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.498269][T27279] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.982803][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10706'. [ 1104.031966][T11289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.158822][T11294] tc_dump_action: action bad kind [ 1104.360324][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10710'. [ 1104.435696][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10713'. [ 1104.514366][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10713'. [ 1104.535888][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10712'. [ 1104.578996][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10714'. [ 1104.747075][T11318] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1105.136654][T11334] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10718'. [ 1105.670148][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10723'. [ 1105.916128][T11366] tipc: Enabled bearer , priority 0 [ 1105.925801][T11366] syzkaller0: entered promiscuous mode [ 1105.932721][T11366] syzkaller0: entered allmulticast mode [ 1105.974209][T11366] tipc: Resetting bearer [ 1106.004382][T11365] tipc: Resetting bearer [ 1106.067436][T11370] netlink: 'syz.0.10728': attribute type 3 has an invalid length. [ 1106.093046][T11365] tipc: Disabling bearer [ 1106.143414][T11370] vxcan1: left promiscuous mode [ 1106.355570][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10732'. [ 1107.201568][T11433] netlink: 'syz.2.10747': attribute type 30 has an invalid length. [ 1107.444921][T11445] __nla_validate_parse: 1 callbacks suppressed [ 1107.444940][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10750'. [ 1107.689512][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10756'. [ 1108.167910][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10761'. [ 1108.300438][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10762'. [ 1108.893965][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1109.130260][T11524] netlink: 'syz.0.10773': attribute type 1 has an invalid length. [ 1109.172516][T11524] netlink: 'syz.0.10773': attribute type 3 has an invalid length. [ 1109.202067][T11524] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10773'. [ 1109.251201][T11524] NCSI netlink: No device for ifindex 0 [ 1109.299074][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10776'. [ 1109.310879][T11538] sch_fq: defrate 0 ignored. [ 1109.778559][T11520] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10771'. [ 1109.948438][T11572] netlink: 'syz.0.10783': attribute type 1 has an invalid length. [ 1110.236222][T11572] bond4: entered promiscuous mode [ 1110.270142][T11572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1110.303984][T11587] siw: device registration error -23 [ 1110.714901][T11609] bond6: entered promiscuous mode [ 1110.720016][T11609] bond6: entered allmulticast mode [ 1110.727248][T11609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1111.016274][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10800'. [ 1111.081579][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10800'. [ 1111.336336][T11649] sctp: [Deprecated]: syz.0.10804 (pid 11649) Use of int in max_burst socket option. [ 1111.336336][T11649] Use struct sctp_assoc_value instead [ 1111.660804][T11661] batadv_slave_1: entered promiscuous mode [ 1111.669789][T11658] batadv_slave_1: left promiscuous mode [ 1112.126014][T11690] siw: device registration error -23 [ 1112.977342][T11726] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1113.408424][T11746] team0: No ports can be present during mode change [ 1113.495464][T11751] veth0: entered promiscuous mode [ 1113.544920][T11757] __nla_validate_parse: 5 callbacks suppressed [ 1113.544943][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10846'. [ 1114.171771][T11791] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1114.205923][T11792] : entered promiscuous mode [ 1114.292988][T11750] veth0: left promiscuous mode [ 1114.356209][T11804] netlink: 'syz.2.10860': attribute type 6 has an invalid length. [ 1114.366147][T11804] netlink: 'syz.2.10860': attribute type 6 has an invalid length. [ 1114.442955][T11804] pim6reg: left allmulticast mode [ 1114.483854][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10863'. [ 1114.807569][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10867'. [ 1115.065078][T11847] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10876'. [ 1115.114967][T11849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.207740][T11849] netlink: 'syz.1.10874': attribute type 1 has an invalid length. [ 1115.373787][T11849] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1115.453775][T11863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1115.461462][T11863] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1115.483890][T11863] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 1116.164772][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10890'. [ 1116.449867][T11908] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10894'. [ 1116.510778][T11915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10895'. [ 1117.139957][T11946] netlink: 'syz.2.10909': attribute type 1 has an invalid length. [ 1117.239512][T11946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1117.269142][T11946] bond7: (slave gretap2): making interface the new active one [ 1117.296170][T11946] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1117.345759][T11952] netlink: 'syz.4.10911': attribute type 9 has an invalid length. [ 1117.374962][T11946] vlan0: entered allmulticast mode [ 1117.410499][T11952] netlink: 'syz.4.10911': attribute type 9 has an invalid length. [ 1117.419942][T11946] bond7: entered allmulticast mode [ 1117.443967][T11946] gretap2: entered allmulticast mode [ 1117.451542][T11946] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1117.455242][T11956] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10913'. [ 1117.849005][T11980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1118.189324][T11999] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1118.409170][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10928'. [ 1118.579319][T12013] netlink: 'syz.0.10930': attribute type 4 has an invalid length. [ 1118.604627][T12013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10930'. [ 1118.631687][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1118.696185][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1118.751621][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1118.772294][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1118.876912][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1118.918691][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1118.962379][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1118.984127][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1119.007176][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10935'. [ 1119.909815][T12074] hsr0 speed is unknown, defaulting to 1000 [ 1119.953326][T12074] wg1 speed is unknown, defaulting to 1000 [ 1120.719997][T12074] wg1 speed is unknown, defaulting to 1000 [ 1121.328739][T12141] macvtap1: entered promiscuous mode [ 1121.350547][T12141] macvtap1: entered allmulticast mode [ 1121.365159][T12141] bond0: entered allmulticast mode [ 1121.382125][T12141] bond0: entered promiscuous mode [ 1121.408764][T12141] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1121.435239][T12141] team0: Device macvtap1 failed to register rx_handler [ 1121.570312][T12154] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 1121.597042][T12141] bond0: left allmulticast mode [ 1121.609025][T12151] netlink: 'syz.0.10977': attribute type 11 has an invalid length. [ 1121.609917][T12141] bond0: left promiscuous mode [ 1121.618188][T12151] netlink: 'syz.0.10977': attribute type 4 has an invalid length. [ 1122.179925][T12177] netlink: 'syz.2.10984': attribute type 1 has an invalid length. [ 1122.858520][T12200] netlink: 'syz.3.10991': attribute type 1 has an invalid length. [ 1122.885915][T12200] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1123.174074][T12213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.214395][T12215] mac80211_hwsim hwsim98 : renamed from wlan1 [ 1123.239070][T12216] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1123.627332][T12239] __nla_validate_parse: 72 callbacks suppressed [ 1123.627354][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11002'. [ 1123.708684][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11005'. [ 1123.788559][T12247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11005'. [ 1123.814463][T12248] ip6tnl0: Caught tx_queue_len zero misconfig [ 1123.850804][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11004'. [ 1124.095496][T12261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11007'. [ 1124.195095][T12261] syz_tun: refused to change device tx_queue_len [ 1124.267370][T12261] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1125.408020][T12324] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1125.417216][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11025'. [ 1125.740208][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11028'. [ 1125.779462][T12341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.786788][T12341] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.906314][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11030'. [ 1125.907022][T12344] tipc: Enabled bearer , priority 0 [ 1125.927838][T12346] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1125.973937][T12346] netlink: 'syz.2.11033': attribute type 1 has an invalid length. [ 1125.981481][T12347] netlink: 'syz.2.11033': attribute type 1 has an invalid length. [ 1125.992632][T12348] syzkaller0: entered promiscuous mode [ 1125.998191][T12348] syzkaller0: entered allmulticast mode [ 1126.083625][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11034'. [ 1126.109681][T12347] delete_channel: no stack [ 1126.175364][T12344] tipc: Resetting bearer [ 1126.450220][T12362] delete_channel: no stack [ 1126.477973][T12362] delete_channel: no stack [ 1126.643515][T12343] tipc: Resetting bearer [ 1126.694690][T12386] netlink: 'syz.2.11042': attribute type 3 has an invalid length. [ 1126.725670][T12343] tipc: Disabling bearer [ 1126.750070][T12387] tunl0: entered promiscuous mode [ 1126.762460][T12387] netlink: 'syz.0.11045': attribute type 3 has an invalid length. [ 1126.953639][T12401] netlink: 'syz.2.11046': attribute type 21 has an invalid length. [ 1127.919393][T27276] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.941724][T27276] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1127.973758][T27276] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.002274][ T3485] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1128.359270][T12467] delete_channel: no stack [ 1128.637675][T12487] __nla_validate_parse: 16 callbacks suppressed [ 1128.637699][T12487] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11065'. [ 1128.899086][T12491] syzkaller0: entered promiscuous mode [ 1128.912398][T12491] syzkaller0: entered allmulticast mode [ 1129.198195][T12507] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.255924][T12511] netlink: 'syz.2.11076': attribute type 1 has an invalid length. [ 1129.311683][T12515] syzkaller1: entered promiscuous mode [ 1129.319568][T12515] syzkaller1: entered allmulticast mode [ 1129.465378][T12525] netlink: 300 bytes leftover after parsing attributes in process `syz.2.11080'. [ 1129.486946][T12526] netlink: 300 bytes leftover after parsing attributes in process `syz.2.11080'. [ 1129.658513][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11083'. [ 1129.886997][T12544] netlink: 'syz.3.11085': attribute type 1 has an invalid length. [ 1129.896640][T12544] netlink: 'syz.3.11085': attribute type 3 has an invalid length. [ 1129.906124][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11085'. [ 1130.540082][T12591] netlink: 'syz.4.11096': attribute type 1 has an invalid length. [ 1130.571061][T12594] netlink: 'syz.0.11095': attribute type 1 has an invalid length. [ 1130.711795][T12591] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1130.770750][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11096'. [ 1130.820338][T12596] vlan2: entered promiscuous mode [ 1130.850819][T12596] bond6: entered promiscuous mode [ 1130.863336][T12596] vlan2: entered allmulticast mode [ 1130.868666][T12596] bond6: entered allmulticast mode [ 1130.892288][T12600] bond6: (slave gretap1): making interface the new active one [ 1130.909343][T12600] gretap1: entered promiscuous mode [ 1130.917809][T12600] gretap1: entered allmulticast mode [ 1130.937007][T12600] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1131.010826][T12610] bond6: entered allmulticast mode [ 1131.018171][T12610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1131.058640][T12611] bond7: entered allmulticast mode [ 1131.065397][T12611] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1131.754503][T12638] nbd: nbd1 already in use [ 1131.772978][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11107'. [ 1131.860552][T12646] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11109'. [ 1132.120044][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11111'. [ 1132.216013][T21554] hid-generic 0005:04F3:1010.0002: item fetching failed at offset 0/1 [ 1132.253101][T21554] hid-generic 0005:04F3:1010.0002: probe with driver hid-generic failed with error -22 [ 1132.565621][T27279] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.588307][T27279] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.628483][T27279] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.673204][T27279] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.802640][T27274] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1132.883980][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11124'. [ 1133.086483][T12698] netlink: 'syz.2.11126': attribute type 17 has an invalid length. [ 1133.236361][T12703] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1133.833893][T12721] netlink: 'syz.2.11134': attribute type 33 has an invalid length. [ 1133.967825][T12703] lo: entered allmulticast mode [ 1134.408648][T12746] __nla_validate_parse: 2 callbacks suppressed [ 1134.408669][T12746] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11142'. [ 1134.454235][T12746] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11142'. [ 1134.553331][T12756] sctp: [Deprecated]: syz.3.11145 (pid 12756) Use of int in max_burst socket option. [ 1134.553331][T12756] Use struct sctp_assoc_value instead [ 1134.592881][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11145'. [ 1134.871062][T12775] tipc: Enabled bearer , priority 0 [ 1134.900418][T12775] syzkaller0: entered promiscuous mode [ 1134.914373][T12775] syzkaller0: entered allmulticast mode [ 1135.002246][T12777] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1135.090706][T12775] tipc: Resetting bearer [ 1135.118086][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11150'. [ 1135.147758][T12775] netlink: 'syz.4.11150': attribute type 1 has an invalid length. [ 1135.350148][T12774] tipc: Resetting bearer [ 1135.408267][T12774] tipc: Disabling bearer [ 1135.536392][T12811] netlink: 'syz.4.11160': attribute type 12 has an invalid length. [ 1135.595213][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11161'. [ 1135.978449][T12820] syzkaller1: entered promiscuous mode [ 1135.985900][T12820] syzkaller1: entered allmulticast mode [ 1136.546130][T12836] netlink: 'syz.0.11163': attribute type 10 has an invalid length. [ 1136.565959][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11166'. [ 1136.596244][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11166'. [ 1136.654745][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11165'. [ 1136.727461][T12833] geneve3: entered promiscuous mode [ 1136.750304][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11165'. [ 1136.772885][T12833] geneve3: entered allmulticast mode [ 1136.852962][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11167'. [ 1137.644507][T12881] netlink: 'syz.2.11179': attribute type 1 has an invalid length. [ 1137.924727][T12887] tipc: Enabled bearer , priority 0 [ 1137.941585][T12887] syzkaller0: entered promiscuous mode [ 1137.947636][T12887] syzkaller0: entered allmulticast mode [ 1138.064283][T12887] tipc: Resetting bearer [ 1138.142277][T12886] tipc: Resetting bearer [ 1138.216811][T12886] tipc: Disabling bearer [ 1138.236688][T12897] tipc: Enabled bearer , priority 0 [ 1138.317565][T12897] syzkaller0: entered promiscuous mode [ 1138.324088][T12897] syzkaller0: entered allmulticast mode [ 1138.330102][T12904] netlink: 'syz.0.11186': attribute type 1 has an invalid length. [ 1138.483175][T12904] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1138.570701][T12907] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1138.579521][T12907] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1138.596738][T12907] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1138.657171][T12910] veth5: entered promiscuous mode [ 1138.677660][T12910] bond8: (slave veth5): Enslaving as an active interface with a down link [ 1138.701605][T12913] tipc: Resetting bearer [ 1138.734551][T12893] tipc: Resetting bearer [ 1138.778524][T12893] tipc: Disabling bearer [ 1139.017507][T12934] netlink: 'syz.0.11194': attribute type 29 has an invalid length. [ 1139.047497][T12936] netlink: 'syz.2.11195': attribute type 10 has an invalid length. [ 1139.075632][T12934] netlink: 'syz.0.11194': attribute type 29 has an invalid length. [ 1139.138239][T12936] bridge0: port 2(team0) entered blocking state [ 1139.160685][T12936] bridge0: port 2(team0) entered disabled state [ 1139.184359][T12936] team0: entered allmulticast mode [ 1139.189710][T12936] team_slave_0: entered allmulticast mode [ 1139.196522][T12936] team_slave_1: entered allmulticast mode [ 1139.212718][T12936] dummy0: entered allmulticast mode [ 1139.220281][T12936] team0: entered promiscuous mode [ 1139.226843][T12936] team_slave_0: entered promiscuous mode [ 1139.234913][T12936] team_slave_1: entered promiscuous mode [ 1139.240975][T12936] dummy0: entered promiscuous mode [ 1139.249818][T12942] bond0: Caught tx_queue_len zero misconfig [ 1139.321274][T12941] netlink: 'syz.0.11194': attribute type 29 has an invalid length. [ 1139.360943][T12941] netlink: 'syz.0.11194': attribute type 29 has an invalid length. [ 1139.388827][T12944] erspan0: entered allmulticast mode [ 1139.504903][T12951] team0: Device gtp1 is of different type [ 1139.557480][T12959] __nla_validate_parse: 4 callbacks suppressed [ 1139.557501][T12959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11198'. [ 1139.575064][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11198'. [ 1139.622691][T12963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11199'. [ 1139.735460][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11201'. [ 1139.812838][T12974] openvswitch: netlink: Message has -1 unknown bytes. [ 1139.862266][T12975] netlink: 'syz.4.11202': attribute type 2 has an invalid length. [ 1139.870200][T12975] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11202'. [ 1140.037656][T12985] netlink: 196 bytes leftover after parsing attributes in process `syz.3.11204'. [ 1140.079021][T12986] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 1140.091041][T12986] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 1140.304176][T12992] tipc: Enabled bearer , priority 0 [ 1140.316943][T12992] syzkaller0: entered promiscuous mode [ 1140.323988][T12992] syzkaller0: entered allmulticast mode [ 1140.337473][T12992] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1140.462622][T13004] tipc: Resetting bearer [ 1140.490147][T12991] tipc: Resetting bearer [ 1140.567862][T12991] tipc: Disabling bearer [ 1141.295715][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11222'. [ 1141.350319][T13051] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002 [ 1141.434412][T13056] IPVS: ip_vs_add_dest(): server weight less than zero [ 1141.442664][T13057] IPVS: ip_vs_add_dest(): server weight less than zero [ 1141.590005][T13065] netlink: 'syz.2.11229': attribute type 25 has an invalid length. [ 1141.601018][T13065] netlink: 'syz.2.11229': attribute type 25 has an invalid length. [ 1141.627055][T13065] netlink: 'syz.2.11229': attribute type 25 has an invalid length. [ 1141.707137][T13071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11230'. [ 1141.910108][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11233'. [ 1142.045149][T13088] sysfs: cannot create duplicate filename '/class/ieee80211/!d4QN寿$ULvDUDw}z' [ 1142.072477][T13088] CPU: 1 UID: 0 PID: 13088 Comm: syz.0.11235 Not tainted syzkaller #0 PREEMPT(full) [ 1142.072508][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1142.072523][T13088] Call Trace: [ 1142.072533][T13088] [ 1142.072543][T13088] dump_stack_lvl+0x189/0x250 [ 1142.072579][T13088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1142.072606][T13088] ? __pfx__printk+0x10/0x10 [ 1142.072641][T13088] ? kernfs_path_from_node+0x2f/0x290 [ 1142.072666][T13088] ? kernfs_path_from_node+0x250/0x290 [ 1142.072688][T13088] ? kernfs_path_from_node+0x2f/0x290 [ 1142.072717][T13088] sysfs_warn_dup+0x8e/0xa0 [ 1142.072740][T13088] sysfs_do_create_link_sd+0xc0/0x110 [ 1142.072767][T13088] device_add_class_symlinks+0x1cf/0x240 [ 1142.072809][T13088] device_add+0x475/0xb50 [ 1142.072838][T13088] wiphy_register+0x1ba6/0x28d0 [ 1142.072878][T13088] ? __pfx_wiphy_register+0x10/0x10 [ 1142.072899][T13088] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1142.072934][T13088] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1142.072968][T13088] ieee80211_register_hw+0x3484/0x4100 [ 1142.073015][T13088] ? ieee80211_register_hw+0x1491/0x4100 [ 1142.073057][T13088] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1142.073092][T13088] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1142.073133][T13088] ? __hrtimer_setup+0x187/0x210 [ 1142.073153][T13088] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1142.073188][T13088] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1142.073251][T13088] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1142.073279][T13088] ? trace_kmalloc+0x1f/0xd0 [ 1142.073302][T13088] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1142.073330][T13088] ? kstrndup+0xbf/0x160 [ 1142.073361][T13088] hwsim_new_radio_nl+0xea4/0x1b10 [ 1142.073394][T13088] ? __pfx___nla_validate_parse+0x10/0x10 [ 1142.073433][T13088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1142.073480][T13088] ? __nla_parse+0x40/0x60 [ 1142.073507][T13088] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1142.073548][T13088] genl_family_rcv_msg_doit+0x215/0x300 [ 1142.073586][T13088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1142.073632][T13088] ? bpf_lsm_capable+0x9/0x20 [ 1142.073660][T13088] ? security_capable+0x7e/0x2e0 [ 1142.073700][T13088] genl_rcv_msg+0x60e/0x790 [ 1142.073737][T13088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1142.073764][T13088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1142.073813][T13088] netlink_rcv_skb+0x205/0x470 [ 1142.073832][T13088] ? __lock_acquire+0xab9/0xd20 [ 1142.073864][T13088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1142.073894][T13088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1142.073959][T13088] ? down_read+0x1ad/0x2e0 [ 1142.073988][T13088] genl_rcv+0x28/0x40 [ 1142.074012][T13088] netlink_unicast+0x82f/0x9e0 [ 1142.074069][T13088] ? __pfx_netlink_unicast+0x10/0x10 [ 1142.074104][T13088] ? netlink_sendmsg+0x642/0xb30 [ 1142.074124][T13088] ? skb_put+0x11b/0x210 [ 1142.074153][T13088] netlink_sendmsg+0x805/0xb30 [ 1142.074197][T13088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.074225][T13088] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1142.074250][T13088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1142.074291][T13088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.074326][T13088] __sock_sendmsg+0x219/0x270 [ 1142.074363][T13088] ____sys_sendmsg+0x505/0x830 [ 1142.074397][T13088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1142.074436][T13088] ? import_iovec+0x74/0xa0 [ 1142.074469][T13088] ___sys_sendmsg+0x21f/0x2a0 [ 1142.074499][T13088] ? __pfx____sys_sendmsg+0x10/0x10 [ 1142.074571][T13088] ? __fget_files+0x2a/0x420 [ 1142.074589][T13088] ? __fget_files+0x3a0/0x420 [ 1142.074622][T13088] __x64_sys_sendmsg+0x19b/0x260 [ 1142.074652][T13088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1142.074699][T13088] ? rcu_is_watching+0x15/0xb0 [ 1142.074728][T13088] ? do_syscall_64+0xbe/0x3b0 [ 1142.074758][T13088] do_syscall_64+0xfa/0x3b0 [ 1142.074780][T13088] ? lockdep_hardirqs_on+0x9c/0x150 [ 1142.074801][T13088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.074827][T13088] ? clear_bhb_loop+0x60/0xb0 [ 1142.074853][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.074874][T13088] RIP: 0033:0x7fbffdb8ec29 [ 1142.074895][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.074912][T13088] RSP: 002b:00007fbffe9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1142.074936][T13088] RAX: ffffffffffffffda RBX: 00007fbffddd5fa0 RCX: 00007fbffdb8ec29 [ 1142.074969][T13088] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1142.074983][T13088] RBP: 00007fbffdc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 1142.074998][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.075011][T13088] R13: 00007fbffddd6038 R14: 00007fbffddd5fa0 R15: 00007ffd4bcb2608 [ 1142.075049][T13088] [ 1142.763163][T13092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11237'. [ 1142.805189][T13092] NCSI netlink: No device for ifindex 0 [ 1142.838926][T13096] erspan0: entered promiscuous mode [ 1142.952191][T13092] NCSI netlink: No device for ifindex 0 [ 1143.143294][T13114] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1143.227522][T13116] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1143.367267][T13126] validate_nla: 34 callbacks suppressed [ 1143.367289][T13126] netlink: 'syz.3.11246': attribute type 1 has an invalid length. [ 1144.229543][T13187] pim6reg1: entered promiscuous mode [ 1144.253435][T13187] pim6reg1: entered allmulticast mode [ 1144.693658][ T4523] Bluetooth: hci3: command 0x0405 tx timeout [ 1145.005781][T13234] __nla_validate_parse: 11 callbacks suppressed [ 1145.005802][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11276'. [ 1145.539290][T13261] netlink: 'syz.1.11285': attribute type 1 has an invalid length. [ 1145.728568][T13271] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11286'. [ 1145.906920][T13279] openvswitch: netlink: IP tunnel dst address not specified [ 1145.949078][T13279] netlink: 'syz.4.11289': attribute type 1 has an invalid length. [ 1145.957880][T13279] netlink: 'syz.4.11289': attribute type 9 has an invalid length. [ 1145.989890][T13281] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1146.004223][T13282] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1146.594845][T13303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11298'. [ 1146.783582][T13315] netlink: 'syz.4.11301': attribute type 29 has an invalid length. [ 1146.809825][T13315] netlink: 'syz.4.11301': attribute type 29 has an invalid length. [ 1146.826959][T13315] netlink: 500 bytes leftover after parsing attributes in process `syz.4.11301'. [ 1146.871617][T13319] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1146.924363][T13319] bond9: entered promiscuous mode [ 1146.929463][T13319] bond9: entered allmulticast mode [ 1146.936129][T13319] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1147.092818][T13331] netlink: 'syz.1.11307': attribute type 5 has an invalid length. [ 1147.130531][T13331] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1147.178330][T13338] netlink: 'syz.1.11307': attribute type 5 has an invalid length. [ 1147.188346][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11306'. [ 1148.731041][T27276] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.762104][T27276] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.856160][T27276] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.887516][T27276] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.960221][T27276] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.970493][T27276] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.020190][T27276] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.030196][T27276] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.152656][T27276] bridge_slave_1: left allmulticast mode [ 1149.158366][T27276] bridge_slave_1: left promiscuous mode [ 1149.167239][T27276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.179638][T27276] bridge_slave_0: left allmulticast mode [ 1149.186431][T27276] bridge_slave_0: left promiscuous mode [ 1149.193981][T27276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.537507][T27276] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1149.547745][T27276] gretap1 (unregistering): left promiscuous mode [ 1149.555197][T27276] gretap1 (unregistering): left allmulticast mode [ 1149.666374][T27276] team0: Port device geneve0 removed [ 1150.038490][T27276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.051683][T27276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.069256][T27276] bond0 (unregistering): Released all slaves [ 1150.277646][T27276] bond1 (unregistering): Released all slaves [ 1150.468034][T27276] bond2 (unregistering): Released all slaves [ 1150.656771][T27276] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1150.665064][T27276] bond4 (unregistering): left promiscuous mode [ 1150.674080][T27276] bond3 (unregistering): Released all slaves [ 1150.848259][T27276] bond4 (unregistering): Released all slaves [ 1151.018710][T27276] bond5 (unregistering): Released all slaves [ 1151.219314][T27276] bond6 (unregistering): Released all slaves [ 1151.236314][T27276] bond7 (unregistering): Released all slaves [ 1152.725650][T27276] tipc: Left network mode [ 1153.219006][T27276] hsr_slave_0: left promiscuous mode [ 1153.225858][T27276] hsr_slave_1: left promiscuous mode [ 1153.235799][T27276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.244572][T27276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.256335][T27276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.263919][T27276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.306673][T27276] veth0_macvtap: left promiscuous mode [ 1153.313792][T27276] veth1_vlan: left promiscuous mode [ 1153.319403][T27276] veth0_vlan: left promiscuous mode [ 1154.049097][T27276] team0 (unregistering): Port device team_slave_1 removed [ 1154.110495][T27276] team0 (unregistering): Port device team_slave_0 removed [ 1155.037239][T27276] IPVS: stop unused estimator thread 0... [ 1155.139134][T27276] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.153308][T27276] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.238868][T27276] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.252058][T27276] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.305677][T27276] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.317230][T27276] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.389655][T27276] bond0: (slave netdevsim0): Releasing backup interface [ 1155.401127][T27276] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1155.413795][T27276] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.529701][T27276] team0: left allmulticast mode [ 1155.534852][T27276] team_slave_0: left allmulticast mode [ 1155.540343][T27276] team_slave_1: left allmulticast mode [ 1155.546752][T27276] dummy0: left allmulticast mode [ 1155.552942][T27276] team0: left promiscuous mode [ 1155.557754][T27276] team_slave_0: left promiscuous mode [ 1155.564273][T27276] team_slave_1: left promiscuous mode [ 1155.569799][T27276] dummy0: left promiscuous mode [ 1155.576917][T27276] bridge0: port 2(team0) entered disabled state [ 1155.585757][T27276] bridge_slave_0: left allmulticast mode [ 1155.591675][T27276] bridge_slave_0: left promiscuous mode [ 1155.597545][T27276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.908429][T27276] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1155.936665][T27276] bond7 (unregistering): (slave gretap2): Releasing active interface [ 1155.946434][T27276] gretap2 (unregistering): left allmulticast mode [ 1156.490155][T27276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.504192][T27276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.516579][T27276] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1156.530315][T27276] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1156.542454][T27276] bond0 (unregistering): Released all slaves [ 1156.694601][T27276] bond1 (unregistering): Released all slaves [ 1156.713003][T27276] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1156.722953][T27276] bond2 (unregistering): Released all slaves [ 1156.871493][T27276] bond3 (unregistering): Released all slaves [ 1156.888463][T27276] bond4 (unregistering): Released all slaves [ 1157.032657][T27276] bond5 (unregistering): Released all slaves [ 1157.179114][T27276] bond6 (unregistering): Released all slaves [ 1157.324353][T27276] bond7 (unregistering): Released all slaves [ 1157.340056][T27276] bond8 (unregistering): Released all slaves [ 1157.470259][T27276] : left promiscuous mode