last executing test programs: 3.69656616s ago: executing program 0 (id=3816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x33, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local}, "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"}}, 0xfce) 3.535319512s ago: executing program 3 (id=3817): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0x7, 0x30, 0x8, 0x10000}, &(0x7f00000000c0)=0x18) 3.388945215s ago: executing program 3 (id=3818): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 3.174250526s ago: executing program 0 (id=3820): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb79"], 0xfdef) 2.989254701s ago: executing program 0 (id=3821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396cff6b5ef9b454e678333fb7c00be87d5eab09b340b5a265014d86abb6ae50065e67b7cdc5362589f9b4", 0x4c, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) shutdown(r0, 0x1) 2.906331598s ago: executing program 0 (id=3823): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4(r1, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="000400e07f78d8b6cb8039e86300", @ANYBLOB="20002abd7000fcdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1001) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) bind$xdp(r7, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 2.434365262s ago: executing program 4 (id=3827): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2.392334724s ago: executing program 3 (id=3828): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.082371103s ago: executing program 2 (id=3831): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 2.054096384s ago: executing program 4 (id=3832): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) sendmmsg$alg(r1, &(0x7f0000003c00)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='i', 0x1}], 0x1, 0x0, 0x0, 0x4048098}], 0x1, 0x20000884) 2.004184543s ago: executing program 3 (id=3833): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@delnexthop={0x70, 0x69, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x4000000}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xd50, 0x0, &(0x7f00000003c0)="6d79737ebcffffffffffff7f572c", 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) unshare(0x20000400) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="ab0afcd235388da8596affbe3db889f3c6fc4eaf82168b3f72c81691bc66785b6c528172", 0x24}, {&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e0854c2568840b07e9e2fe100048ae11f2e5ec2841625e5b2906ee4e4ad625c90ab6cebe2c5b2d3825e3e0be2a8a6d171c39dcbd89acb732d4bf6b4571344dfff", 0x80}, {&(0x7f0000000300)="e83bc4a556d71f44ba70f8d71d7b80b215f00b86749e87b0d2496a83379e7f0dd4e086dab0b9bede62be28608ad71c80e3ae38559c70a9f859e51181f69778776583e2059e09445900b4a1aee8e7cbd99745d0ecd482dca556f8dd7973d443a5a72eefc7bc0ae82ee1b706dcbd623fc13d0d0c961e70903cda3882005d3f66c9a4b59984524081be93e1", 0x8a}, {&(0x7f00000004c0)="cbf112190657eb676dcdd7fe41bd7ccb314b200e1482a1c4fc329f4152f84e9dd16c5173eeb43e8a1f4af860972f91b2607da26382011f5f236d755a178c91d58f26129088422edd69c8510c49be560ebab048432c44cd73afc2e3477f77f6add06396", 0x63}, {&(0x7f0000000140)="b6a25e9783f44f17a691e1417a243fd2375f0f3c877a7222b2ff66bf81ebd93664222f3027233a0d2c550003ea", 0x2d}, {&(0x7f0000000580)}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x1, 0x0, 0x0, 0x20044810}}], 0x2, 0x8004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r8, 0x12574000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x32600) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.861291099s ago: executing program 4 (id=3834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1.841352658s ago: executing program 2 (id=3835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x2, 0x0, 0x17, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x38, 0x28, 0x68, 0x0, 0x2, 0x6, 0x0, @broadcast, @local}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}, 0x36) 1.7686908s ago: executing program 1 (id=3836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113d00000000008510000002000000850000007600000095000000000000009500a5050000000090fc9372145101d6914c703fb3883908b0de09d5622ed6a386b80931378799ea02ceda0d6287f94a3624aeb02c707d040eb3c89963689629cd4f8d302aa18717065299eedb672c8a4027f3ef4b42a82f8f9530958460e67b6e0f511e9d6366ff0f6c8244fe29568a3ca54a710ea0985f84a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb13e728}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x911f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x40040400) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x30, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c004}, 0x24084084) 1.531170181s ago: executing program 1 (id=3837): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.4940884s ago: executing program 0 (id=3838): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1.364315207s ago: executing program 1 (id=3839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000100fcff0700000018000180140002006970766c616e31000000000000000000eb7ba29f3f9eb10ef11d0364ffd12562531055bc57bc1fe51af1f61586fe77e6558257c54cfbe889b24edade587175cd"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 980.022225ms ago: executing program 1 (id=3840): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000bb00009f8100524a98216828793b908b2fd83696f0c641d0e2d0d972", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000009b000000b70000000000000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x2, 0xa, 0x0) socket(0x1f, 0x800000003, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) close(r3) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000200)={r1}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004"], 0x48}, 0x1, 0x0, 0x0, 0x8011}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xb, 0x0, &(0x7f0000000040)="0426063d032bbb00696549", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000240), &(0x7f0000000080)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) 897.025798ms ago: executing program 2 (id=3841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001280)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x8, 0xfc0, 0x64, 0x0, 0x2, 0x11, 0x0, @empty, @remote, {[@timestamp={0x44, 0x4, 0xda, 0x0, 0x4}]}}, {0x4e23, 0x4e22, 0xfa8, 0x0, @opaque="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"}}}, 0xfce) 896.695447ms ago: executing program 4 (id=3842): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x2040000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 896.114263ms ago: executing program 3 (id=3843): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x4001) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x3) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x4000004) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x8001}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in6={0xa, 0x4e23, 0xfffffff7, @remote, 0x8}], 0x74) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) unshare(0x22020400) connect$can_j1939(r3, &(0x7f0000000600)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x1}, 0xff}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 860.69987ms ago: executing program 1 (id=3844): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 639.749754ms ago: executing program 2 (id=3845): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000019c0)={'tunl0\x00', &(0x7f0000001940)={'gre0\x00', 0x0, 0x1, 0x20, 0xffffffad, 0x140, {{0x13, 0x4, 0x2, 0xf, 0x4c, 0x66, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@timestamp_addr={0x44, 0x34, 0x5b, 0x1, 0xe, [{@multicast1, 0x395}, {@private=0xa010101, 0x4cd}, {@private=0xa010100, 0x3}, {@multicast1, 0x54ac}, {@broadcast, 0x6}, {@rand_addr=0x64010100, 0xf415}]}, @generic={0x7, 0x3, '='}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000015c0)="678c56b9b983259530d81b6e6431d50f65904289b09ddbf1b95a9fb357fda46958ab7a77374160ab2e32df39f6698c18d037bcbe065898db1a071f9128c6bfdb52f4dc929a188f9889f1c16cdef7b7de7127460b62c6d2281b7a25fee954faefbbc8c8dfa813d021a386f8a736ea9362255dd9a7594891830b8855a1484e9b5a1fd3aff90993687ff2e5ba521459331bc89731f2a78b451aa67ecb88936e69ed18cc87083a480ba4d0db626a9459cd76afbb6058261d387c5fcfba1ff56032d1732bcc354e4bd878f19f72a78cdfb63c4b7b2564e266f96c451dbeabf25ea8e73ba7000cafa6ad", 0xe7}, {&(0x7f00000016c0)="f0166c098e3cbaf18deed04fe1db362b2c6ff5f34c52e96da8453e080759bf56d99715e19fa2d5aef774ebbb6c91db27b372654f5e23abcf7e0208d8051ab7e0d33ad3626bb22b4f6fdd563e250ebc2fa29601fd301cd4a98620e6f8d4ff2541bbe35b979fec3106e6aabe21eb2f5545445d67f0ca2b72f2add691f691a2901a0616a86e590e9c869d347489cc64109810f3e08b8c31228f39a19706f262bda5d9b9e2e082c52d0138c1e6aef6b65fb3410acbf36a37a05713357f39bac9409809559894b857610c8ebcd1bf5151eed040f8c7ebdfec39c0048dafb2f6a485", 0xdf}, {&(0x7f0000001880)="7ff85cc3eee09592397320f9824fcea078be3376a1c09b51517e38e877cc9238c2a965917dacb9da08a75535ee3e825d4f8850812040b5a28cf362d74a96072b8c2a113cc6e11a4d1f32bd7ef9274a5ecf3de04614fd72dd38729f013dabc4846b1ddf432bb0a99f9d2ce692dba6a589d51ccdf3612d25d86d74", 0x7a}], 0x3, &(0x7f0000001a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x10}}], 0x28}}], 0x2, 0x20000890) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) 562.905447ms ago: executing program 0 (id=3846): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={r0}) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x0, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r7) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x20008890) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x90) 491.056216ms ago: executing program 4 (id=3847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113d00000000008510000002000000850000007600000095000000000000009500a5050000000090fc9372145101d6914c703fb3883908b0de09d5622ed6a386b80931378799ea02ceda0d6287f94a3624aeb02c707d040eb3c89963689629cd4f8d302aa18717065299eedb672c8a4027f3ef4b42a82f8f9530958460e67b6e0f511e9d6366ff0f6c8244fe29568a3ca54a710ea0985f84a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r2}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb13e728}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x911f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x40040400) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x30, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c004}, 0x24084084) 490.223275ms ago: executing program 3 (id=3848): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4(r1, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="000400e07f78d8b6cb8039e86300", @ANYBLOB="20002abd7000fcdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1001) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) bind$xdp(r7, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 377.324819ms ago: executing program 2 (id=3849): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r1, 0x0, 0x417}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 204.363964ms ago: executing program 1 (id=3850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000075258f9f730892"], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x20, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000001300)={0x12cc, 0x13, 0x6, 0x3, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x1}, [@nested={0x188, 0xd3, 0x0, 0x1, [@nested={0x4, 0x45}, @nested={0x4, 0xab}, @nested={0x4, 0xf5}, @nested={0x4, 0x2b}, @nested={0x4, 0x5a}, @generic="c3295db0e07b97fa9b128b5f0593c21aa848765957a0491b15860ddf7229255a9d3f05e5168a3b2a78d9ebe9e8047e6e7392828f208ff24a3dcd0adaaeb63e1856a7dce528c0936e5ea8d7c43d60ae80be3c27ec7e264c97d26944e092881e7aab7c65034bdb018e3a0640cba8464560da17081d180d667cbe181a31", @nested={0x4, 0x12d}, @nested={0x4, 0x53}, @generic="ca12b3106ef7e58089a8ae434609082a", @generic="258d002f625a4a90c49a29d6f017c65b04b80107246ba8d6e5d41f378c558787efd7e41f5f642e384ab6c351ce7419c634e760e9696a51cf7e69cf09c6b45a81ab646c3f962cfa90060f057f3d3128e36594116e99c02e5fed1ead7f5bca6ca5dd2a1626dcdd1403f4881f21cf55bd425389dcfd13f8828d947a6cfea6b1f46bad482abcf2fd716f61b1ab49b10b8a0069ae1222c30e86a073026e08abd2ad6c3edde6ad0ee44e887f863b687b8fa02a90c04558257a6eac9c6cd2f4e1ad6f600b2eb6235dcc260879880c04d5c34d6475492c18dc4ad4ea2dca2490"]}, @typed={0xc, 0xe4, 0x0, 0x0, @u64=0x2}, @generic="2e3f8adc1c16e8a9cdd83487d37019dce15ba1ad1b9628ca7ac0d95f4b1d96b29957c2af24b9af169b9ee798ba56733e", @typed={0xd1, 0x147, 0x0, 0x0, @binary="a39acd43383093dc2d44659952aedd6f1a04b7afc82958cf2fc386a83a3fc647f162ae5f069122cecf3c82ff3ae81bb634383a2e52875dee8cea82c4de33ef905cdf16725b804956a85311e2abd27ad2446f61c1f5697b3a249de2bcf68f91b413f8a952e1a5d2684d93089cef58ab8e609c71a334efba3e92714021cd7d9e1e21adfa364fdaaa29d20dac395f01d26317a12b8995540773cec2e405f30c1c0ff7337d407d58dc7dfb0b2bed8f13482f4d9d394d5d4eab864fdc567a4d5917db4da4fc69f39ec3bc39c42019ba"}, @nested={0x101e, 0xba, 0x0, 0x1, [@nested={0x4, 0xb6}, @generic="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", @generic="638562e7df68d81c7f1a14cc17b65665936586", @nested={0x4, 0xe}]}]}, 0x12cc}, 0x1, 0x0, 0x0, 0x4040884}, 0x800) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@gettaction={0x58, 0x32, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffe2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r10], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) 115.341238ms ago: executing program 2 (id=3851): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10003, 'syz1\x00', @null, 0x1, 0x0, [@null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 0s ago: executing program 4 (id=3852): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb9713", 0x91}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x144}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="99f8ee40de143dd62dc7cf8951bd537eb95f29353b0e655a501fa595b474eb130c4caa8d31c1958f8c876e44e4d16a7a38c4f52e98dfd11ccf54c2e26cfff46bc27e0947e391847f604765a38dddda3600abb8aa5bed85ed170c14c9f864cd5f303c0f5768013e1f24a8579e3ddfbfa84c0773ee95be4910d8b476f68dc005e58b6eb0b949b3d2b860c2ea8c9f0ff61cf2b910513ebdbd724d3c3088034ecc6e555ca40b4c797b88b8e3f0efba5ad92971ef", 0xb2}, {&(0x7f00000007c0)="a6643c5a8d917ff4438f8b93b5bd73d1b3871afea241d79bc7d9ccd930fbf81d3b2b270ca358839d2cf3712108bed062b412eb799e681a6cde9bdcac5648ec9f4b0808e303d8ee189f22bd10afd8042c36b79dbe4270d22ac53a819a4d965ab776b4500ed7e9d18a936ac4423b6823aed7a2e822acf883af66a80887f153ea80eb289406cf63ff44e1d48d1a37244edf9b3bd6e14ac417126155d3086d3e0ebef87257433283fd74fe435609e5fc67767ab7a9c49fd6fe08bed196369f25bc8dc48d9cba87865b3f0f902452971f9ed676cff4c84a4ccc4e4e6349", 0xdb}, {&(0x7f00000006c0)="6202873c4198136e1418d24a637e53f08567184b793f1e406fa7895129a74f70b9c472d23e723cab5314c51c56e1ce005d639d80db85dbbfdeef36e9266310d4e9fec2236051685e9a6aa2b3549780ca8e54faf1753b2514be24442960064b0938873974214721681403a3f18b14a2d8e0ed36c7975dc930170a0a3526ddc3c2f5ad4cdf728e832d8478ba5d0c04a5aa25df9dc7e185dfa193b198e4bc05533f6a11de9a06dd484930abc2ebe327a93a", 0xb0}, {&(0x7f0000000380)="361b0d0b2e2c95d7ac23a896f0932cc52bad2ad1a85e0734bf4b516da870f56e667461b8e3cee9340dcbd69531f5cd24ae7079750fb9ccbdef278a2f453cb4ed1a0f7e655dc3e36f25e71c3947c288e05f7218d9e40f8f88c41d769a846e", 0x5e}, {&(0x7f0000000240)="fe5eb813379da35820790e63ccbd5066c37c0b39f88d2e7736c0", 0x1a}, {&(0x7f0000000a40)="3ffa1f821a79fbed1b79d9ec5563cb759519b818a7d813a0eb0ac9f52cff06b6a5b827fb22a897260c5e43116dc329c3401361651cc527df17e3698331925d734875b75c268fb70813fae8ac06294c70b4a9b6", 0x53}], 0x6}}], 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 477.574512][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'. [ 477.584757][T13418] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1734'. [ 477.620341][T13411] bond10: (slave veth17): Enslaving as a backup interface with a down link [ 477.680331][T13419] 8021q: adding VLAN 0 to HW filter on device bond10 [ 477.807468][T13425] ipt_ECN: cannot use operation on non-tcp rule [ 477.998447][T13429] syzkaller0: entered allmulticast mode [ 478.101105][T13429] syzkaller0 (unregistering): left allmulticast mode [ 478.937576][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.967270][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.986249][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.008116][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.064576][T13456] lo speed is unknown, defaulting to 1000 [ 479.243325][T13466] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1750'. [ 479.814142][T13456] lo speed is unknown, defaulting to 1000 [ 479.849873][T13456] lo speed is unknown, defaulting to 1000 [ 480.095981][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 480.717728][T13483] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1756'. [ 480.970572][T13493] ipt_ECN: cannot use operation on non-tcp rule [ 481.202859][T13492] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 481.348692][T13496] syzkaller0: entered allmulticast mode [ 481.474712][T13493] syzkaller0 (unregistering): left allmulticast mode [ 481.804193][T13513] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 482.032763][T13524] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1770'. [ 482.220468][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 482.428396][T13518] lo speed is unknown, defaulting to 1000 [ 482.684442][T13547] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1776'. [ 483.750387][T13518] lo speed is unknown, defaulting to 1000 [ 483.790397][T13518] lo speed is unknown, defaulting to 1000 [ 484.596701][T13585] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1786'. [ 484.855044][T13589] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 484.987400][T13595] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 485.060595][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 485.078700][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1789'. [ 485.131343][T13595] veth13: entered promiscuous mode [ 485.145440][T13595] bond3: (slave veth13): Enslaving as a backup interface with a down link [ 485.156773][T13595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 485.170454][T13595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.606793][T13615] lo speed is unknown, defaulting to 1000 [ 485.880958][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1799'. [ 486.000936][T13615] lo speed is unknown, defaulting to 1000 [ 486.008764][T13615] lo speed is unknown, defaulting to 1000 [ 486.186601][T13638] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 486.287101][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 486.415721][T13651] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1805'. [ 486.480576][T13656] ipt_ECN: cannot use operation on non-tcp rule [ 486.745209][T13668] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 487.312745][T13671] veth19: entered promiscuous mode [ 487.355745][T13671] bond11: (slave veth19): Enslaving as a backup interface with a down link [ 487.522890][T13682] tipc: Enabled bearer , priority 14 [ 487.706825][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 487.903097][T13688] lo speed is unknown, defaulting to 1000 [ 488.275294][T13688] lo speed is unknown, defaulting to 1000 [ 488.288997][T13688] lo speed is unknown, defaulting to 1000 [ 488.889675][T13710] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 488.976951][T13720] IPv6: addrconf: prefix option has invalid lifetime [ 489.029630][T13712] sch_fq: defrate 0 ignored. [ 489.146908][T13716] veth11: entered promiscuous mode [ 489.200050][T13716] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 489.208736][T13724] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1827'. [ 489.534003][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 490.200679][T13748] tc_dump_action: action bad kind [ 490.249584][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 490.369514][T13750] lo speed is unknown, defaulting to 1000 [ 490.893139][T13750] lo speed is unknown, defaulting to 1000 [ 490.931471][T13750] lo speed is unknown, defaulting to 1000 [ 490.950626][T13772] ipt_ECN: cannot use operation on non-tcp rule [ 491.340313][T13779] syzkaller0: entered allmulticast mode [ 491.445790][T13778] syzkaller0 (unregistering): left allmulticast mode [ 491.861779][T13787] netlink: 'syz.3.1848': attribute type 64 has an invalid length. [ 491.892112][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 492.829579][T13817] ipt_ECN: cannot use operation on non-tcp rule [ 492.947606][T13821] syzkaller0: entered allmulticast mode [ 492.991780][T13821] syzkaller0 (unregistering): left allmulticast mode [ 494.067175][T13836] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1866'. [ 494.313777][T13841] tipc: Resetting bearer [ 494.515942][T13834] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1867'. [ 494.539337][T13846] ipt_ECN: cannot use operation on non-tcp rule [ 494.721389][T13848] syzkaller0: entered allmulticast mode [ 494.784043][T13848] syzkaller0 (unregistering): left allmulticast mode [ 495.487046][T13867] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 495.514528][T13867] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1877'. [ 495.734470][T13876] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1880'. [ 495.926704][T13882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1883'. [ 496.351240][T13896] ipt_ECN: cannot use operation on non-tcp rule [ 496.351354][T13894] tipc: Enabling of bearer rejected, already enabled [ 496.379713][T13894] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 496.396067][T13894] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 496.413050][T13894] tipc: Resetting bearer [ 496.445736][T13894] tipc: Resetting bearer [ 496.506549][T13901] syzkaller0: entered allmulticast mode [ 496.695278][T13901] syzkaller0 (unregistering): left allmulticast mode [ 496.881123][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 496.936328][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 497.212907][T13924] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1896'. [ 498.013669][T13936] tipc: Enabled bearer , priority 0 [ 498.026365][T13936] syzkaller0: entered promiscuous mode [ 498.033567][T13936] syzkaller0: entered allmulticast mode [ 498.065270][T13938] tipc: Resetting bearer [ 498.240452][T13941] tipc: Resetting bearer [ 498.260611][T13935] tipc: Resetting bearer [ 498.296283][T13935] tipc: Disabling bearer [ 498.864350][T13958] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1910'. [ 498.956392][T13798] Set syz1 is full, maxelem 65536 reached [ 499.241642][ T10] lo speed is unknown, defaulting to 1000 [ 499.274344][ T10] syz0: Port: 1 Link DOWN [ 499.282950][ T10] lo speed is unknown, defaulting to 1000 [ 499.442784][T13975] tipc: Enabled bearer , priority 0 [ 499.472742][T13975] syzkaller0: entered promiscuous mode [ 499.481478][T13975] syzkaller0: entered allmulticast mode [ 499.494276][T13981] tun0: tun_chr_ioctl cmd 1074025681 [ 499.552844][T13975] tipc: Resetting bearer [ 499.575697][T13972] tipc: Resetting bearer [ 499.599859][T13972] tipc: Disabling bearer [ 499.634984][T13986] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 499.688561][T13990] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1920'. [ 499.736773][T13986] veth9: entered promiscuous mode [ 499.772428][T13986] bond0: (slave veth9): Enslaving as a backup interface with a down link [ 499.783033][T13990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1920'. [ 499.805189][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.856528][T13996] lo speed is unknown, defaulting to 1000 [ 500.044794][T14001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1923'. [ 500.105391][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 500.385683][T13996] lo speed is unknown, defaulting to 1000 [ 500.410335][T13996] lo speed is unknown, defaulting to 1000 [ 500.617028][T14015] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1927'. [ 501.195850][T14013] tipc: Resetting bearer [ 501.776996][T14038] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 501.842838][T14040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1933'. [ 501.961294][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1933'. [ 502.066454][T14045] veth9: entered promiscuous mode [ 502.089740][T14045] bond0: (slave veth9): Enslaving as a backup interface with a down link [ 502.114034][T14046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.122496][T14050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1937'. [ 502.347693][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 502.616464][T14072] tipc: Enabled bearer , priority 0 [ 502.642790][T14072] syzkaller0: entered promiscuous mode [ 502.648761][T14072] syzkaller0: entered allmulticast mode [ 502.730343][T14071] tipc: Resetting bearer [ 502.774421][T14071] tipc: Disabling bearer [ 502.901002][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'. [ 502.914993][T14081] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 503.682275][T14107] ip6t_srh: unknown srh invflags 4449 [ 503.928674][T14120] syzkaller0: entered allmulticast mode [ 503.953421][T14120] syzkaller0 (unregistering): left allmulticast mode [ 504.098219][T14124] tap0: tun_chr_ioctl cmd 1074025677 [ 504.104019][T14124] tap0: linktype set to 776 [ 504.327547][T14134] tap0: tun_chr_ioctl cmd 1074025677 [ 504.334069][T14134] tap0: linktype set to 774 [ 504.418502][T14138] ip6t_srh: unknown srh invflags 4449 [ 505.486456][T14167] sctp: [Deprecated]: syz.3.1982 (pid 14167) Use of int in max_burst socket option. [ 505.486456][T14167] Use struct sctp_assoc_value instead [ 505.516499][T14158] lo speed is unknown, defaulting to 1000 [ 505.751531][T14177] ip6t_srh: unknown srh invflags 4449 [ 505.956260][T14192] __nla_validate_parse: 5 callbacks suppressed [ 505.956281][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 505.999026][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 506.349386][T14200] syzkaller0: entered allmulticast mode [ 506.493246][T14200] syzkaller0 (unregistering): left allmulticast mode [ 506.666010][T14212] netlink: 'syz.4.1993': attribute type 13 has an invalid length. [ 506.760609][T14212] netlink: 'syz.4.1993': attribute type 17 has an invalid length. [ 506.962306][T14212] erspan0: left promiscuous mode [ 507.014122][T14221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.097354][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.119601][T14212] tipc: Resetting bearer [ 507.179156][T14224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.324095][T14221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.366773][T14212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.501344][T14158] lo speed is unknown, defaulting to 1000 [ 507.510685][T14210] lo speed is unknown, defaulting to 1000 [ 507.533207][T14158] lo speed is unknown, defaulting to 1000 [ 507.642467][T14230] ipt_ECN: cannot use operation on non-tcp rule [ 507.833711][T14231] syzkaller0: entered allmulticast mode [ 507.901005][T14231] syzkaller0 (unregistering): left allmulticast mode [ 508.380741][T14216] lo speed is unknown, defaulting to 1000 [ 508.388693][T14210] lo speed is unknown, defaulting to 1000 [ 508.450872][T14244] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2000'. [ 508.485222][T14241] ip6t_srh: unknown srh invflags 4449 [ 508.760122][T14210] lo speed is unknown, defaulting to 1000 [ 508.787165][T14216] lo speed is unknown, defaulting to 1000 [ 508.901448][T14216] lo speed is unknown, defaulting to 1000 [ 509.009386][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 509.027315][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 509.436492][T14261] vxcan3: entered allmulticast mode [ 510.179619][T14273] ip6t_srh: unknown srh invflags 4449 [ 510.929842][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 510.940855][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 510.984450][T14299] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2021'. [ 511.030560][T14294] tipc: Resetting bearer [ 511.403491][T14307] ip6t_srh: unknown srh invflags 4449 [ 511.554064][T14320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2029'. [ 511.959842][T14330] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 512.013501][T14333] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2031'. [ 512.121840][T14328] lo speed is unknown, defaulting to 1000 [ 512.332086][T14317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.446388][T14330] veth11: entered promiscuous mode [ 512.456240][T14330] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 512.653818][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 513.323978][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 513.592171][T14328] lo speed is unknown, defaulting to 1000 [ 513.681104][T14328] lo speed is unknown, defaulting to 1000 [ 513.812923][T14378] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 513.832502][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 514.776888][T14422] netlink: 'syz.2.2058': attribute type 13 has an invalid length. [ 514.786116][T14422] netlink: 'syz.2.2058': attribute type 17 has an invalid length. [ 514.943900][T14422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.044794][T14422] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.089540][T14422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.109939][T14435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.120554][ T5926] lo speed is unknown, defaulting to 1000 [ 515.126323][ T5926] syz2: Port: 1 Link ACTIVE [ 515.217401][T14426] lo speed is unknown, defaulting to 1000 [ 515.387108][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'. [ 515.461792][T14422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.533707][T14422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.177267][T14426] lo speed is unknown, defaulting to 1000 [ 516.195238][T14426] lo speed is unknown, defaulting to 1000 [ 516.328064][T14474] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2075'. [ 516.656676][T14480] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2076'. [ 517.652424][T14513] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 517.730067][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 517.873699][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2086'. [ 517.919367][T14523] veth15: entered promiscuous mode [ 517.945245][T14523] bond4: (slave veth15): Enslaving as a backup interface with a down link [ 517.988025][T14513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.089942][T14534] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2092'. [ 519.037375][T14564] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 519.077147][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2102'. [ 519.100082][T14567] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2103'. [ 519.114177][T14564] veth13: entered promiscuous mode [ 519.124145][T14564] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 519.136168][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2102'. [ 519.180439][T14564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 519.586685][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f108000: rx timeout, send abort [ 519.595933][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'. [ 519.597588][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806f108000: 0x3ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 519.954616][T14598] netlink: 'syz.4.2114': attribute type 1 has an invalid length. [ 520.046650][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 520.204045][T14598] veth13: entered promiscuous mode [ 520.261328][T14598] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 520.378073][T14609] 8021q: adding VLAN 0 to HW filter on device bond6 [ 520.392893][T14616] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 520.592526][T14624] veth11: entered promiscuous mode [ 520.625751][T14624] bond6: (slave veth11): Enslaving as a backup interface with a down link [ 520.653384][T14616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.361708][ T5926] lo speed is unknown, defaulting to 1000 [ 521.368486][T14653] __nla_validate_parse: 4 callbacks suppressed [ 521.368505][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2129'. [ 521.384561][ T5926] syz2: Port: 1 Link DOWN [ 521.565595][T14659] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 521.731950][T14659] veth15: entered promiscuous mode [ 521.828531][T14667] ipt_ECN: cannot use operation on non-tcp rule [ 521.948052][ T30] audit: type=1804 audit(1753100430.833:29): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2136" name="/newroot/419/memory.events" dev="tmpfs" ino=2221 res=1 errno=0 [ 522.008339][ T30] audit: type=1800 audit(1753100430.833:30): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2136" name="memory.events" dev="tmpfs" ino=2221 res=0 errno=0 [ 522.032795][T14676] syzkaller0: entered allmulticast mode [ 522.133957][T14676] syzkaller0 (unregistering): left allmulticast mode [ 522.813321][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 522.858062][T14705] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2149'. [ 523.025948][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 523.155689][T14711] ip6t_srh: unknown srh invflags 4449 [ 524.118501][T14742] ipt_ECN: cannot use operation on non-tcp rule [ 524.319206][T14752] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2165'. [ 524.364982][T14750] syzkaller0: entered allmulticast mode [ 524.442449][T14747] syzkaller0 (unregistering): left allmulticast mode [ 524.710834][T14689] lo speed is unknown, defaulting to 1000 [ 526.086001][T14804] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2176'. [ 526.190796][T14763] lo speed is unknown, defaulting to 1000 [ 526.200123][T14689] lo speed is unknown, defaulting to 1000 [ 526.296229][T14689] lo speed is unknown, defaulting to 1000 [ 526.765340][T14763] lo speed is unknown, defaulting to 1000 [ 526.785820][T14763] lo speed is unknown, defaulting to 1000 [ 526.884778][T14813] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2179'. [ 527.482935][T14823] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 527.555173][T14824] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2181'. [ 527.727546][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2181'. [ 527.740033][T14823] 8021q: adding VLAN 0 to HW filter on device bond7 [ 527.939386][T14826] veth13: entered promiscuous mode [ 528.030825][T14826] bond7: (slave veth13): Enslaving as a backup interface with a down link [ 529.010120][T14854] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 529.152652][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'. [ 529.329193][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2186'. [ 529.441931][T14869] veth15: entered promiscuous mode [ 529.484473][T14869] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 529.495654][T14854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 529.724161][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 529.736778][T14882] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2192'. [ 529.796951][T14878] vlan1: entered allmulticast mode [ 529.825941][T14878] syz_tun: entered allmulticast mode [ 530.624485][T14904] netlink: 'syz.3.2199': attribute type 39 has an invalid length. [ 530.688935][T14906] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2200'. [ 530.920781][T14912] netlink: 'syz.4.2202': attribute type 1 has an invalid length. [ 531.005071][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 531.130436][T14923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2202'. [ 531.218100][T14912] veth15: entered promiscuous mode [ 531.234497][T14912] bond7: (slave veth15): Enslaving as a backup interface with a down link [ 531.264504][T14923] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.456166][T14928] ip6t_srh: unknown srh invflags 4449 [ 532.020918][T14959] __nla_validate_parse: 2 callbacks suppressed [ 532.020940][T14959] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2219'. [ 532.039995][T14958] netlink: 'syz.1.2218': attribute type 1 has an invalid length. [ 532.119373][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'. [ 532.223757][T14958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2218'. [ 532.342197][T14964] veth17: entered promiscuous mode [ 532.355494][T14964] bond8: (slave veth17): Enslaving as a backup interface with a down link [ 532.404540][T14958] 8021q: adding VLAN 0 to HW filter on device bond8 [ 532.586029][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'. [ 532.600051][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 532.623532][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 532.652684][ T7937] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.674518][ T7937] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.686531][T14969] ip6t_srh: unknown srh invflags 4449 [ 532.692664][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 532.709584][T14975] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2225'. [ 532.721713][ T7937] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.733649][T14976] netlink: 'syz.0.2224': attribute type 15 has an invalid length. [ 532.752163][ T7937] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.830964][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 532.848723][T14976] netlink: 'syz.0.2224': attribute type 15 has an invalid length. [ 533.201229][T14998] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2233'. [ 533.382959][T15007] netlink: 'syz.4.2236': attribute type 20 has an invalid length. [ 533.431963][T15007] netlink: 'syz.4.2236': attribute type 20 has an invalid length. [ 533.432212][ T7930] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.485939][ T7930] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.536234][ T7930] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.559592][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.686445][T15013] ip6t_srh: unknown srh invflags 4449 [ 534.101218][T15021] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 534.521303][T15040] netlink: 'syz.1.2247': attribute type 13 has an invalid length. [ 534.532125][T15040] netlink: 'syz.1.2247': attribute type 17 has an invalid length. [ 535.266566][T15040] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.311774][T15040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.385893][ T980] lo speed is unknown, defaulting to 1000 [ 535.400387][ T980] syz1: Port: 1 Link ACTIVE [ 535.650103][T15053] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 535.704163][T15055] ip6t_srh: unknown srh invflags 4449 [ 535.975232][T15074] lo speed is unknown, defaulting to 1000 [ 536.817299][T15106] netlink: 'syz.2.2263': attribute type 13 has an invalid length. [ 536.846669][T15106] netlink: 'syz.2.2263': attribute type 17 has an invalid length. [ 537.069829][T15106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.142269][T15106] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.183102][T15106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.222322][ T6718] lo speed is unknown, defaulting to 1000 [ 537.228669][ T6718] syz2: Port: 1 Link ACTIVE [ 537.276498][T15085] lo speed is unknown, defaulting to 1000 [ 537.305642][T15074] lo speed is unknown, defaulting to 1000 [ 537.342158][T15074] lo speed is unknown, defaulting to 1000 [ 537.421770][T15122] __nla_validate_parse: 8 callbacks suppressed [ 537.421792][T15122] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2266'. [ 537.744431][T15085] lo speed is unknown, defaulting to 1000 [ 537.762551][T15085] lo speed is unknown, defaulting to 1000 [ 539.202672][T15155] netlink: 'syz.0.2278': attribute type 1 has an invalid length. [ 539.258537][T15155] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2278'. [ 539.285415][T15155] veth15: entered promiscuous mode [ 539.295474][T15155] bond8: (slave veth15): Enslaving as a backup interface with a down link [ 539.307402][T15155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2278'. [ 539.319525][T15155] 8021q: adding VLAN 0 to HW filter on device bond8 [ 539.625837][T15173] syzkaller0: entered allmulticast mode [ 540.061803][T15169] syzkaller0 (unregistering): left allmulticast mode [ 540.235917][T15187] netlink: 'syz.3.2287': attribute type 4 has an invalid length. [ 540.344548][T15191] lo speed is unknown, defaulting to 1000 [ 540.483968][T15195] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2289'. [ 540.929361][T15191] lo speed is unknown, defaulting to 1000 [ 540.929361][T15201] lo speed is unknown, defaulting to 1000 [ 540.981029][T15191] lo speed is unknown, defaulting to 1000 [ 541.321092][T15201] lo speed is unknown, defaulting to 1000 [ 541.433265][T15201] lo speed is unknown, defaulting to 1000 [ 541.508470][T15211] lo speed is unknown, defaulting to 1000 [ 542.490562][T15211] lo speed is unknown, defaulting to 1000 [ 542.511000][T15234] lo speed is unknown, defaulting to 1000 [ 542.540254][T15211] lo speed is unknown, defaulting to 1000 [ 543.355803][T15253] lo speed is unknown, defaulting to 1000 [ 543.571272][T15263] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2304'. [ 543.741617][T15253] lo speed is unknown, defaulting to 1000 [ 543.754853][T15253] lo speed is unknown, defaulting to 1000 [ 543.760034][T15234] lo speed is unknown, defaulting to 1000 [ 543.849024][T15234] lo speed is unknown, defaulting to 1000 [ 545.689723][T15315] lo speed is unknown, defaulting to 1000 [ 545.879777][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 545.926519][T15315] lo speed is unknown, defaulting to 1000 [ 545.930781][T15313] lo speed is unknown, defaulting to 1000 [ 545.934608][T15315] lo speed is unknown, defaulting to 1000 [ 545.983746][T15321] netlink: 'syz.0.2314': attribute type 18 has an invalid length. [ 546.140845][T15324] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2315'. [ 546.396152][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 546.435208][T15321] netlink: 'syz.0.2314': attribute type 18 has an invalid length. [ 547.196340][T15313] lo speed is unknown, defaulting to 1000 [ 547.222930][T15348] lo speed is unknown, defaulting to 1000 [ 547.232990][T15313] lo speed is unknown, defaulting to 1000 [ 548.036257][T15348] lo speed is unknown, defaulting to 1000 [ 548.058913][T15348] lo speed is unknown, defaulting to 1000 [ 549.103824][T15393] netlink: 'syz.2.2327': attribute type 1 has an invalid length. [ 549.333477][T15398] veth21: entered promiscuous mode [ 549.635295][T15404] lo speed is unknown, defaulting to 1000 [ 549.754671][T15416] ip6t_srh: unknown srh invflags 4449 [ 549.952622][T15404] lo speed is unknown, defaulting to 1000 [ 549.960457][T15404] lo speed is unknown, defaulting to 1000 [ 550.227882][T15430] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2338'. [ 550.502620][T15435] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2339'. [ 550.502867][T15439] lo speed is unknown, defaulting to 1000 [ 550.834140][T15439] lo speed is unknown, defaulting to 1000 [ 550.842714][T15439] lo speed is unknown, defaulting to 1000 [ 551.567141][T15463] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 551.899098][T15475] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 552.063444][T15479] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2353'. [ 552.540070][T15489] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2357'. [ 552.807516][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 553.054461][T15510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2365'. [ 553.136088][T15515] tipc: Resetting bearer [ 553.143462][T15516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2367'. [ 553.186936][T15518] netlink: 'syz.0.2366': attribute type 13 has an invalid length. [ 553.210557][T15518] netlink: 'syz.0.2366': attribute type 17 has an invalid length. [ 553.237131][T15518] erspan0: left promiscuous mode [ 553.291959][T15518] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.307148][T15523] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2370'. [ 553.319207][T15518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.340497][ T6717] lo speed is unknown, defaulting to 1000 [ 553.353720][ T6717] syz0: Port: 1 Link ACTIVE [ 553.369399][ T6717] lo speed is unknown, defaulting to 1000 [ 553.421329][T15521] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 553.432420][T15521] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 553.444742][T15521] tipc: Resetting bearer [ 553.544484][T15518] lo speed is unknown, defaulting to 1000 [ 553.778880][T15538] syzkaller1: entered promiscuous mode [ 553.784417][T15538] syzkaller1: entered allmulticast mode [ 554.123685][T15518] lo speed is unknown, defaulting to 1000 [ 554.143929][T15518] lo speed is unknown, defaulting to 1000 [ 554.275460][T15555] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2378'. [ 554.659138][T15569] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2381'. [ 556.604103][T15611] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 556.671197][T15617] veth1_to_bond: entered allmulticast mode [ 556.680335][T15617] __nla_validate_parse: 1 callbacks suppressed [ 556.680354][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'. [ 557.020296][T15617] veth1_to_bond (unregistering): left allmulticast mode [ 557.231764][T15630] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2400'. [ 557.665911][T15641] xt_hashlimit: size too large, truncated to 1048576 [ 558.137406][T15650] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2407'. [ 558.403448][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 558.492893][T15654] netlink: 23932 bytes leftover after parsing attributes in process `syz.0.2408'. [ 558.876146][T15672] tipc: Resetting bearer [ 558.926520][T15674] ipt_ECN: cannot use operation on non-tcp rule [ 559.141112][T15681] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2418'. [ 559.650574][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 559.692239][T15693] veth0: entered promiscuous mode [ 559.707287][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 559.810607][T15693] veth0 (unregistering): left promiscuous mode [ 560.059593][T15700] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2425'. [ 560.415899][T15716] veth0_to_bridge: entered promiscuous mode [ 560.586024][T15707] veth0_to_bridge: left promiscuous mode [ 561.174354][T15744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.189883][T15742] lo speed is unknown, defaulting to 1000 [ 561.796282][T15742] lo speed is unknown, defaulting to 1000 [ 561.823705][T15742] lo speed is unknown, defaulting to 1000 [ 562.185382][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'. [ 563.972265][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'. [ 564.014979][T15790] vlan2: entered promiscuous mode [ 564.565600][T15803] lo speed is unknown, defaulting to 1000 [ 565.057301][T15824] syzkaller0: entered allmulticast mode [ 565.140266][T15821] syzkaller0 (unregistering): left allmulticast mode [ 565.235530][T15803] lo speed is unknown, defaulting to 1000 [ 565.291786][T15803] lo speed is unknown, defaulting to 1000 [ 565.507374][T15838] netlink: 'syz.1.2471': attribute type 1 has an invalid length. [ 565.675366][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 565.723214][T15846] veth18: entered allmulticast mode [ 565.780643][T15846] veth19: entered promiscuous mode [ 566.121185][T15842] lo speed is unknown, defaulting to 1000 [ 566.601502][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 566.723156][T15842] lo speed is unknown, defaulting to 1000 [ 566.736609][T15852] lo speed is unknown, defaulting to 1000 [ 566.768801][T15842] lo speed is unknown, defaulting to 1000 [ 567.381834][T15852] lo speed is unknown, defaulting to 1000 [ 567.390409][T15852] lo speed is unknown, defaulting to 1000 [ 568.295162][T15903] lo speed is unknown, defaulting to 1000 [ 568.987681][T15935] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 569.023248][T15935] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2493'. [ 569.883157][T15950] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 570.005768][T15903] lo speed is unknown, defaulting to 1000 [ 570.016920][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 570.071641][T15903] lo speed is unknown, defaulting to 1000 [ 570.120563][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2499'. [ 570.138723][T15956] netlink: 'syz.0.2499': attribute type 7 has an invalid length. [ 570.146732][T15956] netlink: 'syz.0.2499': attribute type 8 has an invalid length. [ 570.161798][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 570.199460][T15950] veth25: entered promiscuous mode [ 570.363287][T15960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2500'. [ 570.691639][T15970] lo speed is unknown, defaulting to 1000 [ 571.559127][T15996] ipt_ECN: cannot use operation on non-tcp rule [ 571.632912][T15970] lo speed is unknown, defaulting to 1000 [ 571.640966][T15970] lo speed is unknown, defaulting to 1000 [ 571.711960][T16002] syzkaller0: entered allmulticast mode [ 571.772339][T16002] syzkaller0 (unregistering): left allmulticast mode [ 572.175304][ T7929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.194485][ T7929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.536949][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'. [ 574.041006][T16027] lo speed is unknown, defaulting to 1000 [ 574.566915][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'. [ 574.576254][T16062] tipc: Bearer : already 2 bearers with priority 10 [ 574.576280][T16062] tipc: Bearer : trying with adjusted priority [ 574.576294][T16062] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 577.275738][T16027] lo speed is unknown, defaulting to 1000 [ 577.285004][T16066] lo speed is unknown, defaulting to 1000 [ 577.296475][T16027] lo speed is unknown, defaulting to 1000 [ 577.532609][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'. [ 577.582996][T16100] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2529'. [ 578.048092][T16066] lo speed is unknown, defaulting to 1000 [ 578.070261][T16066] lo speed is unknown, defaulting to 1000 [ 578.844631][T16122] lo speed is unknown, defaulting to 1000 [ 578.852448][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 578.894048][T16124] team0: entered promiscuous mode [ 578.899239][T16124] bridge0: entered promiscuous mode [ 578.907442][T16124] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 578.920799][T16124] team0: left promiscuous mode [ 578.925788][T16124] bridge0: left promiscuous mode [ 579.152355][T16122] lo speed is unknown, defaulting to 1000 [ 579.174944][T16122] lo speed is unknown, defaulting to 1000 [ 580.556055][T16135] lo speed is unknown, defaulting to 1000 [ 580.758095][T16144] netlink: 'syz.3.2541': attribute type 10 has an invalid length. [ 580.819045][T16146] tipc: Enabled bearer , priority 0 [ 580.853752][T16135] lo speed is unknown, defaulting to 1000 [ 580.862210][T16135] lo speed is unknown, defaulting to 1000 [ 580.954633][T16146] syzkaller0: entered promiscuous mode [ 580.960926][T16146] syzkaller0: entered allmulticast mode [ 580.967303][T16146] tipc: Resetting bearer [ 581.019413][T16150] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 581.057076][T16140] tipc: Resetting bearer [ 581.524078][T16152] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2544'. [ 583.026866][T16112] Set syz1 is full, maxelem 65536 reached [ 583.959631][T16140] tipc: Disabling bearer [ 584.341334][T16162] xt_CT: No such helper "snmp" [ 584.509623][T16168] lo speed is unknown, defaulting to 1000 [ 584.600117][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 585.209966][T16168] lo speed is unknown, defaulting to 1000 [ 585.230265][T16168] lo speed is unknown, defaulting to 1000 [ 585.436738][T16211] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2560'. [ 585.867461][T16217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2561'. [ 585.876937][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 585.991796][T16219] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 586.036301][T16219] 8021q: adding VLAN 0 to HW filter on device bond8 [ 586.061259][T16222] erspan0: entered promiscuous mode [ 586.073384][T16222] erspan0: left promiscuous mode [ 586.174786][T16219] bond8: (slave veth17): Enslaving as an active interface with a down link [ 586.222877][T16226] vlan0: entered allmulticast mode [ 586.264119][T16226] veth1: entered allmulticast mode [ 586.283642][T16226] bond8: (slave vlan0): Opening slave failed [ 586.346713][T16231] tipc: Enabled bearer , priority 0 [ 586.390358][T16231] syzkaller0: entered promiscuous mode [ 586.400695][T16231] syzkaller0: entered allmulticast mode [ 586.483055][T16231] tipc: Resetting bearer [ 586.497220][T16230] tipc: Resetting bearer [ 586.521204][T16230] tipc: Disabling bearer [ 586.652008][T16248] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2571'. [ 586.732253][T16252] syzkaller0: entered promiscuous mode [ 586.745607][T16252] syzkaller0: entered allmulticast mode [ 587.587024][T16263] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2575'. [ 587.706233][T16269] erspan0: entered promiscuous mode [ 587.724511][T16269] erspan0: left promiscuous mode [ 588.236331][T16292] lo speed is unknown, defaulting to 1000 [ 588.797567][T16312] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2585'. [ 589.291169][T16292] lo speed is unknown, defaulting to 1000 [ 589.300216][T16281] lo speed is unknown, defaulting to 1000 [ 589.310039][T16292] lo speed is unknown, defaulting to 1000 [ 589.619513][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 590.077566][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2589'. [ 590.122214][T16339] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2590'. [ 590.282919][T16334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.425586][T16340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.456809][T16340] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 590.493176][T16340] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 590.587695][T16281] lo speed is unknown, defaulting to 1000 [ 590.591182][T16336] lo speed is unknown, defaulting to 1000 [ 590.686461][T16281] lo speed is unknown, defaulting to 1000 [ 591.251256][T16336] lo speed is unknown, defaulting to 1000 [ 591.352604][T16336] lo speed is unknown, defaulting to 1000 [ 591.380604][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2594'. [ 591.472303][T16363] syz_tun: entered promiscuous mode [ 591.490371][T16363] macvtap1: entered promiscuous mode [ 591.495846][T16363] macvtap1: entered allmulticast mode [ 591.504102][T16363] syz_tun: entered allmulticast mode [ 591.541648][T16364] syz_tun: left allmulticast mode [ 591.547123][T16364] syz_tun: left promiscuous mode [ 591.692816][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'. [ 591.855202][T16369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2596'. [ 592.170668][T16373] tipc: Enabled bearer , priority 0 [ 592.187405][T16373] syzkaller0: entered promiscuous mode [ 592.196935][T16373] syzkaller0: entered allmulticast mode [ 592.312409][T16373] tipc: Resetting bearer [ 592.343515][T16371] tipc: Resetting bearer [ 592.394944][T16371] tipc: Disabling bearer [ 592.464139][T16383] tipc: Enabling of bearer rejected, already enabled [ 592.493528][T16387] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 592.529617][T16387] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 592.562417][T16387] tipc: Resetting bearer [ 592.643657][T16394] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2601'. [ 593.006843][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 593.082507][T16405] batadv0: entered promiscuous mode [ 593.125106][T16405] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 593.173997][T16405] batadv0: left promiscuous mode [ 593.334892][T16417] netlink: 'syz.1.2604': attribute type 10 has an invalid length. [ 593.343793][T16417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2604'. [ 593.413143][T16421] tipc: Enabled bearer , priority 0 [ 593.472546][T16410] syzkaller0: entered promiscuous mode [ 593.485561][T16410] syzkaller0: entered allmulticast mode [ 593.596499][T16410] tipc: Resetting bearer [ 593.660719][T16409] tipc: Resetting bearer [ 593.793623][T16409] tipc: Disabling bearer [ 593.879677][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2608'. [ 593.892427][T16436] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2610'. [ 594.686052][T16458] tipc: Enabled bearer , priority 0 [ 594.708706][T16461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2617'. [ 594.728805][T16458] syzkaller0: entered promiscuous mode [ 594.736585][T16458] syzkaller0: entered allmulticast mode [ 594.795302][T16458] tipc: Resetting bearer [ 594.832741][T16457] tipc: Resetting bearer [ 594.943166][T16471] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2619'. [ 594.959418][T16457] tipc: Disabling bearer [ 595.641499][T16483] lo speed is unknown, defaulting to 1000 [ 595.902687][T16487] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 596.028151][T16487] 8021q: adding VLAN 0 to HW filter on device bond10 [ 596.135047][T16491] 8021q: adding VLAN 0 to HW filter on device bond10 [ 596.156446][T16491] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 596.171149][T16491] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 596.177449][T16487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2624'. [ 596.283511][T16494] veth21: entered promiscuous mode [ 596.322560][T16494] bond10: (slave veth21): Enslaving as an active interface with a down link [ 596.343815][T16483] lo speed is unknown, defaulting to 1000 [ 596.344108][T16501] tipc: Enabled bearer , priority 0 [ 596.369123][T16500] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.377595][T16487] 8021q: adding VLAN 0 to HW filter on device bond10 [ 596.390165][T16493] syzkaller0: entered promiscuous mode [ 596.395704][T16493] syzkaller0: entered allmulticast mode [ 596.411980][T16483] lo speed is unknown, defaulting to 1000 [ 596.517257][T16493] tipc: Resetting bearer [ 596.532983][T16492] tipc: Resetting bearer [ 596.572884][T16492] tipc: Disabling bearer [ 596.625264][T16508] tipc: Enabling of bearer rejected, already enabled [ 596.818330][T16514] !: entered promiscuous mode [ 596.824204][T16514] vlan2: entered promiscuous mode [ 596.938242][T16517] netlink: 'syz.2.2630': attribute type 39 has an invalid length. [ 597.230953][T16523] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2633'. [ 597.572462][T16536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2636'. [ 597.689264][T16539] wg1: left promiscuous mode [ 597.693940][T16539] wg1: left allmulticast mode [ 597.704162][T16539] veth3: left promiscuous mode [ 597.712526][T16539] veth5: left promiscuous mode [ 597.729799][T16539] bond4: (slave veth5): Releasing backup interface [ 597.752590][T16539] veth7: left promiscuous mode [ 597.769109][T16539] bond5: (slave veth7): Releasing backup interface [ 597.786742][T16539] veth9: left promiscuous mode [ 597.811706][T16539] bond0: (slave veth9): Releasing backup interface [ 597.836738][T16539] veth11: left promiscuous mode [ 597.869824][T16539] bond6: (slave veth11): Releasing backup interface [ 597.910260][T16539] veth13: left promiscuous mode [ 597.910345][T16549] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 597.932364][T16539] bond7: (slave veth13): Releasing backup interface [ 597.949801][T16539] veth15: left promiscuous mode [ 597.956698][T16539] bond8: (slave veth15): Releasing backup interface [ 598.063852][T16549] lo speed is unknown, defaulting to 1000 [ 598.366214][T16557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2641'. [ 598.636195][T16561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2641'. [ 598.970122][T16566] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.035304][T16566] tipc: Resetting bearer [ 599.060290][T16566] tipc: Resetting bearer [ 599.080547][T16566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.118615][T16549] lo speed is unknown, defaulting to 1000 [ 599.144967][T16549] lo speed is unknown, defaulting to 1000 [ 599.324124][T16593] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 599.470872][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2647'. [ 599.522044][T16590] lo speed is unknown, defaulting to 1000 [ 599.563110][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 599.573473][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 599.666975][T16607] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2652'. [ 600.154932][T16618] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 600.188804][T16595] lo speed is unknown, defaulting to 1000 [ 600.205818][T16590] lo speed is unknown, defaulting to 1000 [ 600.246897][T16590] lo speed is unknown, defaulting to 1000 [ 600.522312][T16624] tipc: Enabled bearer , priority 0 [ 600.553858][T16624] syzkaller0: entered promiscuous mode [ 600.563733][T16624] syzkaller0: entered allmulticast mode [ 600.734287][T16624] tipc: Resetting bearer [ 600.761911][T16623] tipc: Resetting bearer [ 600.801745][T16623] tipc: Disabling bearer [ 600.863067][T16595] lo speed is unknown, defaulting to 1000 [ 600.876525][T16595] lo speed is unknown, defaulting to 1000 [ 601.566848][T16634] lo speed is unknown, defaulting to 1000 [ 601.653510][T16648] bond2: (slave veth11): Releasing backup interface [ 601.832212][T16648] bond3: (slave veth13): Releasing backup interface [ 601.948497][T16648] bond4: (slave veth15): Releasing backup interface [ 602.375285][T16671] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2665'. [ 602.847576][T16675] syzkaller0: entered promiscuous mode [ 602.856304][T16675] syzkaller0: entered allmulticast mode [ 602.880489][T16634] lo speed is unknown, defaulting to 1000 [ 602.895749][T16677] tipc: Enabled bearer , priority 0 [ 602.926507][T16634] lo speed is unknown, defaulting to 1000 [ 602.930352][T16677] syzkaller0: entered promiscuous mode [ 602.961962][T16677] syzkaller0: entered allmulticast mode [ 604.755088][T16677] tipc: Resetting bearer [ 604.767070][T16676] tipc: Resetting bearer [ 604.800699][T16676] tipc: Disabling bearer [ 605.340108][T16704] xt_hashlimit: max too large, truncated to 1048576 [ 605.392929][T16704] No such timeout policy "syz1" [ 605.533859][T16712] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2674'. [ 605.735361][T16708] syzkaller0: entered allmulticast mode [ 605.823156][T16710] syzkaller0 (unregistering): left allmulticast mode [ 606.618069][T16736] netlink: 'syz.0.2683': attribute type 4 has an invalid length. [ 606.626369][T16732] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 606.640493][T16737] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 606.658147][ T6718] lo speed is unknown, defaulting to 1000 [ 606.663969][ T6718] syz0: Port: 1 Link DOWN [ 606.709066][T16737] 8021q: adding VLAN 0 to HW filter on device bond9 [ 606.724967][T16742] bond9: (slave wlan0): Enslaving as an active interface with a down link [ 606.771578][ T6717] lo speed is unknown, defaulting to 1000 [ 606.772290][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 606.845896][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2685'. [ 606.875667][T16737] vlan0: entered allmulticast mode [ 606.887647][T16737] bond9: (slave vlan0): Opening slave failed [ 607.028899][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2687'. [ 607.078471][T16752] macvtap1: entered promiscuous mode [ 607.099271][T16752] !: entered promiscuous mode [ 607.118900][T16752] macvtap1: entered allmulticast mode [ 607.124353][T16752] !: entered allmulticast mode [ 607.170753][T16758] !: left allmulticast mode [ 607.202352][T16758] !: left promiscuous mode [ 607.426789][T16770] netlink: 'syz.2.2692': attribute type 10 has an invalid length. [ 607.450215][T16770] netlink: 'syz.2.2692': attribute type 10 has an invalid length. [ 607.533472][T16772] wg2: entered promiscuous mode [ 607.567795][T16772] wg2: entered allmulticast mode [ 607.605591][T16776] syzkaller0: entered allmulticast mode [ 607.667013][T16776] syzkaller0 (unregistering): left allmulticast mode [ 607.953540][T16787] netlink: 'syz.4.2695': attribute type 12 has an invalid length. [ 608.338490][T16787] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2695'. [ 608.911744][T16793] netlink: 39532 bytes leftover after parsing attributes in process `syz.3.2699'. [ 609.063351][T16804] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 609.270192][T16811] lo speed is unknown, defaulting to 1000 [ 609.927834][T16840] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.183284][T16854] syzkaller0: entered allmulticast mode [ 610.405211][T16850] syzkaller0 (unregistering): left allmulticast mode [ 610.574748][T16817] lo speed is unknown, defaulting to 1000 [ 610.585419][T16811] lo speed is unknown, defaulting to 1000 [ 610.630227][T16811] lo speed is unknown, defaulting to 1000 [ 610.995410][T16840] lo speed is unknown, defaulting to 1000 [ 611.110057][T16867] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2714'. [ 611.231965][T16860] lo speed is unknown, defaulting to 1000 [ 611.485592][T16870] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 611.518473][T16860] lo speed is unknown, defaulting to 1000 [ 611.526471][T16840] lo speed is unknown, defaulting to 1000 [ 611.573368][T16860] lo speed is unknown, defaulting to 1000 [ 611.587258][T16817] lo speed is unknown, defaulting to 1000 [ 611.706408][T16840] lo speed is unknown, defaulting to 1000 [ 611.755459][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 611.981145][T16817] lo speed is unknown, defaulting to 1000 [ 613.702595][T16891] team0: No ports can be present during mode change [ 613.976900][T16897] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 613.993575][T16903] syzkaller0: entered allmulticast mode [ 614.064160][T16903] syzkaller0 (unregistering): left allmulticast mode [ 614.517542][T16919] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2729'. [ 615.302723][T16936] tipc: Enabled bearer , priority 0 [ 615.315316][T16936] syzkaller0: entered promiscuous mode [ 615.324198][T16936] syzkaller0: entered allmulticast mode [ 615.391295][T16932] lo speed is unknown, defaulting to 1000 [ 615.481544][T16943] tipc: Resetting bearer [ 615.514024][T16934] tipc: Resetting bearer [ 615.662736][T16934] tipc: Disabling bearer [ 616.328066][T16954] netlink: 'syz.1.2739': attribute type 12 has an invalid length. [ 616.335964][T16954] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2739'. [ 616.440085][T16932] lo speed is unknown, defaulting to 1000 [ 616.509879][T16932] lo speed is unknown, defaulting to 1000 [ 616.686241][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2742'. [ 617.169077][T16980] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 617.239740][T16980] tipc: Resetting bearer [ 617.378865][T16980] bond9: (slave wlan0): Releasing active interface [ 617.401370][T16982] netlink: 'syz.4.2746': attribute type 10 has an invalid length. [ 617.570596][T16984] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2747'. [ 617.588509][T16980] bond4: (slave veth7): Releasing backup interface [ 617.603745][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 617.635885][T16980] bond0: (slave veth9): Releasing backup interface [ 617.664300][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2747'. [ 617.693034][T16980] bond5: (slave veth11): Releasing backup interface [ 617.723741][T16980] bond6: (slave veth13): Releasing backup interface [ 617.751331][T16980] bond7: (slave veth15): Releasing backup interface [ 617.776329][T16980] bond8: (slave veth17): Releasing active interface [ 617.827704][T16982] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 618.287025][T17007] Set syz1 is full, maxelem 0 reached [ 618.576004][T17017] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2754'. [ 618.750688][T17018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2754'. [ 618.788334][ T6718] page_pool_release_retry() stalled pool shutdown: id 66, 1 inflight 60 sec [ 619.091823][T17034] vlan1: entered promiscuous mode [ 619.104559][T17034] hsr_slave_1: entered promiscuous mode [ 619.128120][T17034] vlan1: entered allmulticast mode [ 619.133656][T17034] hsr_slave_1: entered allmulticast mode [ 619.395433][T17046] ipt_ECN: cannot use operation on non-tcp rule [ 619.461846][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2759'. [ 619.821286][T17050] syzkaller0: entered allmulticast mode [ 619.885613][T17051] syzkaller0 (unregistering): left allmulticast mode [ 620.121133][T17061] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.826223][T17083] syz_tun (unregistering): left allmulticast mode [ 620.839347][T17083] bridge0: port 1(syz_tun) entered disabled state [ 620.883314][T17061] lo speed is unknown, defaulting to 1000 [ 621.060704][T17095] tipc: Can't bind to reserved service type 1 [ 621.069841][T17095] openvswitch: netlink: Flow actions attr not present in new flow. [ 621.631137][T17061] lo speed is unknown, defaulting to 1000 [ 621.673944][T17109] lo speed is unknown, defaulting to 1000 [ 621.679785][T17061] lo speed is unknown, defaulting to 1000 [ 621.882751][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 622.285791][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2779'. [ 622.591107][T17109] lo speed is unknown, defaulting to 1000 [ 622.603281][T17135] lo speed is unknown, defaulting to 1000 [ 622.637259][T17109] lo speed is unknown, defaulting to 1000 [ 623.607348][T17126] lo speed is unknown, defaulting to 1000 [ 624.267172][T17146] lo speed is unknown, defaulting to 1000 [ 624.313336][T17165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2781'. [ 624.785857][T17146] lo speed is unknown, defaulting to 1000 [ 624.794362][T17126] lo speed is unknown, defaulting to 1000 [ 624.795067][T17154] lo speed is unknown, defaulting to 1000 [ 624.801560][T17146] lo speed is unknown, defaulting to 1000 [ 624.820095][T17135] lo speed is unknown, defaulting to 1000 [ 624.829761][T17135] lo speed is unknown, defaulting to 1000 [ 624.837474][T17126] lo speed is unknown, defaulting to 1000 [ 625.407712][T17154] lo speed is unknown, defaulting to 1000 [ 625.465272][T17154] lo speed is unknown, defaulting to 1000 [ 625.975287][T17173] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2784'. [ 626.861826][T17202] netlink: 'syz.4.2787': attribute type 39 has an invalid length. [ 627.489589][T17204] lo speed is unknown, defaulting to 1000 [ 628.377699][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 628.834037][T17204] lo speed is unknown, defaulting to 1000 [ 628.834056][T17219] lo speed is unknown, defaulting to 1000 [ 628.853718][T17204] lo speed is unknown, defaulting to 1000 [ 628.930885][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 628.957969][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 629.552038][T17219] lo speed is unknown, defaulting to 1000 [ 629.724559][T17256] lo speed is unknown, defaulting to 1000 [ 629.726145][T17219] lo speed is unknown, defaulting to 1000 [ 631.209409][T17256] lo speed is unknown, defaulting to 1000 [ 631.238007][T17256] lo speed is unknown, defaulting to 1000 [ 631.535886][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 631.733203][T17299] lo speed is unknown, defaulting to 1000 [ 631.950894][ T7927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.987245][ T7927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.232523][T17321] erspan0: entered promiscuous mode [ 632.267393][T17321] erspan0: left promiscuous mode [ 632.364361][T17325] tipc: Resetting bearer [ 632.425815][T17325] team0: Port device bridge0 removed [ 632.463017][T17325] bond3: (slave veth9): Releasing backup interface [ 632.513408][T17325] bond4: (slave veth11): Releasing backup interface [ 632.553794][T17325] bond5: (slave veth13): Releasing backup interface [ 632.590454][T17325] bond7: (slave veth15): Releasing backup interface [ 632.611545][T17325] bond8: (slave veth17): Releasing backup interface [ 632.641657][T17325] bond10: (slave veth21): Releasing active interface [ 633.047274][T17336] netlink: 'syz.1.2810': attribute type 1 has an invalid length. [ 633.092701][T17299] lo speed is unknown, defaulting to 1000 [ 633.207491][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 633.374228][T17342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2810'. [ 633.414142][T17299] lo speed is unknown, defaulting to 1000 [ 633.452156][T17339] veth22: entered promiscuous mode [ 633.472778][T17339] veth22: entered allmulticast mode [ 633.504887][T17339] veth23: entered promiscuous mode [ 633.532153][T17342] 8021q: adding VLAN 0 to HW filter on device bond11 [ 634.671178][T17358] lo speed is unknown, defaulting to 1000 [ 635.471800][T17358] lo speed is unknown, defaulting to 1000 [ 635.490560][T17358] lo speed is unknown, defaulting to 1000 [ 636.276354][T17347] Can't find ip_set type hash:i [ 637.031373][T17395] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2817'. [ 637.713340][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2820'. [ 638.036094][T17413] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2822'. [ 638.489534][T17435] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 638.756577][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2826'. [ 639.163224][T17423] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 639.219688][T17427] tipc: Resetting bearer [ 639.247071][T17435] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 639.415057][T17437] lo: entered allmulticast mode [ 639.421582][T17437] tunl0: entered allmulticast mode [ 639.427197][T17437] gre0: entered allmulticast mode [ 639.448117][T17437] gretap0: entered allmulticast mode [ 639.453633][T17437] erspan0: entered allmulticast mode [ 639.464368][T17437] ip_vti0: entered allmulticast mode [ 639.474868][T17437] ip6_vti0: entered allmulticast mode [ 639.491082][T17437] sit0: entered allmulticast mode [ 639.497621][T17437] ip6tnl0: entered allmulticast mode [ 639.521353][T17437] ip6gre0: entered allmulticast mode [ 639.526848][T17437] ip6gretap0: entered allmulticast mode [ 639.535829][T17437] vcan0: entered allmulticast mode [ 639.545527][T17437] !: entered allmulticast mode [ 639.556794][T17437] nlmon0: entered allmulticast mode [ 639.576616][T17437] caif0: entered allmulticast mode [ 639.585413][T17437] batadv0: entered allmulticast mode [ 639.602538][T17437] wg0: entered allmulticast mode [ 639.621171][T17437] wg1: entered allmulticast mode [ 639.626617][T17437] wg2: entered allmulticast mode [ 639.641159][T17437] veth0_to_bridge: entered allmulticast mode [ 639.661143][T17437] bridge_slave_0: entered allmulticast mode [ 639.667303][T17437] veth1_to_bridge: entered allmulticast mode [ 639.690770][T17437] bridge_slave_1: entered allmulticast mode [ 639.707306][T17437] veth0_to_bond: entered allmulticast mode [ 639.727075][T17437] bond_slave_0: entered allmulticast mode [ 639.743479][T17437] veth1_to_bond: entered allmulticast mode [ 639.764983][T17437] bond_slave_1: entered allmulticast mode [ 639.785224][T17437] veth0_to_team: entered allmulticast mode [ 639.802098][T17437] team_slave_0: entered allmulticast mode [ 639.822164][T17437] veth1_to_team: entered allmulticast mode [ 639.841107][T17437] team_slave_1: entered allmulticast mode [ 639.847309][T17437] veth0_to_batadv: entered allmulticast mode [ 639.863467][T17437] batadv_slave_0: entered allmulticast mode [ 639.883349][T17437] veth1_to_batadv: entered allmulticast mode [ 639.901996][T17437] batadv_slave_1: entered allmulticast mode [ 639.912160][T17437] xfrm0: entered allmulticast mode [ 639.917508][T17437] veth0_to_hsr: entered allmulticast mode [ 639.941018][T17437] hsr_slave_0: entered allmulticast mode [ 639.956031][T17437] veth1_virt_wifi: entered allmulticast mode [ 639.971099][T17437] veth0_virt_wifi: entered allmulticast mode [ 639.990715][T17437] veth1_macvtap: entered allmulticast mode [ 639.996779][T17437] veth0_macvtap: entered allmulticast mode [ 640.016483][T17437] macvtap0: entered allmulticast mode [ 640.035607][T17437] macsec0: entered allmulticast mode [ 640.044974][T17437] geneve0: entered allmulticast mode [ 640.062328][T17437] geneve1: entered allmulticast mode [ 640.090257][T17437] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 640.106152][T17437] dvmrp0: entered allmulticast mode [ 640.123769][T17437] vxlan0: entered allmulticast mode [ 640.143665][T17437] sit1: entered allmulticast mode [ 640.151181][T17437] geneve2: entered allmulticast mode [ 640.166753][T17437] ip6_vti1: entered allmulticast mode [ 640.183394][T17437] ip6gretap1: entered allmulticast mode [ 640.192969][T17437] syztnl1: entered allmulticast mode [ 640.208811][T17437] veth2: entered allmulticast mode [ 640.214647][T17437] veth3: entered allmulticast mode [ 640.229499][T17437] bond0: entered allmulticast mode [ 640.242791][T17437] veth4: entered allmulticast mode [ 640.253208][T17437] veth5: entered allmulticast mode [ 640.269946][T17437] sit2: entered allmulticast mode [ 640.282325][T17437] veth6: entered allmulticast mode [ 640.297129][T17437] veth7: entered allmulticast mode [ 640.312413][T17437] bond1: entered allmulticast mode [ 640.329435][T17437] veth8: entered allmulticast mode [ 640.342432][T17437] veth9: entered allmulticast mode [ 640.352257][T17437] erspan1: entered allmulticast mode [ 640.369632][T17437] bond2: entered allmulticast mode [ 640.378696][T17437] veth10: entered allmulticast mode [ 640.391300][T17437] veth11: left promiscuous mode [ 640.396378][T17437] veth11: entered allmulticast mode [ 640.406759][T17437] macvlan0: entered allmulticast mode [ 640.424843][T17437] macvlan2: entered allmulticast mode [ 640.431477][T17437] macvlan3: entered allmulticast mode [ 640.437097][T17437] bond3: entered allmulticast mode [ 640.463624][T17437] veth12: entered allmulticast mode [ 640.489624][T17437] veth13: left promiscuous mode [ 640.494727][T17437] veth13: entered allmulticast mode [ 640.509780][T17437] : entered allmulticast mode [ 640.525212][T17437] vlan0: entered allmulticast mode [ 640.543646][T17437] bond4: entered allmulticast mode [ 640.559015][T17437] veth14: entered allmulticast mode [ 640.569819][T17437] veth15: left promiscuous mode [ 640.580174][T17437] veth15: entered allmulticast mode [ 640.596015][T17437] vti0: entered allmulticast mode [ 640.606155][T17437] netdevsim netdevsim3 eth0: entered allmulticast mode [ 640.614563][T17437] netdevsim netdevsim3 eth1: entered allmulticast mode [ 640.622128][T17437] netdevsim netdevsim3 eth2: entered allmulticast mode [ 640.631883][T17437] netdevsim netdevsim3 eth3: entered allmulticast mode [ 640.640823][T17437] macvtap1: left promiscuous mode [ 640.646295][T17437] bridge0: entered allmulticast mode [ 640.874560][T17471] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 640.884294][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2828'. [ 640.950450][T17471] 8021q: adding VLAN 0 to HW filter on device bond12 [ 640.970252][T17471] tipc: Resetting bearer [ 640.973720][T17329] Set syz1 is full, maxelem 65536 reached [ 641.332846][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2834'. [ 641.514415][T17497] erspan0: entered promiscuous mode [ 641.531972][T17497] erspan0: left promiscuous mode [ 641.577232][T17499] lo: left allmulticast mode [ 641.585826][T17499] tunl0: left allmulticast mode [ 641.593950][T17499] gre0: left allmulticast mode [ 641.602959][T17492] "syz.0.2832" (17492) uses obsolete ecb(arc4) skcipher [ 641.604632][T17499] gretap0: left allmulticast mode [ 641.651303][T17499] erspan0: left promiscuous mode [ 641.656411][T17499] erspan0: left allmulticast mode [ 641.667120][T17499] ip_vti0: left allmulticast mode [ 641.679179][T17499] ip6_vti0: left allmulticast mode [ 641.686913][T17499] sit0: left allmulticast mode [ 641.701343][T17499] ip6tnl0: left allmulticast mode [ 641.711934][T17499] ip6gre0: left allmulticast mode [ 641.721839][T17499] ip6gretap0: left allmulticast mode [ 641.742497][T17499] vcan0: left allmulticast mode [ 641.753331][T17499] !: left allmulticast mode [ 641.753707][T17505] netlink: 'syz.4.2837': attribute type 1 has an invalid length. [ 641.762865][T17499] nlmon0: left allmulticast mode [ 641.775573][T17499] caif0: left allmulticast mode [ 641.783024][T17499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.875437][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2837'. [ 641.904271][T17505] veth19: entered promiscuous mode [ 641.975091][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2838'. [ 642.119240][T17509] lo speed is unknown, defaulting to 1000 [ 642.163921][T17512] netlink: 'syz.3.2839': attribute type 1 has an invalid length. [ 642.339471][T17512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2839'. [ 642.357018][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 642.469390][T17518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2839'. [ 642.542896][T17518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 642.580547][T17509] lo speed is unknown, defaulting to 1000 [ 642.589466][T17509] lo speed is unknown, defaulting to 1000 [ 642.876889][T17533] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.096076][T17533] lo speed is unknown, defaulting to 1000 [ 643.136262][T17544] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2845'. [ 643.919666][T17561] erspan0: entered promiscuous mode [ 643.961549][T17561] erspan0: left promiscuous mode [ 644.802886][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2850'. [ 644.898376][T17533] lo speed is unknown, defaulting to 1000 [ 644.963720][T17533] lo speed is unknown, defaulting to 1000 [ 645.040683][T17577] bridge0: port 1(veth8) entered blocking state [ 645.129057][T17577] bridge0: port 1(veth8) entered disabled state [ 645.143636][T17577] veth8: entered allmulticast mode [ 645.249885][T17577] veth8: entered promiscuous mode [ 645.428629][T17567] lo speed is unknown, defaulting to 1000 [ 645.651153][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2852'. [ 645.758427][T17589] veth8: left allmulticast mode [ 645.763360][T17589] veth8: left promiscuous mode [ 645.818686][T17589] bridge0: port 1(veth8) entered disabled state [ 646.163264][T17592] batadv_slave_1: entered promiscuous mode [ 646.180044][T17592] batadv_slave_1: left promiscuous mode [ 646.352292][T17596] netlink: 'syz.2.2855': attribute type 1 has an invalid length. [ 646.360224][T17567] lo speed is unknown, defaulting to 1000 [ 646.362288][T17567] lo speed is unknown, defaulting to 1000 [ 646.410839][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 646.474433][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2855'. [ 646.509492][T17596] veth27: entered promiscuous mode [ 646.590013][T17598] 8021q: adding VLAN 0 to HW filter on device bond14 [ 646.785781][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'. [ 647.065459][T17607] lo speed is unknown, defaulting to 1000 [ 647.402327][T17607] lo speed is unknown, defaulting to 1000 [ 647.419970][T17607] lo speed is unknown, defaulting to 1000 [ 647.534335][T17613] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2859'. [ 647.947294][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'. [ 648.044764][T17620] netlink: 'syz.0.2861': attribute type 1 has an invalid length. [ 648.175184][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 648.203604][T17620] veth17: entered promiscuous mode [ 648.401332][T17633] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 648.429171][T17636] bond0: entered promiscuous mode [ 648.477495][T17634] lo speed is unknown, defaulting to 1000 [ 648.754787][T17641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2866'. [ 648.807400][T17634] lo speed is unknown, defaulting to 1000 [ 648.840488][T17634] lo speed is unknown, defaulting to 1000 [ 648.878366][T17643] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 648.951420][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2867'. [ 648.956627][T17640] dvmrp8: entered allmulticast mode [ 649.010034][T17643] veth1: entered promiscuous mode [ 649.021254][T17639] dvmrp8: left allmulticast mode [ 649.029212][T17643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2867'. [ 649.060115][T17643] 8021q: adding VLAN 0 to HW filter on device bond6 [ 649.255775][T17651] netlink: 'syz.3.2868': attribute type 12 has an invalid length. [ 649.324425][T17654] lo speed is unknown, defaulting to 1000 [ 649.370889][T17658] netlink: 'syz.0.2869': attribute type 10 has an invalid length. [ 649.399345][T17658] team0: Port device 0! added [ 649.623151][T17654] lo speed is unknown, defaulting to 1000 [ 649.636902][T17654] lo speed is unknown, defaulting to 1000 [ 650.392039][T17689] nbd: must specify at least one socket [ 650.442026][T17689] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2876'. [ 650.623055][T17684] lo speed is unknown, defaulting to 1000 [ 652.286833][T17723] netlink: 'syz.3.2879': attribute type 1 has an invalid length. [ 652.302153][T17724] batadv_slave_1: entered promiscuous mode [ 652.393892][T17724] batadv_slave_1: left promiscuous mode [ 652.405059][T17656] lo speed is unknown, defaulting to 1000 [ 652.411165][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 652.462907][T17726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2879'. [ 652.478074][T17723] veth17: entered promiscuous mode [ 652.549420][T17726] 8021q: adding VLAN 0 to HW filter on device bond7 [ 652.751034][T17735] tipc: Resetting bearer [ 652.823892][T17735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.873740][T17739] netlink: 'syz.3.2886': attribute type 10 has an invalid length. [ 652.882444][T17739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2886'. [ 652.902335][T17656] lo speed is unknown, defaulting to 1000 [ 652.928639][T17739] !: entered promiscuous mode [ 652.933497][T17739] !: entered allmulticast mode [ 652.979173][T17739] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 653.066666][T17656] lo speed is unknown, defaulting to 1000 [ 653.072806][T17684] lo speed is unknown, defaulting to 1000 [ 653.146541][T17684] lo speed is unknown, defaulting to 1000 [ 653.231417][T17737] lo speed is unknown, defaulting to 1000 [ 653.243559][T17744] netlink: 'syz.1.2887': attribute type 25 has an invalid length. [ 653.275037][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2888'. [ 653.362925][T17748] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2887'. [ 653.887003][T17737] lo speed is unknown, defaulting to 1000 [ 653.905182][T17737] lo speed is unknown, defaulting to 1000 [ 654.356088][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 654.802829][T17773] netlink: 'syz.1.2892': attribute type 1 has an invalid length. [ 654.863520][T17777] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 654.985747][T17780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2892'. [ 655.061340][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2892'. [ 655.160065][T17773] 8021q: adding VLAN 0 to HW filter on device bond13 [ 655.233376][T17777] lo speed is unknown, defaulting to 1000 [ 655.286377][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 655.425533][T17793] netlink: 'syz.4.2895': attribute type 1 has an invalid length. [ 655.461811][T17794] bridge0: entered promiscuous mode [ 655.567399][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 655.673443][T17801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2895'. [ 655.732775][T17801] 8021q: adding VLAN 0 to HW filter on device bond11 [ 656.026494][T17800] veth21: entered promiscuous mode [ 656.324391][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2898'. [ 656.423435][T17820] netlink: 'syz.0.2899': attribute type 13 has an invalid length. [ 656.444667][T17820] netlink: 'syz.0.2899': attribute type 17 has an invalid length. [ 656.550496][T17820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.612177][ T6718] lo speed is unknown, defaulting to 1000 [ 656.618715][T17777] lo speed is unknown, defaulting to 1000 [ 656.626819][T17777] lo speed is unknown, defaulting to 1000 [ 656.636790][ T6718] syz0: Port: 1 Link ACTIVE [ 656.642873][T17806] lo speed is unknown, defaulting to 1000 [ 656.731734][ T6718] lo speed is unknown, defaulting to 1000 [ 656.765722][T17820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.895717][T17820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.986952][T17823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.569630][T17819] lo speed is unknown, defaulting to 1000 [ 658.012080][T17822] lo speed is unknown, defaulting to 1000 [ 658.281989][T17822] lo speed is unknown, defaulting to 1000 [ 658.296333][T17822] lo speed is unknown, defaulting to 1000 [ 658.323299][T17819] lo speed is unknown, defaulting to 1000 [ 658.361000][T17806] lo speed is unknown, defaulting to 1000 [ 658.403801][T17819] lo speed is unknown, defaulting to 1000 [ 658.486493][T17806] lo speed is unknown, defaulting to 1000 [ 659.584037][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 659.803598][T17839] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 659.839895][T17839] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2901'. [ 659.868701][T17839] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 660.190071][T17855] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.331645][T17851] lo speed is unknown, defaulting to 1000 [ 661.336694][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'. [ 661.908528][T17855] lo speed is unknown, defaulting to 1000 [ 661.939960][T17851] lo speed is unknown, defaulting to 1000 [ 661.947681][T17851] lo speed is unknown, defaulting to 1000 [ 662.042938][T17856] IPv6: syztnl1: Disabled Multicast RS [ 662.363385][T17851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2904'. [ 662.596073][T17855] lo speed is unknown, defaulting to 1000 [ 662.613556][T17855] lo speed is unknown, defaulting to 1000 [ 663.283069][T17911] lo speed is unknown, defaulting to 1000 [ 663.488632][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'. [ 663.761111][T17932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2915'. [ 664.593364][T17941] netlink: 'syz.1.2916': attribute type 13 has an invalid length. [ 664.615596][T17941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'. [ 664.944096][T17911] lo speed is unknown, defaulting to 1000 [ 664.953197][T17911] lo speed is unknown, defaulting to 1000 [ 664.967839][T17929] siw: device registration error -23 [ 665.046631][T17938] lo speed is unknown, defaulting to 1000 [ 665.631789][T17946] netlink: 'syz.2.2917': attribute type 13 has an invalid length. [ 665.647844][T17946] netlink: 'syz.2.2917': attribute type 17 has an invalid length. [ 665.669731][T17946] bond0: left promiscuous mode [ 665.675521][T17946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.701102][T17946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.819128][T17946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'. [ 665.835512][T17946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.911921][T17946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.925873][T17938] lo speed is unknown, defaulting to 1000 [ 665.937418][T17938] lo speed is unknown, defaulting to 1000 [ 665.953421][T17947] lo speed is unknown, defaulting to 1000 [ 666.009336][T17946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.207025][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 666.950347][T17947] lo speed is unknown, defaulting to 1000 [ 666.970416][T17947] lo speed is unknown, defaulting to 1000 [ 667.176637][T17959] lo speed is unknown, defaulting to 1000 [ 667.501457][T17974] gre0: entered allmulticast mode [ 667.540579][T17974] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 667.844531][T17979] netlink: zone id is out of range [ 667.850752][T17979] netlink: zone id is out of range [ 667.970581][T17959] lo speed is unknown, defaulting to 1000 [ 667.983572][T17959] lo speed is unknown, defaulting to 1000 [ 668.657036][T17990] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.969368][T17990] lo speed is unknown, defaulting to 1000 [ 669.149250][T17995] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2928'. [ 669.266621][T17999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2928'. [ 669.310409][T18004] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2930'. [ 669.899506][T18021] netlink: 'syz.1.2932': attribute type 1 has an invalid length. [ 669.922086][T18021] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2932'. [ 670.098675][T18014] lo speed is unknown, defaulting to 1000 [ 670.105802][T17990] lo speed is unknown, defaulting to 1000 [ 670.133940][T17990] lo speed is unknown, defaulting to 1000 [ 670.141337][T18021] xt_CT: No such helper "snmp" [ 670.729024][T18037] netlink: 'syz.1.2935': attribute type 13 has an invalid length. [ 670.754101][T18037] netlink: 'syz.1.2935': attribute type 17 has an invalid length. [ 670.842437][T18037] gre0: left allmulticast mode [ 671.007083][T18037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.163714][T18037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.245206][T18037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.344428][T18040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.388759][T18014] lo speed is unknown, defaulting to 1000 [ 671.390115][T18038] lo speed is unknown, defaulting to 1000 [ 671.486596][T18014] lo speed is unknown, defaulting to 1000 [ 671.878462][T18045] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 671.886252][T18045] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2936'. [ 672.000998][T18046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2936'. [ 672.573306][T18038] lo speed is unknown, defaulting to 1000 [ 672.600506][T18038] lo speed is unknown, defaulting to 1000 [ 673.404623][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2940'. [ 673.481048][T18062] ipt_ECN: cannot use operation on non-tcp rule [ 673.653836][T18063] dvmrp8: entered allmulticast mode [ 673.696036][T18064] syzkaller0: entered allmulticast mode [ 673.889153][T18064] syzkaller0 (unregistering): left allmulticast mode [ 674.005190][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 674.092961][T18056] dvmrp8: left allmulticast mode [ 674.637322][T18074] tipc: Resetting bearer [ 675.112685][T18099] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 675.151416][T18099] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 675.365502][T18107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2953'. [ 675.813956][T18120] ipt_ECN: cannot use operation on non-tcp rule [ 675.865567][T18116] lo speed is unknown, defaulting to 1000 [ 676.420468][T18127] tipc: Enabling of bearer rejected, already enabled [ 676.445321][T18127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2958'. [ 676.464047][T18128] batadv_slave_1: entered promiscuous mode [ 676.472308][T18128] batadv_slave_1: left promiscuous mode [ 676.661507][T18133] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2959'. [ 677.282998][T18145] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2965'. [ 677.479628][T18116] lo speed is unknown, defaulting to 1000 [ 677.507037][T18116] lo speed is unknown, defaulting to 1000 [ 677.804679][T18165] batadv_slave_1: entered promiscuous mode [ 677.849192][T18162] batadv_slave_1: left promiscuous mode [ 678.088015][T18175] netlink: 'syz.1.2976': attribute type 1 has an invalid length. [ 678.150935][T18178] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2977'. [ 678.258495][T18175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'. [ 678.311851][T18186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2976'. [ 678.428627][T18186] 8021q: adding VLAN 0 to HW filter on device bond14 [ 678.535588][T18190] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2982'. [ 679.016411][T18211] batadv_slave_1: entered promiscuous mode [ 679.054675][T18211] batadv_slave_1: left promiscuous mode [ 679.329711][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'. [ 679.433544][T18230] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2994'. [ 679.454719][T18233] netlink: 'syz.4.2993': attribute type 1 has an invalid length. [ 679.546574][T18233] 8021q: adding VLAN 0 to HW filter on device bond12 [ 679.674368][T18241] lo speed is unknown, defaulting to 1000 [ 679.741221][T18246] lo: entered promiscuous mode [ 679.772368][T18246] tunl0: entered promiscuous mode [ 679.811455][T18246] gre0: entered promiscuous mode [ 679.832890][T18246] gretap0: entered promiscuous mode [ 679.870048][T18246] erspan0: entered promiscuous mode [ 679.893506][T18246] ip_vti0: entered promiscuous mode [ 679.938988][T18246] ip6_vti0: entered promiscuous mode [ 679.956700][T18246] sit0: entered promiscuous mode [ 679.996675][T18246] ip6tnl0: entered promiscuous mode [ 680.020674][T18246] ip6gre0: entered promiscuous mode [ 680.030933][T18246] ip6gretap0: entered promiscuous mode [ 680.050742][T18246] vcan0: entered promiscuous mode [ 680.072857][T18246] !: left allmulticast mode [ 680.093553][T18246] nlmon0: entered promiscuous mode [ 680.110280][T18246] caif0: entered promiscuous mode [ 680.115377][T18246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.523881][T18266] batadv_slave_1: entered promiscuous mode [ 680.563589][T18266] batadv_slave_1: left promiscuous mode [ 680.892695][T18241] lo speed is unknown, defaulting to 1000 [ 680.946126][T18241] lo speed is unknown, defaulting to 1000 [ 680.974419][T18284] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 681.095441][T18287] __nla_validate_parse: 3 callbacks suppressed [ 681.095472][T18287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3009'. [ 681.201964][T18293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3009'. [ 681.370857][T18293] 8021q: adding VLAN 0 to HW filter on device bond15 [ 681.471986][T18290] lo speed is unknown, defaulting to 1000 [ 682.405375][T18290] lo speed is unknown, defaulting to 1000 [ 682.423531][T18318] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 682.526177][T18324] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3016'. [ 682.595621][T18290] lo speed is unknown, defaulting to 1000 [ 682.595838][T18322] batadv_slave_1: entered promiscuous mode [ 682.642358][T18327] batadv_slave_1: left promiscuous mode [ 683.057485][T18343] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 683.165864][T18349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3023'. [ 683.267666][T18343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3023'. [ 683.312456][T18343] 8021q: adding VLAN 0 to HW filter on device bond9 [ 683.901840][T18364] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3028'. [ 684.082473][T18366] ip6t_srh: unknown srh invflags 4449 [ 684.170933][T18373] batadv_slave_1: entered promiscuous mode [ 684.190000][T18373] batadv_slave_1: left promiscuous mode [ 684.312048][T18382] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 684.367906][T18382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3035'. [ 684.390980][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3035'. [ 684.459651][T18382] 8021q: adding VLAN 0 to HW filter on device bond16 [ 685.176216][T18411] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3041'. [ 685.249928][T18412] ip6t_srh: unknown srh invflags 4449 [ 685.776132][T18428] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 685.858144][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 685.878416][T18436] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 685.890940][T18434] IPVS: stopping backup sync thread 18436 ... [ 685.912050][T18432] 8021q: adding VLAN 0 to HW filter on device bond17 [ 686.129921][T18448] __nla_validate_parse: 2 callbacks suppressed [ 686.129943][T18448] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3054'. [ 686.157522][T18443] ip6t_srh: unknown srh invflags 4449 [ 687.266334][ T7930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.299578][ T7930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.579351][T18493] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3070'. [ 687.589802][T18493] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3070'. [ 687.821476][T18502] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 687.892920][T18506] lo speed is unknown, defaulting to 1000 [ 687.985812][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3076'. [ 688.664982][T18506] lo speed is unknown, defaulting to 1000 [ 688.877823][T18506] lo speed is unknown, defaulting to 1000 [ 688.993444][T18543] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 689.195167][T18506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3075'. [ 689.520420][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3097'. [ 690.323608][T18582] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 690.870230][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'. [ 691.137665][T18602] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3113'. [ 691.158601][T18602] team0: Mode changed to "broadcast" [ 691.538372][T18613] netlink: 'syz.2.3118': attribute type 4 has an invalid length. [ 691.953532][T18622] ipt_ECN: cannot use operation on non-tcp rule [ 692.118967][T18627] syzkaller0: entered allmulticast mode [ 692.177021][T18624] syzkaller0 (unregistering): left allmulticast mode [ 693.048608][T18650] netlink: 'syz.1.3132': attribute type 11 has an invalid length. [ 694.284885][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 694.426067][T18704] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3150'. [ 694.736440][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3156'. [ 695.417058][T18737] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3160'. [ 696.056613][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3165'. [ 696.152963][T18762] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3166'. [ 696.748697][T18776] lo speed is unknown, defaulting to 1000 [ 696.750211][T18777] netlink: 'syz.1.3173': attribute type 9 has an invalid length. [ 696.791956][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 696.823249][T18777] netlink: 'syz.1.3173': attribute type 9 has an invalid length. [ 696.848554][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'. [ 697.405315][T18776] lo speed is unknown, defaulting to 1000 [ 697.432488][T18776] lo speed is unknown, defaulting to 1000 [ 697.644467][T18801] ip6t_srh: unknown srh invflags 4449 [ 697.647820][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 697.736902][T18814] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 697.850101][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3187'. [ 698.047073][T18817] 8021q: adding VLAN 0 to HW filter on device bond15 [ 698.392859][T18827] netlink: 'syz.0.3191': attribute type 11 has an invalid length. [ 698.937599][T18849] ip6t_srh: unknown srh invflags 4449 [ 699.073414][T18860] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 699.162033][T18860] 8021q: adding VLAN 0 to HW filter on device bond13 [ 699.385540][T18873] netlink: 'syz.4.3206': attribute type 11 has an invalid length. [ 700.450899][T18900] __nla_validate_parse: 4 callbacks suppressed [ 700.450923][T18900] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3213'. [ 700.921314][T18911] netlink: 'syz.0.3216': attribute type 1 has an invalid length. [ 701.032225][T18917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3216'. [ 701.133419][T18921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3216'. [ 701.169209][T18921] 8021q: adding VLAN 0 to HW filter on device bond11 [ 701.807349][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 702.763880][T18962] ipt_ECN: cannot use operation on non-tcp rule [ 703.324448][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3236'. [ 703.524901][T18979] geneve4: entered promiscuous mode [ 703.535003][ T7934] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.591088][ T7934] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.611227][ T7934] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.631832][ T7934] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.706189][T18990] netlink: 'syz.0.3240': attribute type 13 has an invalid length. [ 703.736674][T18990] netlink: 'syz.0.3240': attribute type 17 has an invalid length. [ 703.791848][T18990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.884357][T18983] lo speed is unknown, defaulting to 1000 [ 704.062405][T18983] lo speed is unknown, defaulting to 1000 [ 704.070113][T18983] lo speed is unknown, defaulting to 1000 [ 704.908798][T19021] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 705.364914][T19025] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 705.490394][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3254'. [ 705.505214][T19027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3254'. [ 706.782479][T19053] netlink: 'syz.1.3261': attribute type 12 has an invalid length. [ 707.491235][ T5848] Bluetooth: hci0: command tx timeout [ 707.999898][T19070] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 708.152731][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804de7dc00: rx timeout, send abort [ 708.184687][T19076] lo speed is unknown, defaulting to 1000 [ 708.561898][T19081] lo speed is unknown, defaulting to 1000 [ 708.568876][T19076] lo speed is unknown, defaulting to 1000 [ 708.576634][T19076] lo speed is unknown, defaulting to 1000 [ 708.661157][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804de7dc00: abort rx timeout. Force session deactivation [ 708.881105][T19081] lo speed is unknown, defaulting to 1000 [ 708.889135][T19081] lo speed is unknown, defaulting to 1000 [ 709.159275][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 709.457243][T19108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 709.837982][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 712.825072][T19147] tipc: Enabling of bearer rejected, failed to enable media [ 713.143440][T19164] lo speed is unknown, defaulting to 1000 [ 713.274076][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'. [ 714.111938][T19164] lo speed is unknown, defaulting to 1000 [ 714.556678][T19202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3300'. [ 714.566844][T19202] netlink: 'syz.0.3300': attribute type 7 has an invalid length. [ 714.575611][T19202] netlink: 'syz.0.3300': attribute type 8 has an invalid length. [ 714.584385][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3300'. [ 716.231156][T19164] lo speed is unknown, defaulting to 1000 [ 716.247048][T19205] syz_tun: entered promiscuous mode [ 716.252616][T19205] vlan0: entered promiscuous mode [ 716.452926][T19207] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 716.540632][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 716.756003][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3309'. [ 716.765329][T19225] ipt_ECN: cannot use operation on non-tcp rule [ 717.020740][T19235] netlink: 'syz.2.3310': attribute type 4 has an invalid length. [ 717.098321][ T5976] lo speed is unknown, defaulting to 1000 [ 717.125464][ T5976] syz2: Port: 1 Link DOWN [ 717.192069][T19241] batadv_slave_1: entered promiscuous mode [ 717.212923][T19241] batadv_slave_1: left promiscuous mode [ 717.403376][T19248] netlink: 'syz.4.3314': attribute type 1 has an invalid length. [ 717.490058][T19248] 8021q: adding VLAN 0 to HW filter on device bond14 [ 717.626739][T19254] bond14: (slave veth23): Enslaving as an active interface with a down link [ 717.743815][T19253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3316'. [ 717.807238][T19248] vlan0: entered allmulticast mode [ 717.813631][T19248] bond14: (slave vlan0): Opening slave failed [ 718.106218][T19272] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 718.199892][T19281] pim6reg1: entered promiscuous mode [ 718.205436][T19281] pim6reg1: entered allmulticast mode [ 718.230011][T19284] netlink: 'syz.4.3323': attribute type 1 has an invalid length. [ 718.445020][T19284] 8021q: adding VLAN 0 to HW filter on device bond15 [ 718.622089][T19296] netlink: 'syz.4.3327': attribute type 12 has an invalid length. [ 718.902791][T19301] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 718.947476][T19301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3329'. [ 718.960759][T19301] 8021q: adding VLAN 0 to HW filter on device bond18 [ 718.993798][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3330'. [ 719.077627][T19307] 8021q: adding VLAN 0 to HW filter on device bond16 [ 719.349554][T19316] lo speed is unknown, defaulting to 1000 [ 719.571319][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'. [ 719.701016][T19332] ip6t_srh: unknown srh invflags 4449 [ 719.798326][T19338] tipc: Enabled bearer , priority 10 [ 719.836254][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 719.884502][T19338] tipc: Resetting bearer [ 719.941286][T19337] tipc: Resetting bearer [ 720.100689][T19346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3343'. [ 720.280853][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3343'. [ 720.485508][T19357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3345'. [ 721.903037][T19337] tipc: Disabling bearer [ 721.913212][T19316] lo speed is unknown, defaulting to 1000 [ 721.933045][T19352] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 721.942671][T19352] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 721.952170][T19352] tipc: Resetting bearer [ 721.989555][T19354] tipc: Enabling of bearer rejected, already enabled [ 722.074596][T19316] lo speed is unknown, defaulting to 1000 [ 722.195330][T19366] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 722.207222][T19366] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 722.219186][T19370] netlink: del zone limit has 4 unknown bytes [ 722.253533][T19366] tipc: Resetting bearer [ 722.275170][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'. [ 722.321516][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3350'. [ 722.546340][T19380] ip6t_srh: unknown srh invflags 4449 [ 722.623746][T19384] syzkaller0: entered promiscuous mode [ 722.651696][T19384] syzkaller0: entered allmulticast mode [ 722.725091][T19384] tipc: Enabled bearer , priority 0 [ 722.764605][T19393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3354'. [ 722.779850][T19381] tipc: Resetting bearer [ 722.826494][T19381] tipc: Disabling bearer [ 722.865304][T19396] tipc: Enabling of bearer rejected, already enabled [ 723.015400][T19394] lo speed is unknown, defaulting to 1000 [ 723.673563][T19394] lo speed is unknown, defaulting to 1000 [ 723.686485][T19394] lo speed is unknown, defaulting to 1000 [ 723.749432][T19426] ip6t_srh: unknown srh invflags 4449 [ 723.865866][T19434] veth0: entered promiscuous mode [ 723.880023][T19432] veth0: left promiscuous mode [ 724.399437][T19449] rdma_rxe: rxe_newlink: failed to add lo [ 724.934566][T19458] netlink: 'syz.3.3374': attribute type 12 has an invalid length. [ 725.110800][T19467] lo speed is unknown, defaulting to 1000 [ 725.235126][T19472] ip6t_srh: unknown srh invflags 4449 [ 725.466973][T19473] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 725.659161][T19488] __nla_validate_parse: 3 callbacks suppressed [ 725.659182][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'. [ 725.898280][T19467] lo speed is unknown, defaulting to 1000 [ 725.935931][T19467] lo speed is unknown, defaulting to 1000 [ 725.991628][T19500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.216874][T19503] xt_CT: No such helper "snmp" [ 727.058655][T19520] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 727.071088][T19516] syzkaller0: entered promiscuous mode [ 727.076621][T19516] syzkaller0: entered allmulticast mode [ 727.613758][T19531] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 727.847314][T19535] batadv_slave_1: entered promiscuous mode [ 727.901964][T19531] lo speed is unknown, defaulting to 1000 [ 727.910152][T19535] batadv_slave_1: left promiscuous mode [ 728.233859][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 728.393742][T19550] !: entered promiscuous mode [ 728.424485][T19550] vlan3: entered promiscuous mode [ 728.437833][T19550] team0: entered promiscuous mode [ 729.219941][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 729.378870][T19531] lo speed is unknown, defaulting to 1000 [ 729.413758][T19531] lo speed is unknown, defaulting to 1000 [ 729.944660][T19586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3403'. [ 730.026253][T19586] vlan2: entered promiscuous mode [ 730.399633][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'. [ 731.133775][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 731.190759][T19601] vlan1: entered promiscuous mode [ 731.196017][T19601] vlan0: entered promiscuous mode [ 731.205937][T19601] gretap0: entered promiscuous mode [ 731.420593][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'. [ 732.383663][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 732.396035][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 733.174540][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'. [ 733.483416][T19666] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 733.512038][T19666] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 733.605375][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.628585][T19665] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 733.932252][T19678] netlink: 'syz.1.3430': attribute type 1 has an invalid length. [ 733.969890][T19678] 8021q: adding VLAN 0 to HW filter on device bond19 [ 734.018624][T19678] 8021q: adding VLAN 0 to HW filter on device bond19 [ 734.026084][T19678] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address [ 734.040261][T19678] bond19: (slave vxcan1): Error -95 calling set_mac_address [ 734.169429][T19680] veth25: entered promiscuous mode [ 734.192180][T19680] bond19: (slave veth25): Enslaving as an active interface with a down link [ 734.211173][T19678] erspan0: entered allmulticast mode [ 734.296567][T19678] netlink: 'syz.1.3430': attribute type 11 has an invalid length. [ 734.758827][T19701] netlink: ct family unspecified [ 734.767583][T19701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.919917][T19690] lo speed is unknown, defaulting to 1000 [ 735.362143][T19712] netlink: 'syz.1.3437': attribute type 12 has an invalid length. [ 735.470529][T19721] netlink: 'syz.0.3436': attribute type 8 has an invalid length. [ 735.816577][T19735] !: left promiscuous mode [ 735.851995][T19735] team0: Port device 0! removed [ 736.447140][ T5926] lo speed is unknown, defaulting to 1000 [ 736.470026][ T5926] syz0: Port: 1 Link DOWN [ 736.474863][ T5926] lo speed is unknown, defaulting to 1000 [ 736.491209][T19690] lo speed is unknown, defaulting to 1000 [ 736.520338][T19690] lo speed is unknown, defaulting to 1000 [ 736.546835][T19746] lo speed is unknown, defaulting to 1000 [ 736.596110][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'. [ 737.234500][T19746] lo speed is unknown, defaulting to 1000 [ 737.237660][T19757] lo speed is unknown, defaulting to 1000 [ 737.248088][T19746] lo speed is unknown, defaulting to 1000 [ 737.782872][T19777] wireguard0: entered promiscuous mode [ 737.832230][T19777] wireguard0: entered allmulticast mode [ 738.208824][T19785] lo speed is unknown, defaulting to 1000 [ 738.374212][T19757] lo speed is unknown, defaulting to 1000 [ 738.390978][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'. [ 738.477046][T19757] lo speed is unknown, defaulting to 1000 [ 738.704329][T19799] ipt_ECN: cannot use operation on non-tcp rule [ 739.256937][T19785] lo speed is unknown, defaulting to 1000 [ 739.283068][T19785] lo speed is unknown, defaulting to 1000 [ 739.702582][T19806] ipt_ECN: cannot use operation on non-tcp rule [ 739.758541][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 739.824601][T19813] syzkaller0: entered allmulticast mode [ 739.951657][T19813] syzkaller0 (unregistering): left allmulticast mode [ 740.472774][T19831] netlink: 'syz.0.3459': attribute type 1 has an invalid length. [ 740.525082][T19831] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3459'. [ 740.543652][T19831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3459'. [ 740.557363][T19831] 8021q: adding VLAN 0 to HW filter on device bond12 [ 740.669467][T19828] lo speed is unknown, defaulting to 1000 [ 741.064464][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 741.083513][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 741.153899][T19855] ipt_ECN: cannot use operation on non-tcp rule [ 741.225290][T19850] netlink: zone id is out of range [ 741.277197][T19855] syzkaller0: entered allmulticast mode [ 741.308987][T19850] netlink: zone id is out of range [ 741.350883][T19850] netlink: zone id is out of range [ 741.418004][T19855] syzkaller0 (unregistering): left allmulticast mode [ 741.491034][T19850] netlink: zone id is out of range [ 741.556751][T19850] netlink: zone id is out of range [ 741.622107][T19850] netlink: zone id is out of range [ 741.630048][T19850] netlink: zone id is out of range [ 741.635457][T19850] netlink: zone id is out of range [ 741.660661][T19850] netlink: zone id is out of range [ 741.689320][T19850] netlink: zone id is out of range [ 742.349261][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'. [ 742.504910][T19866] lo speed is unknown, defaulting to 1000 [ 742.521971][T19828] lo speed is unknown, defaulting to 1000 [ 742.561175][T19828] lo speed is unknown, defaulting to 1000 [ 742.822238][T19879] veth17: left promiscuous mode [ 742.925905][T19885] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3472'. [ 742.956063][T19885] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3472'. [ 743.096724][T19866] lo speed is unknown, defaulting to 1000 [ 743.124723][T19866] lo speed is unknown, defaulting to 1000 [ 743.299764][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 743.460230][T19899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3476'. [ 743.695948][T19906] xt_CT: No such helper "snmp" [ 743.978376][T19907] lo speed is unknown, defaulting to 1000 [ 744.026080][T19922] netlink: 'syz.0.3481': attribute type 64 has an invalid length. [ 744.078381][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 744.376666][T19923] tipc: Disabling bearer [ 744.554801][T19935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3479'. [ 744.637193][T19926] netlink: 'syz.1.3482': attribute type 3 has an invalid length. [ 744.645462][T19915] lo speed is unknown, defaulting to 1000 [ 744.656747][T19907] lo speed is unknown, defaulting to 1000 [ 744.991701][T19943] netlink: 'syz.1.3484': attribute type 13 has an invalid length. [ 745.017521][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 745.144043][T19907] lo speed is unknown, defaulting to 1000 [ 745.144066][T19941] lo speed is unknown, defaulting to 1000 [ 745.251101][T19915] lo speed is unknown, defaulting to 1000 [ 745.285683][T19915] lo speed is unknown, defaulting to 1000 [ 745.444875][T19941] lo speed is unknown, defaulting to 1000 [ 745.465978][T19941] lo speed is unknown, defaulting to 1000 [ 745.805895][T19940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.466578][T19960] net_ratelimit: 7 callbacks suppressed [ 746.466600][T19960] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 747.076559][T19977] netlink: 'syz.2.3489': attribute type 1 has an invalid length. [ 747.113503][T19969] lo speed is unknown, defaulting to 1000 [ 747.513764][T19988] veth31: entered promiscuous mode [ 747.524268][T19988] bond16: (slave veth31): Enslaving as a backup interface with a down link [ 748.042442][T20007] netlink: 'syz.2.3496': attribute type 13 has an invalid length. [ 748.050552][T20007] netlink: 'syz.2.3496': attribute type 17 has an invalid length. [ 748.681816][T20007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.701400][ T5976] lo speed is unknown, defaulting to 1000 [ 748.707275][ T5976] syz2: Port: 1 Link ACTIVE [ 748.737239][T19971] lo speed is unknown, defaulting to 1000 [ 749.002060][T19971] lo speed is unknown, defaulting to 1000 [ 749.015996][T19971] lo speed is unknown, defaulting to 1000 [ 749.026837][T19969] lo speed is unknown, defaulting to 1000 [ 749.086311][T20010] lo speed is unknown, defaulting to 1000 [ 749.148262][T19969] lo speed is unknown, defaulting to 1000 [ 749.496967][T20013] lo speed is unknown, defaulting to 1000 [ 749.866374][T20010] lo speed is unknown, defaulting to 1000 [ 749.889857][T20013] lo speed is unknown, defaulting to 1000 [ 749.896717][T20010] lo speed is unknown, defaulting to 1000 [ 750.034790][T20013] lo speed is unknown, defaulting to 1000 [ 750.067350][T20031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3503'. [ 750.218489][T20031] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 751.485546][T20057] lo speed is unknown, defaulting to 1000 [ 751.599523][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'. [ 752.080990][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 752.303315][T20085] erspan0: entered promiscuous mode [ 752.329756][T20085] macvlan2: entered allmulticast mode [ 752.338800][T20085] erspan0: entered allmulticast mode [ 752.591180][T20095] tipc: Enabling of bearer rejected, already enabled [ 752.611308][T20100] netlink: 'syz.2.3517': attribute type 84 has an invalid length. [ 753.006689][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3515'. [ 753.031522][T20057] lo speed is unknown, defaulting to 1000 [ 753.040834][T20057] lo speed is unknown, defaulting to 1000 [ 753.143071][T20118] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.474818][T20117] lo speed is unknown, defaulting to 1000 [ 754.229998][T20137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3526'. [ 754.266280][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 754.346621][T20137] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3526'. [ 754.410372][T20137] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 754.435778][T20117] lo speed is unknown, defaulting to 1000 [ 754.475022][T20117] lo speed is unknown, defaulting to 1000 [ 754.881311][T20152] netlink: zone id is out of range [ 754.912572][T20152] netlink: zone id is out of range [ 754.922880][T20152] netlink: zone id is out of range [ 754.973063][T20152] netlink: zone id is out of range [ 754.979877][T20152] netlink: zone id is out of range [ 754.985732][T20152] netlink: zone id is out of range [ 754.991392][T20152] netlink: zone id is out of range [ 754.997098][T20152] netlink: zone id is out of range [ 755.002827][T20152] netlink: zone id is out of range [ 755.184495][T20159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3530'. [ 755.884958][T20180] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3539'. [ 755.991657][T20184] batadv_slave_1: entered promiscuous mode [ 756.098711][T20184] batadv_slave_1: left promiscuous mode [ 756.364522][T20203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3545'. [ 756.724019][T20223] batadv_slave_1: entered promiscuous mode [ 756.765710][T20223] batadv_slave_1: left promiscuous mode [ 756.770230][T20225] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 756.808877][T20225] netlink: 'syz.2.3556': attribute type 11 has an invalid length. [ 756.845314][T20225] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3556'. [ 757.102054][T20212] lo speed is unknown, defaulting to 1000 [ 757.541390][T20257] pimreg: entered allmulticast mode [ 757.603260][T20257] pimreg: left allmulticast mode [ 757.911164][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'. [ 758.389486][T20277] ..@ÿ: renamed from bond_slave_0 [ 758.533778][T20280] net_ratelimit: 8 callbacks suppressed [ 758.533801][T20280] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 758.603325][T20212] lo speed is unknown, defaulting to 1000 [ 758.678479][T20212] lo speed is unknown, defaulting to 1000 [ 758.708952][T20263] siw: device registration error -23 [ 760.212923][T20325] netlink: 'syz.2.3587': attribute type 10 has an invalid length. [ 760.238546][T20325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3587'. [ 760.267974][T20325] team0: entered promiscuous mode [ 760.291650][T20325] geneve0: entered promiscuous mode [ 760.328525][T20325] team0: entered allmulticast mode [ 760.361844][T20325] geneve0: entered allmulticast mode [ 760.374824][T20325] bridge0: port 1(team0) entered blocking state [ 760.397439][T20325] bridge0: port 1(team0) entered disabled state [ 760.424740][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 761.373508][T20361] lo speed is unknown, defaulting to 1000 [ 763.096868][T20426] netlink: 'syz.3.3623': attribute type 12 has an invalid length. [ 763.202434][T20361] lo speed is unknown, defaulting to 1000 [ 763.239697][T20361] lo speed is unknown, defaulting to 1000 [ 763.547281][T20445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3633'. [ 763.675382][T20450] tipc: Enabling of bearer rejected, already enabled [ 764.151179][T20454] bridge0: port 1(team0) entered disabled state [ 764.391213][T20454] erspan0: left allmulticast mode [ 764.470257][ T6718] lo speed is unknown, defaulting to 1000 [ 764.490759][ T6718] syz2: Port: 1 Link DOWN [ 764.553277][T20474] netlink: 'syz.3.3639': attribute type 12 has an invalid length. [ 764.937394][T20486] tipc: Resetting bearer [ 765.037575][T20486] bond14: (slave veth23): Releasing active interface [ 765.097382][T20492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3646'. [ 765.824574][T20514] lo speed is unknown, defaulting to 1000 [ 766.022996][T20523] tipc: Resetting bearer [ 766.118764][T20527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3660'. [ 766.332359][T20532] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 767.103874][T20514] lo speed is unknown, defaulting to 1000 [ 767.130758][T20514] lo speed is unknown, defaulting to 1000 [ 767.195488][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 767.423586][T20565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3672'. [ 768.252262][T20586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3681'. [ 768.263935][T20585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.294871][T20585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.356477][T20581] lo speed is unknown, defaulting to 1000 [ 768.376313][T20589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.429987][T20591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3684'. [ 768.490783][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 769.316316][T20581] lo speed is unknown, defaulting to 1000 [ 769.352660][T20581] lo speed is unknown, defaulting to 1000 [ 769.684372][T20642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3697'. [ 770.416794][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'. [ 770.444652][T20661] netlink: 'syz.3.3702': attribute type 3 has an invalid length. [ 770.470598][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 770.941549][T20672] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 770.969820][T20674] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 771.740398][T20712] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 771.991178][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'. [ 772.407647][T20737] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 772.498355][T20745] batadv_slave_1: entered promiscuous mode [ 772.505544][T20745] batadv_slave_1: left promiscuous mode [ 773.443349][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'. [ 774.471652][T20833] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 774.915011][T20850] tipc: Resetting bearer [ 774.940271][T20850] bond19: (slave veth25): Releasing active interface [ 775.208109][T20868] batadv_slave_1: entered promiscuous mode [ 775.215348][T20868] batadv_slave_1: left promiscuous mode [ 775.441354][T20880] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 775.656914][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3765'. [ 776.019536][T20899] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 776.953605][T20933] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 777.744637][T20975] tipc: Enabling of bearer rejected, already enabled [ 777.787967][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3789'. [ 777.842438][T20975] tipc: Disabling bearer [ 778.073666][T20988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3793'. [ 778.961149][T21021] lo speed is unknown, defaulting to 1000 [ 779.805712][T21052] ipt_ECN: cannot use operation on non-tcp rule [ 779.824013][T21055] team0: Mode changed to "roundrobin" [ 780.051002][T21060] syzkaller1: entered promiscuous mode [ 780.081420][T21060] syzkaller1: entered allmulticast mode [ 780.322859][T21021] lo speed is unknown, defaulting to 1000 [ 780.383315][T21021] lo speed is unknown, defaulting to 1000 [ 781.274657][T21088] netlink: 'syz.4.3827': attribute type 4 has an invalid length. [ 781.333345][T21088] netlink: 'syz.4.3827': attribute type 4 has an invalid length. [ 781.349959][T21090] netlink: 'syz.3.3828': attribute type 9 has an invalid length. [ 781.396157][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 781.430378][T21090] netlink: 'syz.3.3828': attribute type 9 has an invalid length. [ 781.439859][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 781.560858][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 781.882168][T21108] syzkaller1: entered promiscuous mode [ 781.888398][T21108] syzkaller1: entered allmulticast mode [ 781.915014][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 782.340456][T21123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 782.734188][T21129] syzkaller1: entered promiscuous mode [ 782.745089][T21129] syzkaller1: entered allmulticast mode [ 783.274842][T21156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3847'. [ 783.319755][T21150] lo speed is unknown, defaulting to 1000 [ 783.599229][T21163] [ 783.601616][T21163] ====================================================== [ 783.608655][T21163] WARNING: possible circular locking dependency detected [ 783.615710][T21163] 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 Not tainted [ 783.622853][T21163] ------------------------------------------------------ [ 783.629915][T21163] syz.2.3851/21163 is trying to acquire lock: [ 783.636020][T21163] ffffffff8f677af8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 783.645398][T21163] [ 783.645398][T21163] but task is already holding lock: [ 783.652817][T21163] ffff88805b8ff070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 783.662286][T21163] [ 783.662286][T21163] which lock already depends on the new lock. [ 783.662286][T21163] [ 783.672722][T21163] [ 783.672722][T21163] the existing dependency chain (in reverse order) is: [ 783.681772][T21163] [ 783.681772][T21163] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 783.689813][T21163] lock_acquire+0x120/0x360 [ 783.694877][T21163] _raw_spin_lock_bh+0x36/0x50 [ 783.700209][T21163] nr_rt_device_down+0x12a/0x720 [ 783.705706][T21163] nr_device_event+0x137/0x150 [ 783.711036][T21163] notifier_call_chain+0x1b3/0x3e0 [ 783.716701][T21163] __dev_notify_flags+0x18d/0x2e0 [ 783.722293][T21163] netif_change_flags+0xe8/0x1a0 [ 783.727785][T21163] dev_change_flags+0x130/0x260 [ 783.733184][T21163] dev_ioctl+0x7b4/0x1150 [ 783.738071][T21163] sock_do_ioctl+0x22c/0x300 [ 783.743222][T21163] sock_ioctl+0x576/0x790 [ 783.748118][T21163] __se_sys_ioctl+0xf9/0x170 [ 783.753259][T21163] do_syscall_64+0xfa/0x3b0 [ 783.758318][T21163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.764756][T21163] [ 783.764756][T21163] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 783.772593][T21163] lock_acquire+0x120/0x360 [ 783.777633][T21163] _raw_spin_lock_bh+0x36/0x50 [ 783.782932][T21163] nr_rt_device_down+0xa9/0x720 [ 783.788322][T21163] nr_device_event+0x137/0x150 [ 783.793624][T21163] notifier_call_chain+0x1b3/0x3e0 [ 783.799287][T21163] __dev_notify_flags+0x18d/0x2e0 [ 783.805271][T21163] netif_change_flags+0xe8/0x1a0 [ 783.810734][T21163] dev_change_flags+0x130/0x260 [ 783.816109][T21163] dev_ioctl+0x7b4/0x1150 [ 783.820998][T21163] sock_do_ioctl+0x22c/0x300 [ 783.826128][T21163] sock_ioctl+0x576/0x790 [ 783.830988][T21163] __se_sys_ioctl+0xf9/0x170 [ 783.836112][T21163] do_syscall_64+0xfa/0x3b0 [ 783.841144][T21163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.847565][T21163] [ 783.847565][T21163] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 783.855477][T21163] validate_chain+0xb9b/0x2140 [ 783.860768][T21163] __lock_acquire+0xab9/0xd20 [ 783.866008][T21163] lock_acquire+0x120/0x360 [ 783.871038][T21163] _raw_spin_lock_bh+0x36/0x50 [ 783.876335][T21163] nr_remove_neigh+0x25/0xe0 [ 783.881460][T21163] nr_add_node+0x1d9f/0x2570 [ 783.886595][T21163] nr_rt_ioctl+0xc12/0xd50 [ 783.891589][T21163] sock_do_ioctl+0xdc/0x300 [ 783.896630][T21163] sock_ioctl+0x576/0x790 [ 783.901488][T21163] __se_sys_ioctl+0xf9/0x170 [ 783.906611][T21163] do_syscall_64+0xfa/0x3b0 [ 783.911646][T21163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.918084][T21163] [ 783.918084][T21163] other info that might help us debug this: [ 783.918084][T21163] [ 783.928325][T21163] Chain exists of: [ 783.928325][T21163] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 783.928325][T21163] [ 783.942256][T21163] Possible unsafe locking scenario: [ 783.942256][T21163] [ 783.949709][T21163] CPU0 CPU1 [ 783.955076][T21163] ---- ---- [ 783.960444][T21163] lock(&nr_node->node_lock); [ 783.965216][T21163] lock(nr_node_list_lock); [ 783.972337][T21163] lock(&nr_node->node_lock); [ 783.979635][T21163] lock(nr_neigh_list_lock); [ 783.984335][T21163] [ 783.984335][T21163] *** DEADLOCK *** [ 783.984335][T21163] [ 783.992475][T21163] 1 lock held by syz.2.3851/21163: [ 783.997584][T21163] #0: ffff88805b8ff070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 784.007357][T21163] [ 784.007357][T21163] stack backtrace: [ 784.013254][T21163] CPU: 1 UID: 0 PID: 21163 Comm: syz.2.3851 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2 #0 PREEMPT(full) [ 784.013277][T21163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 784.013288][T21163] Call Trace: [ 784.013298][T21163] [ 784.013306][T21163] dump_stack_lvl+0x189/0x250 [ 784.013332][T21163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.013351][T21163] ? __pfx__printk+0x10/0x10 [ 784.013372][T21163] ? stack_trace_save+0x9c/0xe0 [ 784.013401][T21163] print_circular_bug+0x2ee/0x310 [ 784.013425][T21163] check_noncircular+0x134/0x160 [ 784.013448][T21163] validate_chain+0xb9b/0x2140 [ 784.013469][T21163] ? kernel_text_address+0xa5/0xe0 [ 784.013484][T21163] ? __kernel_text_address+0xd/0x40 [ 784.013509][T21163] ? unwind_get_return_address+0x4d/0x90 [ 784.013529][T21163] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 784.013551][T21163] ? arch_stack_walk+0xfc/0x150 [ 784.013575][T21163] __lock_acquire+0xab9/0xd20 [ 784.013595][T21163] ? nr_remove_neigh+0x25/0xe0 [ 784.013618][T21163] lock_acquire+0x120/0x360 [ 784.013633][T21163] ? nr_remove_neigh+0x25/0xe0 [ 784.013660][T21163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 784.013681][T21163] ? do_raw_spin_unlock+0x122/0x240 [ 784.013705][T21163] ? nr_remove_neigh+0x25/0xe0 [ 784.013728][T21163] _raw_spin_lock_bh+0x36/0x50 [ 784.013751][T21163] ? nr_remove_neigh+0x25/0xe0 [ 784.013774][T21163] nr_remove_neigh+0x25/0xe0 [ 784.013798][T21163] nr_add_node+0x1d9f/0x2570 [ 784.013824][T21163] ? dev_get_by_name+0x21/0x200 [ 784.013845][T21163] ? nr_call_to_digi+0x136/0x1b0 [ 784.013875][T21163] nr_rt_ioctl+0xc12/0xd50 [ 784.013898][T21163] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 784.013921][T21163] ? kasan_quarantine_put+0xdd/0x220 [ 784.013942][T21163] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 784.013970][T21163] ? apparmor_capable+0x137/0x1b0 [ 784.013996][T21163] ? capable+0x89/0xe0 [ 784.014013][T21163] ? nr_ioctl+0x1b1/0x3b0 [ 784.014032][T21163] sock_do_ioctl+0xdc/0x300 [ 784.014056][T21163] ? __pfx_sock_do_ioctl+0x10/0x10 [ 784.014076][T21163] ? __lock_acquire+0xab9/0xd20 [ 784.014099][T21163] sock_ioctl+0x576/0x790 [ 784.014121][T21163] ? __pfx_sock_ioctl+0x10/0x10 [ 784.014143][T21163] ? __fget_files+0x2a/0x420 [ 784.014156][T21163] ? __fget_files+0x3a0/0x420 [ 784.014169][T21163] ? __fget_files+0x2a/0x420 [ 784.014184][T21163] ? bpf_lsm_file_ioctl+0x9/0x20 [ 784.014204][T21163] ? __pfx_sock_ioctl+0x10/0x10 [ 784.014224][T21163] __se_sys_ioctl+0xf9/0x170 [ 784.014245][T21163] do_syscall_64+0xfa/0x3b0 [ 784.014260][T21163] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.014283][T21163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.014299][T21163] ? clear_bhb_loop+0x60/0xb0 [ 784.014317][T21163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.014334][T21163] RIP: 0033:0x7fb923f8e9a9 [ 784.014350][T21163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.014365][T21163] RSP: 002b:00007fb924e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.014384][T21163] RAX: ffffffffffffffda RBX: 00007fb9241b5fa0 RCX: 00007fb923f8e9a9 [ 784.014396][T21163] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 784.014413][T21163] RBP: 00007fb924010d69 R08: 0000000000000000 R09: 0000000000000000 [ 784.014423][T21163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.014433][T21163] R13: 0000000000000000 R14: 00007fb9241b5fa0 R15: 00007ffc574b2808 [ 784.014454][T21163] [ 784.576811][T21150] lo speed is unknown, defaulting to 1000 [ 784.612464][T21150] lo speed is unknown, defaulting to 1000