last executing test programs: 2.228998606s ago: executing program 3 (id=2732): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000001c0)=0x1, 0x4) read(0xffffffffffffffff, &(0x7f0000000000)=""/209, 0xd1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)="78590c01d5d68e6ac9ad7e799afbf73640adc369e17e", 0x16}, {&(0x7f0000000400)="047ea916be3285b856b5", 0xa}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000400200000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000027694980955d84b8360c09eb"], 0x48) pipe(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x600, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000040000aa0000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r9], 0x2c}}, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r10) 1.796802367s ago: executing program 3 (id=2742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 1.601797689s ago: executing program 3 (id=2746): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88a8, 0x8}}}}}}, 0x2e) 1.51522287s ago: executing program 0 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) unshare(0x2040400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000100100000c000000fa000000000000ff"], 0x18}, 0x40) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000800)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x810) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 1.274934736s ago: executing program 4 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240870000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 1.259371909s ago: executing program 0 (id=2755): unshare(0x22020400) r0 = socket(0xa, 0x3, 0x3a) bind$rds(r0, 0x0, 0x0) 1.178133756s ago: executing program 4 (id=2757): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x0, 0x1114a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x7}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf850}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 1.150813765s ago: executing program 3 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce60, @local}, 0x10) listen(r1, 0x3a5) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f00000003c0)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) listen(r2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000005000100070000000900020073797a00001400078008001300ffffffff0800124000000004050005000a000000050004000000000011000300686173683a6e65742c6e65740000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044001}, 0x20004001) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0x0, 0x20000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf2513000000874be6a091214c715fb54a24878c6774027ecf71e92a977a3d539805fb105bbadcea289c68ede4"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x8001) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000008d269f6600020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003a305000100000000000c0002"], 0xc0}}, 0x0) 1.075328733s ago: executing program 0 (id=2759): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000000000060004000000000062d41a54dc05a026baab20118c332b6ea2056450d544d8e93d72e5d51e35a8d0fcf7416de7f4c22b6e2ebaf2fcb1ac29568553ae835d1951a8a13be5781a075eb53d5e2429a1d34f7c6d212c2e7a"], 0x24}}, 0x8004) connect$bt_l2cap(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 875.482357ms ago: executing program 2 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 832.166805ms ago: executing program 4 (id=2763): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x1c}}, 0x0) 775.109236ms ago: executing program 1 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007"], 0x60}}, 0x0) 774.651612ms ago: executing program 3 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) unshare(0x2040400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000100100000c000000fa000000000000ff"], 0x18}, 0x40) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000800)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x810) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 659.653631ms ago: executing program 1 (id=2766): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x6}, @in=@local, 0x2000, 0x0, 0x0, 0x7, 0xa, 0x0, 0x0, 0x29}, {0xfffffffffffffffc, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0xeb}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x33}, 0x0, @in6=@empty, 0x80, 0x0, 0x0, 0x3, 0xfffbfffd, 0x0, 0x20000}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 659.5204ms ago: executing program 4 (id=2767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000017001c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 644.98298ms ago: executing program 1 (id=2768): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 637.458492ms ago: executing program 3 (id=2769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4841}, 0x8000) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r2) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4000010) 566.413772ms ago: executing program 0 (id=2770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800700010063740000240002800800014000000014080002400000000d0500030001ff7f0000000000000000080900010073797a30000000000900020073797a3200"], 0x88}}, 0x0) 532.579141ms ago: executing program 1 (id=2771): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 532.038796ms ago: executing program 2 (id=2772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000, 0x2}, {}, {}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075d, 0xffffffff}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 395.469727ms ago: executing program 4 (id=2773): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000002140)={@mcast1, @empty, @mcast2, 0x8, 0x6, 0xcb5, 0x500, 0x7fff, 0x1080040}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'netpci0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYBLOB="e58ef48cf13d23e2f40e7fe2cbf7d3e63d676a3af8549cff8c26007adb8e37e566907be52139588f8bb007a8b7804346bfaa424c8a1758011522313f", @ANYRESDEC=r1, @ANYRESOCT=r7, @ANYRES8=r9], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 386.871618ms ago: executing program 2 (id=2774): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) 355.467431ms ago: executing program 0 (id=2775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce60, @local}, 0x10) listen(r1, 0x3a5) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f00000003c0)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) listen(r2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000005000100070000000900020073797a00001400078008001300ffffffff0800124000000004050005000a000000050004000000000011000300686173683a6e65742c6e65740000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4044001}, 0x20004001) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, 0x0, 0x20000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000240)={0xfffffffffffffffe, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf2513000000874be6a091214c715fb54a24878c6774027ecf71e92a977a3d539805fb105bbadcea289c68ede4"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x8001) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000008d269f6600020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003a305000100000000000c0002"], 0xc0}}, 0x0) 227.843116ms ago: executing program 2 (id=2776): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000003700)=""/4102, 0x1006}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/144, 0x90}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 227.167589ms ago: executing program 1 (id=2777): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x78, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_ADT={0x4}]}, 0x78}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) 162.945243ms ago: executing program 0 (id=2778): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x8000}, {}, {}, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x40}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) 91.516114ms ago: executing program 2 (id=2779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) unshare(0x2040400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000100100000c000000fa000000000000ff"], 0x18}, 0x40) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000800)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x810) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 72.724508ms ago: executing program 4 (id=2780): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@multicast, @random=' \x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @private2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0) 7.859454ms ago: executing program 1 (id=2781): r0 = socket(0x11, 0xa, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1ffff, 0x4) 0s ago: executing program 2 (id=2782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000a00000008000300b0"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): utes in process `syz.4.773'. [ 202.273664][ T8894] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.361213][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 202.509890][ T8912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.774'. [ 202.621791][ T8894] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.678846][ T8894] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.743673][ T8894] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.860988][ T8894] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.930555][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 202.991563][ T8927] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 203.030021][ T8927] netlink: 224 bytes leftover after parsing attributes in process `syz.3.777'. [ 203.100884][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 203.811186][ T8951] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 203.850558][ T8951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.795'. [ 203.937416][ T8966] ip6tnl1: entered allmulticast mode [ 204.004873][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 204.114732][ T8968] netlink: 'syz.4.785': attribute type 10 has an invalid length. [ 204.124204][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.792'. [ 204.365441][ T8968] veth0_vlan: left promiscuous mode [ 204.371050][ T8968] veth0_vlan: entered promiscuous mode [ 204.397027][ T8968] veth0_vlan: entered allmulticast mode [ 204.449875][ T8968] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 204.737903][ T8984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.307395][ T9029] x_tables: unsorted entry at hook 1 [ 206.753933][ T9046] ip6tnl1: entered allmulticast mode [ 206.773230][ T9027] lo speed is unknown, defaulting to 1000 [ 206.948455][ T9041] netlink: 'syz.0.813': attribute type 10 has an invalid length. [ 206.986636][ T9041] __nla_validate_parse: 3 callbacks suppressed [ 206.986660][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.813'. [ 207.273079][ T9052] netlink: 'syz.1.816': attribute type 3 has an invalid length. [ 207.927045][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.821'. [ 207.956867][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 207.976634][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.821'. [ 208.015792][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 208.024719][ T9069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.822'. [ 208.119418][ T5843] block nbd3: Receive control failed (result -107) [ 208.178360][ T9069] nbd3: detected capacity change from 0 to 256 [ 208.223053][ T5850] block nbd3: Dead connection, failed to find a fallback [ 208.241546][ T5850] block nbd3: shutting down sockets [ 208.258435][ T5850] blk_print_req_error: 27 callbacks suppressed [ 208.258456][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.299116][ T5850] buffer_io_error: 27 callbacks suppressed [ 208.299136][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.334767][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.356546][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.389369][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.440161][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.459221][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.496065][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.523914][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.560874][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.576312][ T9071] infiniband syz1: set down [ 208.577829][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.611536][ T9071] infiniband syz1: added team_slave_0 [ 208.631586][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.655680][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.664828][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.672878][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.682060][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.690008][ T5850] ldm_validate_partition_table(): Disk read failed. [ 208.696896][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.706064][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.714032][ T5850] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.723354][ T5850] Buffer I/O error on dev nbd3, logical block 0, async page read [ 208.733135][ T5850] Dev nbd3: unable to read RDB block 0 [ 208.739208][ T5850] nbd3: unable to read partition table [ 208.752973][ T5850] ldm_validate_partition_table(): Disk read failed. [ 208.760451][ T5850] Dev nbd3: unable to read RDB block 0 [ 208.766555][ T5850] nbd3: unable to read partition table [ 208.988936][ T9071] RDS/IB: syz1: added [ 208.993061][ T9071] smc: adding ib device syz1 with port count 1 [ 209.033023][ T9071] smc: ib device syz1 port 1 has pnetid [ 209.161497][ T9099] ip6tnl1: entered allmulticast mode [ 209.300508][ T9096] netlink: 'syz.3.829': attribute type 10 has an invalid length. [ 209.386499][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.829'. [ 209.512052][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 210.434797][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 210.444113][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'. [ 210.614171][ T9127] bridge_slave_1: left allmulticast mode [ 210.670646][ T9127] bridge_slave_1: left promiscuous mode [ 210.713185][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.724924][ T9127] bridge_slave_0: left allmulticast mode [ 210.733047][ T9127] bridge_slave_0: left promiscuous mode [ 210.740468][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.976632][ T9136] netlink: 'syz.4.840': attribute type 2 has an invalid length. [ 212.229831][ T9168] __nla_validate_parse: 3 callbacks suppressed [ 212.229854][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 212.728606][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.859'. [ 212.750144][ T9191] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 212.822208][ T9194] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 212.842763][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 212.935408][ T9196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.860'. [ 213.327456][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 213.880782][ T9224] lo speed is unknown, defaulting to 1000 [ 214.355830][ T9237] netlink: 'syz.1.874': attribute type 4 has an invalid length. [ 215.068112][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 215.144520][ T9240] ipvlan0: entered promiscuous mode [ 215.176175][ T9240] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 216.524163][ T9267] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 216.604126][ T9267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.882'. [ 217.609865][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 217.759163][ T9294] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 217.867675][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 217.887519][ T9295] IPVS: stopping backup sync thread 9294 ... [ 218.570094][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 218.610731][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 218.842465][ T9316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.856322][ T9322] netlink: 'syz.4.899': attribute type 10 has an invalid length. [ 218.875479][ T9316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.891139][ T9323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.900'. [ 219.053418][ T9322] sctp: [Deprecated]: syz.4.899 (pid 9322) Use of int in maxseg socket option. [ 219.053418][ T9322] Use struct sctp_assoc_value instead [ 219.247507][ T9316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.258920][ T9316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 219.337668][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.901'. [ 219.410568][ T9334] macvtap1: entered promiscuous mode [ 219.430406][ T9334] batadv0: entered promiscuous mode [ 219.436489][ T9334] macvtap1: entered allmulticast mode [ 219.471466][ T9334] batadv0: entered allmulticast mode [ 219.482176][ T9334] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 219.530653][ T9342] batadv0: left allmulticast mode [ 219.550305][ T9342] batadv0: left promiscuous mode [ 219.632349][ T9316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.658956][ T9316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 219.836208][ T9357] netlink: 596 bytes leftover after parsing attributes in process `syz.3.908'. [ 219.910847][ T9316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.945431][ T9316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 219.998325][ T9360] xt_HMARK: spi-set and port-set can't be combined [ 220.070983][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 220.243135][ T9316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.285402][ T9316] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.350144][ T9316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.381856][ T9316] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.440153][ T9316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.489659][ T9316] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.512870][ T9316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.545280][ T9316] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 220.798026][ T9382] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 220.883491][ T9382] bond0: entered promiscuous mode [ 220.892270][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.899831][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 220.918018][ T9379] netlink: 3 bytes leftover after parsing attributes in process `syz.0.915'. [ 221.020009][ T9379] batadv1: entered promiscuous mode [ 221.027507][ T9379] batadv1: entered allmulticast mode [ 221.036435][ T9379] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.074637][ T9379] bond0: (slave batadv1): making interface the new active one [ 221.100933][ T9379] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 221.524779][ T9405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.122504][ T9426] raw_sendmsg: syz.4.926 forgot to set AF_INET. Fix it! [ 222.265557][ T9432] SET target dimension over the limit! [ 222.302312][ T9432] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 222.348854][ T9432] team0: left allmulticast mode [ 222.364801][ T9437] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 222.401441][ T9432] team_slave_0: left allmulticast mode [ 222.426484][ T9432] team_slave_1: left allmulticast mode [ 222.432064][ T9432] team0: left promiscuous mode [ 222.443731][ T9432] team_slave_0: left promiscuous mode [ 222.474928][ T9432] team_slave_1: left promiscuous mode [ 222.511306][ T9432] bridge0: port 3(team0) entered disabled state [ 222.542732][ T9437] bridge0: port 3(team0) entered blocking state [ 222.556864][ T9437] bridge0: port 3(team0) entered disabled state [ 222.565812][ T9437] team0: entered allmulticast mode [ 222.571004][ T9437] team_slave_0: entered allmulticast mode [ 222.593011][ T9437] team_slave_1: entered allmulticast mode [ 222.605465][ T9437] team0: entered promiscuous mode [ 222.610765][ T9437] team_slave_0: entered promiscuous mode [ 222.617183][ T9437] team_slave_1: entered promiscuous mode [ 222.663502][ T9448] __nla_validate_parse: 2 callbacks suppressed [ 222.663522][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 222.987602][ T9456] smc: net device wg0 applied user defined pnetid SYZ0 [ 222.998113][ T9456] netlink: 'syz.1.936': attribute type 39 has an invalid length. [ 223.079905][ T9456] smc: removing net device wg0 with user defined pnetid SYZ0 [ 223.113954][ T9440] lo speed is unknown, defaulting to 1000 [ 223.393966][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 223.439087][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 223.474907][ T9466] netlink: 48 bytes leftover after parsing attributes in process `syz.0.948'. [ 223.791535][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 223.824337][ T9475] netlink: 'syz.4.941': attribute type 29 has an invalid length. [ 223.843335][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 223.888439][ T9473] netlink: 32 bytes leftover after parsing attributes in process `syz.2.940'. [ 223.890740][ T9479] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 223.968090][ T5843] block nbd4: Receive control failed (result -107) [ 224.015617][ T9473] nbd4: detected capacity change from 0 to 256 [ 224.056805][ T5850] block nbd4: Dead connection, failed to find a fallback [ 224.105091][ T5850] block nbd4: shutting down sockets [ 224.119044][ T5850] blk_print_req_error: 27 callbacks suppressed [ 224.119068][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.164073][ T5850] buffer_io_error: 27 callbacks suppressed [ 224.164094][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.195676][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.242291][ T9487] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 224.244468][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.250139][ T9487] netlink: 224 bytes leftover after parsing attributes in process `syz.1.943'. [ 224.276774][ T9486] netlink: 60 bytes leftover after parsing attributes in process `syz.4.945'. [ 224.310922][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.321558][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 224.342035][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.361033][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.385259][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.399123][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.420865][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.429230][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.439078][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.533263][ T9494] netlink: 'syz.2.944': attribute type 4 has an invalid length. [ 224.615453][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.636694][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.642739][ T9497] ip6t_srh: unknown srh invflags 4000 [ 224.653183][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.675300][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.691021][ T5850] ldm_validate_partition_table(): Disk read failed. [ 224.703694][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.735845][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.754595][ T9495] tipc: Started in network mode [ 224.760457][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 224.769832][ T9495] tipc: Node identity 4ade71751205, cluster identity 4711 [ 224.791841][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 224.806174][ T9495] tipc: Enabled bearer , priority 0 [ 224.826081][ T5850] Dev nbd4: unable to read RDB block 0 [ 224.862500][ T5850] nbd4: unable to read partition table [ 224.911943][ T5850] ldm_validate_partition_table(): Disk read failed. [ 224.943922][ T5850] Dev nbd4: unable to read RDB block 0 [ 224.975938][ T5850] nbd4: unable to read partition table [ 224.986999][ T9496] syzkaller0: entered promiscuous mode [ 224.992540][ T9496] syzkaller0: entered allmulticast mode [ 225.008490][ T9496] tipc: Resetting bearer [ 225.093988][ T9487] lo speed is unknown, defaulting to 1000 [ 225.148144][ T9493] tipc: Resetting bearer [ 225.862349][ T25] tipc: Node number set to 1490776437 [ 227.464336][ T9493] tipc: Disabling bearer [ 227.823065][ T9517] vlan2: entered promiscuous mode [ 227.828375][ T9517] vlan2: entered allmulticast mode [ 227.833709][ T9517] hsr_slave_1: entered allmulticast mode [ 228.158387][ T9522] __nla_validate_parse: 4 callbacks suppressed [ 228.158410][ T9522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 228.229125][ T9524] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 228.500994][ T9538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'. [ 228.856331][ T9542] netlink: 277 bytes leftover after parsing attributes in process `syz.3.962'. [ 228.954466][ T9546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.964'. [ 228.976750][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.964'. [ 228.981224][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 229.025700][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 229.034583][ T9548] netlink: 'syz.0.965': attribute type 7 has an invalid length. [ 229.222139][ T9559] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 229.287533][ T9552] bond0 (unregistering): (slave batadv1): Releasing active interface [ 229.303960][ T9552] bond0 (unregistering): Released all slaves [ 229.318529][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.967'. [ 229.340768][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 229.411586][ T9559] syz_tun: entered promiscuous mode [ 229.894521][ T9584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.975'. [ 229.909815][ T9584] netlink: 'syz.4.975': attribute type 2 has an invalid length. [ 229.924570][ T9586] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 230.092369][ T9589] netlink: 'syz.1.976': attribute type 5 has an invalid length. [ 230.114338][ T9589] ip6erspan0: entered promiscuous mode [ 230.751372][ T9607] netlink: 'syz.4.980': attribute type 4 has an invalid length. [ 230.821400][ T9607] ip6t_srh: unknown srh invflags 4000 [ 230.960461][ T9615] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:fffd with DS=0xb [ 230.972961][ T9611] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.029616][ T9611] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.072481][ T5843] Bluetooth: hci4: link tx timeout [ 231.077985][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 231.141861][ T9611] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.175660][ T9611] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.257976][ T9611] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.301439][ T9611] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.362298][ T9611] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.378389][ T9611] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.409353][ T9623] netlink: 'syz.1.986': attribute type 12 has an invalid length. [ 231.537847][ T9611] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.553319][ T9611] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 231.574769][ T9611] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.605635][ T9611] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 231.661858][ T9611] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.730813][ T9611] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 231.833128][ T9611] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.860639][ T9611] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 232.185797][ T9647] syz.0.993 uses old SIOCAX25GETINFO [ 232.857510][ T9680] syz_tun: left promiscuous mode [ 232.878131][ T9680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.115833][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 233.640266][ T9719] __nla_validate_parse: 12 callbacks suppressed [ 233.640290][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 234.229700][ T9717] lo speed is unknown, defaulting to 1000 [ 234.878130][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 234.984467][ T9768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1014'. [ 235.007931][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1014'. [ 235.033464][ T9768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1014'. [ 235.056889][ T9768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1014'. [ 235.209274][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 235.431818][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 236.803253][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 236.890768][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 237.326081][ T9846] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 237.426359][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 237.662427][ T9851] IPVS: stopping backup sync thread 9846 ... [ 237.757714][ T9852] delete_channel: no stack [ 239.197685][ T9920] __nla_validate_parse: 1 callbacks suppressed [ 239.197710][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1048'. [ 239.214076][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1048'. [ 239.249659][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1048'. [ 239.269857][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1048'. [ 239.488339][ T9922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.346667][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 240.394753][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 241.016199][ T9987] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 241.275691][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 241.536971][ T5205] udevd (5205) used greatest stack depth: 18480 bytes left [ 243.101916][T10022] xt_hashlimit: max too large, truncated to 1048576 [ 243.173850][T10022] No such timeout policy "syz1" [ 244.503379][T10044] team0 (unregistering): left allmulticast mode [ 244.549432][T10044] team_slave_0: left allmulticast mode [ 244.572383][T10044] team_slave_1: left allmulticast mode [ 244.592339][T10044] team0 (unregistering): left promiscuous mode [ 244.619210][T10044] team_slave_0: left promiscuous mode [ 244.639255][T10044] team_slave_1: left promiscuous mode [ 244.654985][T10044] bridge0: port 3(team0) entered disabled state [ 244.681911][T10044] team0 (unregistering): Port device team_slave_0 removed [ 244.720552][T10044] team0 (unregistering): Port device team_slave_1 removed [ 245.080825][T10064] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 245.503300][T10083] syzkaller0: entered promiscuous mode [ 245.513896][T10083] syzkaller0: entered allmulticast mode [ 245.919459][T10097] netlink: 'syz.0.1092': attribute type 3 has an invalid length. [ 246.070084][T10101] tipc: Failed to remove unknown binding: 66,1,1/0:3158240436/3158240438 [ 246.551664][T10101] tipc: Failed to remove unknown binding: 66,1,1/0:3158240436/3158240438 [ 246.566556][T10101] tipc: Failed to remove unknown binding: 66,1,1/0:3158240436/3158240438 [ 247.837735][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 247.845471][T10085] lo speed is unknown, defaulting to 1000 [ 248.371644][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 248.416594][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 248.452004][T10127] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 248.521600][T10127] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1102'. [ 248.594823][T10136] IPVS: Unknown mcast interface: ip6erspan0 [ 248.878959][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 248.915763][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 248.924721][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 249.754885][T10163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.446736][T10168] lo speed is unknown, defaulting to 1000 [ 250.594016][T10195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1115'. [ 250.623590][T10195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1115'. [ 250.734194][T10198] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 250.917278][T10204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.926187][T10204] bond0: (slave bond1): making interface the new active one [ 250.934593][T10204] bond0: (slave bond1): Enslaving as an active interface with an up link [ 250.943973][T10186] lo speed is unknown, defaulting to 1000 [ 251.091210][T10209] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 251.101400][T10209] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 251.255413][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 251.284659][T10212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.309785][T10212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.939279][T10255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1132'. [ 252.996794][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 253.013981][T10255] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 253.055964][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1130'. [ 253.157506][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 253.916132][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 254.333540][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 254.679127][T10300] netlink: 'syz.1.1143': attribute type 2 has an invalid length. [ 254.920503][T10310] batadv1: entered promiscuous mode [ 254.927074][T10310] batadv1: entered allmulticast mode [ 255.035656][ T5848] Bluetooth: hci0: command tx timeout [ 255.045112][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'. [ 255.130772][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1146'. [ 255.155640][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1146'. [ 255.167206][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1146'. [ 255.176892][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1146'. [ 255.739421][T10338] ip6t_rpfilter: unknown options [ 255.821669][T10341] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 255.874858][T10341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.940755][T10341] bond2: (slave bridge0): Enslaving as an active interface with a down link [ 255.995837][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 256.093120][T10354] syz.4.1156 (10354) used obsolete PPPIOCDETACH ioctl [ 256.666766][T10380] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 257.072341][T10390] tap0: tun_chr_ioctl cmd 1074812118 [ 257.184224][T10395] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 258.275723][T10426] __nla_validate_parse: 8 callbacks suppressed [ 258.275744][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 258.507113][T10432] openvswitch: netlink: Message has 8 unknown bytes. [ 258.548966][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 258.588909][T10432] netlink: 'syz.3.1183': attribute type 12 has an invalid length. [ 259.920302][T10496] netlink: 'syz.4.1198': attribute type 2 has an invalid length. [ 259.995870][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 260.065228][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 260.260225][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1200'. [ 260.365994][T10504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.934210][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1203'. [ 261.141007][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 261.182015][T10519] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 261.211482][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 261.287112][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.310001][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.347099][T10520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1202'. [ 261.366338][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1202'. [ 261.379808][T10520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1202'. [ 261.761748][T10522] lo speed is unknown, defaulting to 1000 [ 262.075538][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 262.894714][T10549] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 263.191862][T10551] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 263.234884][ T4543] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.258066][T10552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.368309][ T963] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.575741][T10559] __nla_validate_parse: 1 callbacks suppressed [ 263.575769][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 263.627384][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 263.662104][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1217'. [ 263.671414][T10559] netlink: 'syz.1.1216': attribute type 7 has an invalid length. [ 263.870716][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 264.468730][T10604] netlink: 'syz.1.1227': attribute type 39 has an invalid length. [ 264.762295][T10614] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 264.771412][T10614] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 264.780051][T10614] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 264.788825][T10614] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 264.812842][T10614] xt_l2tp: v2 sid > 0xffff: 262144 [ 265.263899][T10618] lo speed is unknown, defaulting to 1000 [ 265.424812][T10635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1236'. [ 265.594903][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1238'. [ 265.756236][T10642] vlan0: entered promiscuous mode [ 265.761365][T10642] vlan0: entered allmulticast mode [ 265.994174][T10655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1242'. [ 266.007196][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'. [ 266.026372][T10655] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1242'. [ 266.040276][T10655] netlink: 'syz.1.1242': attribute type 2 has an invalid length. [ 266.048502][T10655] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1242'. [ 266.237685][T10665] IPVS: Unknown mcast interface: ip6erspan0 [ 266.783865][T10673] netlink: 'syz.2.1246': attribute type 39 has an invalid length. [ 267.318980][T10683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.360258][T10683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.643932][T10671] lo speed is unknown, defaulting to 1000 [ 268.553398][T10674] xt_policy: output policy not valid in PREROUTING and INPUT [ 268.604789][T10704] netlink: 'syz.0.1247': attribute type 21 has an invalid length. [ 268.632485][T10704] __nla_validate_parse: 3 callbacks suppressed [ 268.632512][T10704] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1247'. [ 268.662039][T10704] netlink: 'syz.0.1247': attribute type 5 has an invalid length. [ 268.705574][T10704] netlink: 'syz.0.1247': attribute type 6 has an invalid length. [ 268.741176][T10705] siw: device registration error -23 [ 268.747201][T10704] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1247'. [ 268.854309][T10723] netlink: 'syz.2.1260': attribute type 39 has an invalid length. [ 269.219438][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1264'. [ 269.490257][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 270.306751][T10742] lo speed is unknown, defaulting to 1000 [ 270.837174][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1274'. [ 271.029660][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 271.094607][T10770] lo: entered allmulticast mode [ 271.130590][T10770] lo: left allmulticast mode [ 271.130962][T10742] xt_policy: output policy not valid in PREROUTING and INPUT [ 271.153279][T10742] netlink: 'syz.4.1267': attribute type 21 has an invalid length. [ 271.165060][T10742] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1267'. [ 271.185942][T10742] netlink: 'syz.4.1267': attribute type 5 has an invalid length. [ 271.195108][T10742] netlink: 'syz.4.1267': attribute type 6 has an invalid length. [ 271.243742][T10742] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1267'. [ 271.648955][T10783] bridge0: port 1(gretap0) entered blocking state [ 271.685519][T10783] bridge0: port 1(gretap0) entered disabled state [ 271.709019][T10783] gretap0: entered allmulticast mode [ 271.779813][T10783] gretap0: entered promiscuous mode [ 271.851828][T10784] gretap0: left allmulticast mode [ 271.893879][T10784] gretap0: left promiscuous mode [ 271.914684][T10784] bridge0: port 1(gretap0) entered disabled state [ 272.346913][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 272.643951][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 273.862510][T10839] __nla_validate_parse: 3 callbacks suppressed [ 273.862817][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 273.909140][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 274.606185][T10848] lo speed is unknown, defaulting to 1000 [ 274.679432][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 274.778051][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 275.339604][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 275.349113][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 275.532555][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 275.683976][T10886] sctp: [Deprecated]: syz.2.1311 (pid 10886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.683976][T10886] Use struct sctp_sack_info instead [ 275.795117][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'. [ 275.895438][T10885] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1311'. [ 275.998904][T10888] bridge0: port 1(veth11) entered blocking state [ 276.019038][T10888] bridge0: port 1(veth11) entered disabled state [ 276.048330][T10888] veth11: entered allmulticast mode [ 276.076438][T10888] veth11: entered promiscuous mode [ 276.095978][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.103306][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.111161][T10888] bridge_slave_1: entered allmulticast mode [ 276.126066][T10888] bridge_slave_1: entered promiscuous mode [ 276.542142][T10913] netlink: 'syz.4.1316': attribute type 10 has an invalid length. [ 276.842387][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 277.434855][T10944] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 278.468873][T10980] tipc: Started in network mode [ 278.479535][T10980] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 278.495873][T10980] tipc: Enabling of bearer rejected, failed to enable media [ 278.533254][T10982] netlink: 'syz.4.1338': attribute type 10 has an invalid length. [ 278.720606][T10992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.249014][T11051] __nla_validate_parse: 4 callbacks suppressed [ 280.249038][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 280.265366][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1358'. [ 280.286966][T11053] xt_addrtype: ipv6 does not support BROADCAST matching [ 280.501461][T11057] netlink: 'syz.4.1361': attribute type 1 has an invalid length. [ 280.509900][T11057] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1361'. [ 280.554346][T11060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1362'. [ 280.556413][T11057] nbd: nbd4 already in use [ 280.572735][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 280.582412][T11060] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1362'. [ 280.597467][T11060] netlink: 'syz.3.1362': attribute type 2 has an invalid length. [ 280.608318][T11060] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1362'. [ 280.678347][T11057] veth0_vlan: left promiscuous mode [ 280.693244][T11057] veth0_vlan: entered promiscuous mode [ 281.025084][T11076] netlink: 'syz.3.1367': attribute type 6 has an invalid length. [ 281.117666][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 281.357996][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 281.381196][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 282.152972][T11112] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 282.164093][T11112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.171454][T11112] IPv6: NLM_F_CREATE should be set when creating new route [ 282.242471][T11112] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 284.141027][T11149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.269036][T11153] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 284.401983][T11157] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 285.296816][T11168] __nla_validate_parse: 5 callbacks suppressed [ 285.296841][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 285.370109][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 285.874812][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 286.205006][T11191] openvswitch: netlink: Message has 8 unknown bytes. [ 286.247476][T11192] openvswitch: netlink: IP tunnel dst address not specified [ 286.381971][T11197] openvswitch: netlink: Message has 8 unknown bytes. [ 286.411923][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 286.439762][T11197] netlink: 'syz.0.1409': attribute type 12 has an invalid length. [ 286.734698][T11195] lo speed is unknown, defaulting to 1000 [ 286.760585][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 286.975719][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 286.992149][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 287.241345][T11217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1416'. [ 287.450510][T11225] veth0: entered promiscuous mode [ 287.468084][T11225] macsec1: entered promiscuous mode [ 287.494511][T11225] macsec1: entered allmulticast mode [ 287.507225][T11225] veth0: entered allmulticast mode [ 287.551135][T11225] veth0: left allmulticast mode [ 287.569561][T11225] veth0: left promiscuous mode [ 287.673339][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 287.717187][T11231] netlink: 'syz.4.1421': attribute type 6 has an invalid length. [ 288.560291][T11250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'. [ 288.732588][T11256] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 288.941787][T11259] pimreg: entered allmulticast mode [ 289.184130][T11269] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.419265][T11269] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.530689][T11250] lo speed is unknown, defaulting to 1000 [ 289.607032][T11269] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.841384][T11269] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 290.071741][T11269] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 290.112957][T11269] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 290.180953][T11269] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 290.228971][T11269] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 290.417061][T11282] netlink: 'syz.4.1433': attribute type 39 has an invalid length. [ 291.016785][T11288] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 291.042860][T11288] netlink: 'syz.0.1434': attribute type 2 has an invalid length. [ 291.059448][T11288] netlink: 'syz.0.1434': attribute type 2 has an invalid length. [ 291.075566][T11288] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 291.092302][T11288] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 291.115805][T11288] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 291.166124][T11295] __nla_validate_parse: 4 callbacks suppressed [ 291.166144][T11295] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1435'. [ 291.196387][T11296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1436'. [ 291.244765][T11295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1435'. [ 291.274663][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1435'. [ 291.814604][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 292.073166][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 292.101330][T11303] pim6reg: entered allmulticast mode [ 292.113694][T11303] pim6reg: left allmulticast mode [ 292.156515][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 292.280875][T11318] netlink: zone id is out of range [ 292.363190][T11318] netlink: zone id is out of range [ 292.415804][T11318] netlink: zone id is out of range [ 292.421096][T11318] netlink: set zone limit has 4 unknown bytes [ 292.545086][T11320] gtp1: entered promiscuous mode [ 293.568290][T11357] netlink: 'syz.4.1449': attribute type 1 has an invalid length. [ 293.588286][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 293.617580][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 294.819478][T11387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1458'. [ 296.387735][T11421] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 296.516847][T11423] __nla_validate_parse: 1 callbacks suppressed [ 296.516869][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 297.342953][T11435] openvswitch: netlink: Message has 8 unknown bytes. [ 297.371133][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 297.393540][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 297.418315][T11435] netlink: 'syz.1.1477': attribute type 12 has an invalid length. [ 297.441178][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 298.522593][T11463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1484'. [ 298.539643][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 298.550761][T11463] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1484'. [ 298.578552][T11463] netlink: 'syz.3.1484': attribute type 2 has an invalid length. [ 298.591633][T11463] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1484'. [ 299.648515][T11475] bond0: entered promiscuous mode [ 299.739194][T11475] bond0: entered allmulticast mode [ 299.792305][T11475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.217709][T11494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.293224][T11496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.357693][T11494] netlink: 'syz.2.1494': attribute type 10 has an invalid length. [ 300.576319][T11498] GUP no longer grows the stack in syz.1.1495 (11498): 20004000-20005000 (20002000) [ 300.593507][T11494] netlink: 'syz.2.1494': attribute type 10 has an invalid length. [ 300.623964][T11494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1494'. [ 300.635447][T11498] CPU: 1 UID: 0 PID: 11498 Comm: syz.1.1495 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 300.646272][T11498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 300.656484][T11498] Call Trace: [ 300.659802][T11498] [ 300.662858][T11498] dump_stack_lvl+0x241/0x360 [ 300.667623][T11498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.672892][T11498] ? __pfx__printk+0x10/0x10 [ 300.677549][T11498] ? find_vma+0xf9/0x170 [ 300.681876][T11498] __get_user_pages+0x4385/0x49e0 [ 300.687064][T11498] ? __pfx_lock_acquire+0x10/0x10 [ 300.692158][T11498] ? mark_lock+0x9a/0x360 [ 300.696556][T11498] ? __lock_acquire+0x1397/0x2100 [ 300.701666][T11498] ? __pfx___get_user_pages+0x10/0x10 [ 300.707118][T11498] ? __gup_longterm_locked+0xd2f/0x17f0 [ 300.712722][T11498] ? __pfx_down_read_killable+0x10/0x10 [ 300.718337][T11498] ? __pfx_lock_acquire+0x10/0x10 [ 300.723430][T11498] ? try_get_folio+0xf1/0x6f0 [ 300.728163][T11498] ? __pfx_lock_release+0x10/0x10 [ 300.733259][T11498] __gup_longterm_locked+0xe64/0x17f0 [ 300.738702][T11498] ? mark_lock+0x9a/0x360 [ 300.743099][T11498] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.746054][T11487] lo speed is unknown, defaulting to 1000 [ 300.749115][T11498] ? __pfx___gup_longterm_locked+0x10/0x10 [ 300.760744][T11498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.767137][T11498] ? gup_fast_fallback+0x207e/0x29c0 [ 300.772479][T11498] gup_fast_fallback+0x2266/0x29c0 [ 300.777693][T11498] ? __pfx_gup_fast_fallback+0x10/0x10 [ 300.783243][T11498] ? __mutex_trylock_common+0x183/0x2e0 [ 300.788856][T11498] ? __pfx___might_resched+0x10/0x10 [ 300.794204][T11498] ? is_valid_gup_args+0x124/0x200 [ 300.799383][T11498] get_user_pages_fast+0xcc/0x160 [ 300.804487][T11498] ? __pfx_get_user_pages_fast+0x10/0x10 [ 300.810176][T11498] ? rcu_is_watching+0x15/0xb0 [ 300.815021][T11498] ? trace_contention_end+0x3c/0x120 [ 300.820369][T11498] ? __mutex_lock+0x37f/0xee0 [ 300.825113][T11498] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 300.830904][T11498] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.837310][T11498] iov_iter_get_pages2+0xcf/0x130 [ 300.842402][T11498] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 300.848104][T11498] __se_sys_vmsplice+0x740/0x1490 [ 300.853183][T11498] ? plist_del+0x3f1/0x410 [ 300.857680][T11498] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 300.863198][T11498] ? __pfx_futex_wake+0x10/0x10 [ 300.868178][T11498] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.874240][T11498] ? do_syscall_64+0x100/0x230 [ 300.879069][T11498] ? do_syscall_64+0xb6/0x230 [ 300.883808][T11498] do_syscall_64+0xf3/0x230 [ 300.888451][T11498] ? clear_bhb_loop+0x35/0x90 [ 300.893196][T11498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.899155][T11498] RIP: 0033:0x7fd5ed585d19 [ 300.903634][T11498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.923367][T11498] RSP: 002b:00007fd5ee475038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 300.931865][T11498] RAX: ffffffffffffffda RBX: 00007fd5ed775fa0 RCX: 00007fd5ed585d19 [ 300.939892][T11498] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000008 [ 300.947922][T11498] RBP: 00007fd5ed601a20 R08: 0000000000000000 R09: 0000000000000000 [ 300.955944][T11498] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 300.964048][T11498] R13: 0000000000000000 R14: 00007fd5ed775fa0 R15: 00007fff9a8c1c68 [ 300.972104][T11498] [ 301.102288][T11498] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1495'. [ 301.384214][T11512] tipc: Cannot configure node identity twice [ 301.428990][T11514] rdma_op ffff888011d7c1f0 conn xmit_rdma 0000000000000000 [ 301.641610][T11521] __nla_validate_parse: 1 callbacks suppressed [ 301.641632][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 302.529558][T11533] syz0: rxe_newlink: already configured on lo [ 302.812937][T11528] lo speed is unknown, defaulting to 1000 [ 303.350528][T11539] syzkaller1: entered promiscuous mode [ 303.360429][T11539] syzkaller1: entered allmulticast mode [ 305.702404][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 307.088665][T11601] rdma_rxe: rxe_newlink: failed to add lo [ 307.781375][T11604] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 307.796583][T11604] xt_hashlimit: max too large, truncated to 1048576 [ 308.188640][T11611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1520'. [ 308.438508][T11618] Â: renamed from pim6reg1 [ 308.472508][T11618] infiniband syz0: set active [ 308.534016][T11618] bridge_slave_0: left allmulticast mode [ 308.553245][T11618] bridge_slave_0: left promiscuous mode [ 308.592214][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.628433][T11618] bridge_slave_1: left allmulticast mode [ 308.651893][T11618] bridge_slave_1: left promiscuous mode [ 308.673806][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.713301][T11618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.733981][T11618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.746214][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 308.762724][T11618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.780372][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 308.809370][ T5884] lo speed is unknown, defaulting to 1000 [ 309.454147][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 309.468638][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 309.651068][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 309.862262][T11663] netlink: 'syz.0.1531': attribute type 39 has an invalid length. [ 310.138744][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'. [ 310.878261][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 310.934449][T11700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1541'. [ 311.298563][T11711] bridge3: entered promiscuous mode [ 311.323565][T11711] bridge3: entered allmulticast mode [ 311.374784][T11708] netlink: 'syz.3.1544': attribute type 10 has an invalid length. [ 311.447904][T11708] bridge0: port 3(ip6gretap0) entered blocking state [ 311.454739][T11708] bridge0: port 3(ip6gretap0) entered disabled state [ 311.466391][T11713] openvswitch: netlink: Message has 8 unknown bytes. [ 311.487247][T11708] ip6gretap0: entered allmulticast mode [ 311.505710][T11708] ip6gretap0: entered promiscuous mode [ 311.524080][T11708] bridge0: port 3(ip6gretap0) entered blocking state [ 311.531112][T11708] bridge0: port 3(ip6gretap0) entered forwarding state [ 311.556751][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 311.588902][T11713] netlink: 'syz.2.1545': attribute type 12 has an invalid length. [ 311.751100][T11723] netlink: 'syz.1.1549': attribute type 1 has an invalid length. [ 311.809164][T11725] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 311.991832][T11729] netlink: 'syz.2.1551': attribute type 39 has an invalid length. [ 312.236094][T11733] openvswitch: netlink: Message has 8 unknown bytes. [ 312.293134][T11733] netlink: 'syz.2.1554': attribute type 12 has an invalid length. [ 313.866367][T11777] netlink: 'syz.1.1563': attribute type 1 has an invalid length. [ 313.874214][T11777] __nla_validate_parse: 9 callbacks suppressed [ 313.874233][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'. [ 314.006421][T11785] netlink: 'syz.3.1564': attribute type 39 has an invalid length. [ 314.131208][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 314.671027][T11795] lo speed is unknown, defaulting to 1000 [ 314.726679][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 315.628344][T11818] openvswitch: netlink: Message has 8 unknown bytes. [ 315.643301][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 315.654849][T11818] netlink: 'syz.1.1574': attribute type 12 has an invalid length. [ 316.425077][T11822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1572'. [ 316.484771][T11822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1572'. [ 316.505041][T11822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1572'. [ 316.550527][T11822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1572'. [ 317.070472][T11836] netlink: 'syz.1.1579': attribute type 39 has an invalid length. [ 317.275703][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 317.608582][T11857] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 317.636026][T11858] openvswitch: netlink: Message has 8 unknown bytes. [ 317.671948][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 317.712925][T11858] netlink: 'syz.0.1586': attribute type 12 has an invalid length. [ 318.406185][T11882] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 318.422337][T11882] pimreg3: entered allmulticast mode [ 318.431963][T11882] netlink: 'syz.4.1593': attribute type 1 has an invalid length. [ 318.506219][T11882] pimreg3: left allmulticast mode [ 318.758443][T11893] netlink: 'syz.2.1597': attribute type 39 has an invalid length. [ 318.807665][T11896] openvswitch: netlink: Message has 8 unknown bytes. [ 318.860518][T11896] netlink: 'syz.1.1598': attribute type 12 has an invalid length. [ 318.959981][T11902] openvswitch: netlink: Message has 8 unknown bytes. [ 319.009708][T11902] __nla_validate_parse: 5 callbacks suppressed [ 319.009733][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 319.060527][T11902] netlink: 'syz.2.1599': attribute type 12 has an invalid length. [ 319.624557][T11921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1605'. [ 319.756383][T11921] erspan0: entered promiscuous mode [ 319.794393][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 319.813605][T11921] erspan0: left promiscuous mode [ 319.819786][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'. [ 320.186880][T11937] netlink: 'syz.3.1610': attribute type 39 has an invalid length. [ 320.302266][T11945] openvswitch: netlink: Message has 8 unknown bytes. [ 320.321356][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 320.480999][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 320.505416][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 320.682093][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 320.894931][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1618'. [ 320.928517][T11963] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1618'. [ 320.938335][T11963] netlink: 'syz.4.1618': attribute type 2 has an invalid length. [ 321.401420][T11978] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 321.416142][T11978] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.430817][T11978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.438173][T11978] IPv6: NLM_F_CREATE should be set when creating new route [ 321.445495][T11978] IPv6: NLM_F_CREATE should be set when creating new route [ 321.452924][T11978] IPv6: NLM_F_CREATE should be set when creating new route [ 321.511578][T11982] openvswitch: netlink: Message has 8 unknown bytes. [ 321.851462][T11987] bond4: entered promiscuous mode [ 321.879845][T11987] bond4: entered allmulticast mode [ 321.916195][T11987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.993182][T11995] netlink: 'syz.4.1630': attribute type 39 has an invalid length. [ 322.233394][T11996] ip6gretap0: left allmulticast mode [ 322.246952][T11996] ip6gretap0: left promiscuous mode [ 322.268693][T11996] bridge0: port 3(ip6gretap0) entered disabled state [ 322.294798][T11996] bridge_slave_1: left allmulticast mode [ 322.304743][T11996] bridge_slave_1: left promiscuous mode [ 322.324906][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.357971][T11996] bridge_slave_0: left allmulticast mode [ 322.371045][T11996] bridge_slave_0: left promiscuous mode [ 322.388518][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.742813][T12019] vlan0: entered promiscuous mode [ 322.791932][T12022] openvswitch: netlink: Message has 8 unknown bytes. [ 323.223985][T12038] netlink: 'syz.0.1642': attribute type 39 has an invalid length. [ 323.437561][T12045] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.540562][T12045] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.631634][T12045] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.726143][T12045] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.846489][T12045] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.907887][T12045] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.956845][T12045] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.980995][T12045] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.540138][T12068] __nla_validate_parse: 14 callbacks suppressed [ 324.540159][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 324.722111][T12084] sctp: [Deprecated]: syz.3.1655 (pid 12084) Use of int in max_burst socket option. [ 324.722111][T12084] Use struct sctp_assoc_value instead [ 324.788306][T12084] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 324.890953][T12088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1656'. [ 325.028057][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 325.073275][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 325.334224][T12100] netlink: 'syz.3.1658': attribute type 39 has an invalid length. [ 325.373282][T12093] bond0: entered promiscuous mode [ 325.422082][T12093] bond0: entered allmulticast mode [ 325.454701][T12093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.284085][T12127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1664'. [ 326.325805][T12116] lo speed is unknown, defaulting to 1000 [ 326.504135][T12135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1669'. [ 326.514149][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 326.523611][T12135] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1669'. [ 326.548665][T12135] netlink: 'syz.3.1669': attribute type 2 has an invalid length. [ 326.567731][T12135] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1669'. [ 326.896754][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1670'. [ 327.800557][T12147] lo speed is unknown, defaulting to 1000 [ 328.071850][T12162] netlink: 'syz.4.1675': attribute type 39 has an invalid length. [ 329.163446][T12163] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 329.429201][T12174] netlink: 'syz.4.1679': attribute type 10 has an invalid length. [ 329.547782][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1682'. [ 329.561225][T12175] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1680'. [ 329.570748][T12177] tap0: tun_chr_ioctl cmd 1074025677 [ 329.576421][T12177] tap0: linktype set to 778 [ 329.585551][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 329.625406][T12175] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1680'. [ 329.655471][T12175] netlink: 'syz.0.1680': attribute type 2 has an invalid length. [ 329.674199][T12175] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1680'. [ 329.740535][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1681'. [ 329.941713][T12191] openvswitch: netlink: Message has 8 unknown bytes. [ 330.134270][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 330.368227][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'. [ 330.384413][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'. [ 331.122268][T12215] netlink: 'syz.0.1688': attribute type 39 has an invalid length. [ 331.566124][T12228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1692'. [ 331.767055][T12231] netlink: 'syz.2.1694': attribute type 2 has an invalid length. [ 332.451087][T12237] lo speed is unknown, defaulting to 1000 [ 333.407060][T12278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.518342][T12280] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 333.598323][T12280] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 333.762081][T12280] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 333.860993][T12280] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 333.927280][T12294] netlink: 'syz.1.1707': attribute type 2 has an invalid length. [ 333.990618][T12280] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 334.151205][T12280] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.219462][T12280] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.262746][T12280] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.323877][T12280] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.680086][T12311] __nla_validate_parse: 16 callbacks suppressed [ 334.680109][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 334.722153][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 335.318304][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 335.327706][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 335.666819][T12338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1720'. [ 335.698418][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 335.735577][T12338] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1720'. [ 335.765631][T12338] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 335.783111][T12338] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1720'. [ 335.836632][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 335.881054][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 336.439912][T12362] xt_l2tp: v2 tid > 0xffff: 150994944 [ 336.460383][T12362] netlink: 'syz.4.1724': attribute type 15 has an invalid length. [ 337.268225][T12382] bond0: entered promiscuous mode [ 337.300913][T12382] gretap1: entered promiscuous mode [ 337.307872][T12382] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 337.749333][T12390] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 337.888230][T12390] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 337.974143][T12390] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.050442][T12390] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.187189][T12390] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.221589][T12390] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.262878][T12390] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.302218][T12390] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 340.518727][T12420] __nla_validate_parse: 8 callbacks suppressed [ 340.518751][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 340.537272][T12420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1746'. [ 340.573702][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 340.764421][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 340.775680][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 340.807270][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 342.085943][T12453] netlink: 'syz.3.1756': attribute type 39 has an invalid length. [ 342.610539][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 342.655810][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 342.774080][T12475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 342.838163][T12475] netlink: 'syz.4.1764': attribute type 11 has an invalid length. [ 342.857574][T12475] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1764'. [ 342.911378][T12479] netlink: 'syz.1.1766': attribute type 39 has an invalid length. [ 343.869044][T12521] netlink: 'syz.4.1779': attribute type 39 has an invalid length. [ 344.002118][T12524] syzkaller0: entered promiscuous mode [ 344.032101][T12524] syzkaller0: entered allmulticast mode [ 344.059166][T12531] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 344.076589][T12531] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 344.762142][T12548] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 346.629214][T12561] openvswitch: netlink: Message has 8 unknown bytes. [ 346.673717][T12556] ipip0: entered promiscuous mode [ 346.719430][T12561] __nla_validate_parse: 6 callbacks suppressed [ 346.719452][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 346.793789][T12561] netlink: 'syz.0.1791': attribute type 12 has an invalid length. [ 347.096632][T12573] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 348.131088][T12621] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1805'. [ 348.692862][T12635] batadv_slave_1: entered promiscuous mode [ 349.167700][T12655] infiniband syz0: set active [ 349.195537][T12655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.216124][ T8431] lo speed is unknown, defaulting to 1000 [ 349.284635][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 349.316349][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'. [ 349.516628][T12667] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1819'. [ 349.774657][T12682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.648581][T12685] lo speed is unknown, defaulting to 1000 [ 351.058253][T12701] dummy0: entered promiscuous mode [ 351.063513][T12701] macsec1: entered promiscuous mode [ 351.104158][T12701] macsec1: entered allmulticast mode [ 351.124327][T12701] dummy0: entered allmulticast mode [ 351.150710][T12701] dummy0: left allmulticast mode [ 351.180498][T12701] dummy0: left promiscuous mode [ 351.318649][T12704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1830'. [ 351.946256][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 352.225945][T12724] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 352.337424][T12722] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1834'. [ 352.392922][T12730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1838'. [ 352.440467][T12730] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1838'. [ 352.668884][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 352.881832][T12751] netlink: 'syz.4.1843': attribute type 1 has an invalid length. [ 352.928812][T12751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.961892][T12751] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 353.594138][T12776] openvswitch: netlink: Message has 8 unknown bytes. [ 353.637996][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 353.688928][T12776] netlink: 'syz.4.1849': attribute type 12 has an invalid length. [ 353.795069][T12783] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1850'. [ 354.282723][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 354.651378][T12801] netlink: 'syz.3.1856': attribute type 21 has an invalid length. [ 354.792429][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 355.146969][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 355.169204][T12817] netlink: 'syz.1.1862': attribute type 21 has an invalid length. [ 355.384754][T12827] openvswitch: netlink: Message has 8 unknown bytes. [ 355.466400][T12827] netlink: 'syz.4.1864': attribute type 12 has an invalid length. [ 356.808467][T12857] hsr_slave_0: left promiscuous mode [ 356.824102][T12857] hsr_slave_1: left promiscuous mode [ 357.013522][T12868] netlink: 'syz.4.1872': attribute type 39 has an invalid length. [ 357.691782][T12876] nbd: must specify a device to reconfigure [ 357.725428][T12861] __nla_validate_parse: 7 callbacks suppressed [ 357.725453][T12861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1871'. [ 357.852833][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 357.871264][T12888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1878'. [ 357.915714][T12888] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1878'. [ 358.205566][T12899] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1881'. [ 358.365822][T12905] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 358.387839][T12905] netlink: 'syz.0.1884': attribute type 9 has an invalid length. [ 358.403342][T12905] netlink: 'syz.0.1884': attribute type 7 has an invalid length. [ 358.412472][T12905] netlink: 'syz.0.1884': attribute type 8 has an invalid length. [ 358.422565][T12908] netlink: 'syz.3.1885': attribute type 39 has an invalid length. [ 358.617327][T12912] openvswitch: netlink: Message has 8 unknown bytes. [ 358.693875][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 358.730752][T12912] netlink: 'syz.4.1887': attribute type 12 has an invalid length. [ 359.309935][T12931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1891'. [ 359.352878][T12931] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1891'. [ 359.964298][T12955] netlink: 'syz.1.1896': attribute type 39 has an invalid length. [ 360.251500][T12958] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 360.291762][T12959] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 360.482100][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 360.493580][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 360.709297][T12970] SET target dimension over the limit! [ 360.982433][T12983] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 362.280794][T13012] netlink: 'syz.2.1914': attribute type 39 has an invalid length. [ 362.473214][T13014] netlink: 'syz.4.1915': attribute type 13 has an invalid length. [ 363.321935][T13034] __nla_validate_parse: 7 callbacks suppressed [ 363.321959][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 364.012118][T13050] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 364.114315][T13060] validate_nla: 2 callbacks suppressed [ 364.114338][T13060] netlink: 'syz.1.1931': attribute type 39 has an invalid length. [ 364.330194][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 364.942660][T13084] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 365.107148][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 365.619969][T13106] netlink: 'syz.0.1944': attribute type 39 has an invalid length. [ 365.815889][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1945'. [ 365.859117][T13110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1945'. [ 367.604997][T13130] sctp: [Deprecated]: syz.2.1949 (pid 13130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.604997][T13130] Use struct sctp_sack_info instead [ 367.649612][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 368.605790][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1950'. [ 368.885096][T13137] syzkaller0: entered promiscuous mode [ 368.935699][T13137] syzkaller0: entered allmulticast mode [ 368.990994][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 369.100707][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 369.172946][T13154] netlink: 'syz.2.1955': attribute type 39 has an invalid length. [ 371.939061][T13174] openvswitch: netlink: Message has 8 unknown bytes. [ 371.992107][T13169] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 372.017431][T13174] netlink: 'syz.0.1961': attribute type 12 has an invalid length. [ 372.030079][T13169] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 372.338629][T13189] netlink: 'syz.0.1965': attribute type 39 has an invalid length. [ 372.516140][T13192] openvswitch: netlink: Message has 8 unknown bytes. [ 372.545975][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 372.579664][T13192] netlink: 'syz.3.1967': attribute type 12 has an invalid length. [ 372.734680][T13196] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 372.756596][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'. [ 372.785906][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 372.890248][T13198] netlink: 'syz.2.1969': attribute type 39 has an invalid length. [ 372.922123][T13200] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 372.935877][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'. [ 372.986988][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 373.332763][T13215] openvswitch: netlink: Message has 8 unknown bytes. [ 373.353715][T13215] netlink: 'syz.4.1975': attribute type 12 has an invalid length. [ 373.667194][T13223] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1977'. [ 373.991599][T13232] set match dimension is over the limit! [ 374.103139][T13232] pim6reg: entered allmulticast mode [ 374.155022][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 374.174228][T13232] pim6reg: left allmulticast mode [ 374.278293][T13238] netlink: 'syz.3.1982': attribute type 39 has an invalid length. [ 374.357758][T13240] openvswitch: netlink: Message has 8 unknown bytes. [ 374.393776][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 374.543037][T13240] netlink: 'syz.2.1983': attribute type 12 has an invalid length. [ 374.690921][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 374.985521][T13249] xt_TCPMSS: Only works on TCP SYN packets [ 375.214030][T13256] openvswitch: netlink: Message has 8 unknown bytes. [ 375.272544][T13256] netlink: 'syz.4.1987': attribute type 12 has an invalid length. [ 376.956773][T13265] veth0_vlan: left allmulticast mode [ 377.004448][T13265] vlan0: left promiscuous mode [ 377.057544][T13265] ip6tnl1: left allmulticast mode [ 377.084334][T13265] hsr_slave_1: left allmulticast mode [ 377.094653][T13265] vlan2: left promiscuous mode [ 377.124763][T13265] vlan2: left allmulticast mode [ 377.159537][T13265] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.185540][T13265] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.214737][T13265] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.234958][T13265] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.288713][T13265] bond0: left promiscuous mode [ 377.315916][T13265] bond0: left allmulticast mode [ 377.799517][T13296] netlink: 'syz.2.1994': attribute type 39 has an invalid length. [ 377.830391][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 378.268425][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1998'. [ 378.370066][T13309] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1999'. [ 379.377967][T13323] openvswitch: netlink: Message has 8 unknown bytes. [ 379.507285][T13323] netlink: 'syz.4.2001': attribute type 12 has an invalid length. [ 379.663986][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 379.942247][T13336] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2004'. [ 380.506415][T13342] xt_CT: No such helper "netbios-ns" [ 380.540099][T13350] openvswitch: netlink: Message has 8 unknown bytes. [ 380.695865][T13350] netlink: 'syz.4.2007': attribute type 12 has an invalid length. [ 380.864721][T13362] netlink: 'syz.0.2009': attribute type 39 has an invalid length. [ 380.891610][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 381.136260][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 381.414381][T13383] sch_tbf: burst 4398 is lower than device lo mtu (39798) ! [ 381.914780][T13402] netlink: 'syz.3.2021': attribute type 39 has an invalid length. [ 382.022680][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2020'. [ 382.388760][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 382.632685][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2028'. [ 382.653267][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 383.289643][T13432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2031'. [ 383.649231][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2031'. [ 384.760261][T13468] __nla_validate_parse: 2 callbacks suppressed [ 384.760284][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 386.045052][T13497] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 386.221939][T13488] delete_channel: no stack [ 386.630304][T13522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2053'. [ 386.840003][T13530] netlink: 'syz.1.2056': attribute type 32 has an invalid length. [ 387.165478][T13518] hsr_slave_0: left promiscuous mode [ 387.201768][T13518] hsr_slave_1: left promiscuous mode [ 387.250039][T13543] openvswitch: netlink: Key type 30 is not supported [ 388.110866][T13562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2063'. [ 388.757675][T13576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2069'. [ 388.770502][T13579] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 388.791562][T13579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2070'. [ 388.801680][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 388.819188][T13576] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2069'. [ 388.829990][T13579] nbd: nbd3 already in use [ 388.837854][T13576] netlink: 'syz.1.2069': attribute type 2 has an invalid length. [ 388.855631][T13576] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2069'. [ 389.055424][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 389.136320][T13589] openvswitch: netlink: Message has 8 unknown bytes. [ 389.174951][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 389.217200][T13589] netlink: 'syz.4.2072': attribute type 12 has an invalid length. [ 389.480678][T13594] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 389.663657][T13597] infiniband syz0: set down [ 389.769398][T13600] netlink: 'syz.4.2075': attribute type 12 has an invalid length. [ 390.772189][T13597] batadv_slave_1: left promiscuous mode [ 391.087814][T13597] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.105360][T13597] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.124206][T13597] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.137394][T13597] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.218023][T13597] bridge1: left promiscuous mode [ 391.279321][T13597] ip6tnl1: left allmulticast mode [ 391.387639][T13597] ip6erspan0: left promiscuous mode [ 391.455925][T13597] bond0: left promiscuous mode [ 391.460778][T13597] bond0: left allmulticast mode [ 391.520456][ T8411] lo speed is unknown, defaulting to 1000 [ 391.569556][ T8411] lo speed is unknown, defaulting to 1000 [ 391.841583][T13624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2081'. [ 391.868606][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 391.883428][T13624] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2081'. [ 391.925346][T13624] netlink: 'syz.2.2081': attribute type 2 has an invalid length. [ 391.955379][T13624] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2081'. [ 392.107823][T13634] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2083'. [ 392.383621][T13641] openvswitch: netlink: Message has 8 unknown bytes. [ 392.423232][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 392.461378][T13641] netlink: 'syz.4.2086': attribute type 12 has an invalid length. [ 392.990817][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2089'. [ 393.116246][T13652] Cannot find del_set index 286 as target [ 393.186592][T13658] openvswitch: netlink: Message has 8 unknown bytes. [ 393.217981][T13658] netlink: 'syz.3.2090': attribute type 12 has an invalid length. [ 393.616841][T13667] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2092'. [ 393.617492][T13668] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2093'. [ 393.966103][T13673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2094'. [ 393.985819][T13673] netlink: 'syz.2.2094': attribute type 2 has an invalid length. [ 394.054861][T13680] netlink: 'syz.1.2097': attribute type 21 has an invalid length. [ 394.588007][T13698] openvswitch: netlink: Message has 8 unknown bytes. [ 394.651756][T13698] netlink: 'syz.1.2102': attribute type 12 has an invalid length. [ 395.020631][T13715] netlink: 'syz.4.2109': attribute type 2 has an invalid length. [ 395.190505][T13722] netlink: 'syz.2.2121': attribute type 2 has an invalid length. [ 396.228526][T13757] openvswitch: netlink: Message has 8 unknown bytes. [ 396.282195][T13757] netlink: 'syz.0.2117': attribute type 12 has an invalid length. [ 397.248415][T13782] __nla_validate_parse: 19 callbacks suppressed [ 397.248439][T13782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2124'. [ 397.265439][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2124'. [ 397.284807][T13782] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2124'. [ 397.314361][T13782] netlink: 'syz.4.2124': attribute type 2 has an invalid length. [ 397.337651][T13782] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2124'. [ 398.013423][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 398.919454][T13802] openvswitch: netlink: Message has 8 unknown bytes. [ 398.975651][T13802] netlink: 'syz.0.2129': attribute type 12 has an invalid length. [ 399.291677][T13806] tipc: Enabling of bearer rejected, failed to enable media [ 399.399993][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'. [ 399.591988][T13818] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2132'. [ 400.236241][T13829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2135'. [ 400.288062][T13829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2135'. [ 400.321444][T13829] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2135'. [ 400.377438][T13829] netlink: 'syz.1.2135': attribute type 2 has an invalid length. [ 400.831830][T13847] openvswitch: netlink: Message has 8 unknown bytes. [ 400.882609][T13847] netlink: 'syz.1.2143': attribute type 12 has an invalid length. [ 401.565051][T13865] set match dimension is over the limit! [ 401.767153][T13868] pim6reg: entered allmulticast mode [ 402.514253][T13893] __nla_validate_parse: 3 callbacks suppressed [ 402.514275][T13893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2150'. [ 402.556567][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2150'. [ 402.579824][T13893] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2150'. [ 402.595270][T13893] netlink: 'syz.0.2150': attribute type 2 has an invalid length. [ 402.603224][T13893] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2150'. [ 402.713005][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2153'. [ 402.740847][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2153'. [ 402.898121][T13907] openvswitch: netlink: Message has 8 unknown bytes. [ 402.934697][T13905] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2154'. [ 402.962039][T13907] netlink: 'syz.3.2155': attribute type 12 has an invalid length. [ 403.214093][T13913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2157'. [ 403.252121][T13915] openvswitch: netlink: Message has 8 unknown bytes. [ 403.259600][T13913] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2157'. [ 403.302399][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 403.315652][T13915] netlink: 'syz.3.2158': attribute type 12 has an invalid length. [ 403.948970][T13928] Cannot find del_set index 286 as target [ 404.155036][T13932] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 404.448076][T13945] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 404.728335][T13950] openvswitch: netlink: Message has 8 unknown bytes. [ 404.792670][T13950] netlink: 'syz.3.2168': attribute type 12 has an invalid length. [ 406.645330][T13968] netlink: 'syz.3.2174': attribute type 4 has an invalid length. [ 406.724744][T13968] netlink: 'syz.3.2174': attribute type 1 has an invalid length. [ 407.979924][T13974] lo speed is unknown, defaulting to 1000 [ 408.778695][T13983] openvswitch: netlink: Message has 8 unknown bytes. [ 408.796103][T13985] __nla_validate_parse: 12 callbacks suppressed [ 408.796126][T13985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2180'. [ 408.811604][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2180'. [ 408.820973][T13985] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2180'. [ 408.830207][T13985] netlink: 'syz.0.2180': attribute type 2 has an invalid length. [ 408.838103][T13985] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2180'. [ 408.920092][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 408.929519][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 410.535913][T13983] netlink: 'syz.4.2179': attribute type 12 has an invalid length. [ 410.573269][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 411.550729][T14017] netlink: zone id is out of range [ 411.574955][T14017] netlink: zone id is out of range [ 411.590596][T14017] netlink: del zone limit has 8 unknown bytes [ 411.642821][T14024] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 411.925656][T14037] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2194'. [ 411.992355][T14033] bond0: (slave gretap1): Releasing backup interface [ 412.018981][T14033] gretap1: left promiscuous mode [ 412.105486][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 412.115933][T14044] openvswitch: netlink: Message has 8 unknown bytes. [ 412.160139][T14044] netlink: 'syz.0.2195': attribute type 12 has an invalid length. [ 412.603615][T14056] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2199'. [ 412.886134][T14055] ip6tnl1: left allmulticast mode [ 412.897632][T14055] macvtap1: left promiscuous mode [ 412.908438][T14055] macvtap1: left allmulticast mode [ 412.919913][T14055] bridge3: left promiscuous mode [ 412.930712][T14055] bridge3: left allmulticast mode [ 412.941176][T14055] bond0: left promiscuous mode [ 413.113430][T14065] Cannot find add_set index 3 as target [ 414.495293][T14082] __nla_validate_parse: 1 callbacks suppressed [ 414.495317][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 414.555938][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 414.638478][T14082] bond0: entered promiscuous mode [ 414.643612][T14082] bond0: entered allmulticast mode [ 414.706176][T14082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.765573][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 414.947701][T14081] lo speed is unknown, defaulting to 1000 [ 415.047645][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'. [ 415.873201][T14083] lo speed is unknown, defaulting to 1000 [ 415.883388][T14104] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 415.935668][T14083] lo speed is unknown, defaulting to 1000 [ 416.033101][T14083] lo speed is unknown, defaulting to 1000 [ 416.109741][T14083] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 416.198362][T14083] lo speed is unknown, defaulting to 1000 [ 416.248764][T14083] lo speed is unknown, defaulting to 1000 [ 416.288419][T14083] lo speed is unknown, defaulting to 1000 [ 416.318093][T14112] netlink: 'syz.1.2211': attribute type 21 has an invalid length. [ 416.355360][T14112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2211'. [ 416.385352][T14083] lo speed is unknown, defaulting to 1000 [ 416.392327][T14083] lo speed is unknown, defaulting to 1000 [ 416.428776][T14083] lo speed is unknown, defaulting to 1000 [ 416.470814][T14083] lo speed is unknown, defaulting to 1000 [ 417.299882][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 417.372141][T14129] netlink: 'syz.3.2215': attribute type 12 has an invalid length. [ 417.996350][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 418.021918][T14136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2217'. [ 418.032953][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'. [ 418.067786][T14136] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2217'. [ 418.085279][T14136] netlink: 'syz.1.2217': attribute type 2 has an invalid length. [ 418.526625][T14143] netlink: 'syz.1.2220': attribute type 12 has an invalid length. [ 419.003333][T14151] netlink: 'syz.0.2223': attribute type 1 has an invalid length. [ 419.321922][T14160] netlink: 'syz.3.2225': attribute type 8 has an invalid length. [ 419.411961][T14162] ipt_rpfilter: unknown options [ 419.832230][T14170] __nla_validate_parse: 6 callbacks suppressed [ 419.832252][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 419.921340][T14173] netlink: 'syz.4.2228': attribute type 12 has an invalid length. [ 420.285881][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 420.319271][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 420.332877][T14180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2230'. [ 420.350481][T14178] netlink: 'syz.2.2233': attribute type 12 has an invalid length. [ 420.363301][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'. [ 420.376207][T14180] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2230'. [ 420.416992][T14180] netlink: 'syz.0.2230': attribute type 2 has an invalid length. [ 420.455574][T14180] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2230'. [ 420.867830][T14201] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 420.885258][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2236'. [ 420.942501][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 420.983993][T14197] lo speed is unknown, defaulting to 1000 [ 421.019679][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'. [ 421.154815][T14215] pim6reg: entered allmulticast mode [ 421.222029][T14215] pim6reg: left allmulticast mode [ 421.793698][T14197] lo speed is unknown, defaulting to 1000 [ 421.803389][T14205] smc: removing ib device s [ 422.181147][T14234] netlink: 'syz.2.2242': attribute type 12 has an invalid length. [ 423.340062][T14244] netlink: 'syz.2.2244': attribute type 2 has an invalid length. [ 425.337457][T14254] __nla_validate_parse: 7 callbacks suppressed [ 425.337481][T14254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2247'. [ 426.216582][T14272] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2251'. [ 426.487736][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 426.526447][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2253'. [ 426.822004][T14288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2255'. [ 426.842803][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2255'. [ 426.864492][T14288] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2255'. [ 426.876488][T14289] xt_l2tp: unknown flags: 10 [ 426.905929][T14288] netlink: 'syz.4.2255': attribute type 2 has an invalid length. [ 426.914063][T14288] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2255'. [ 427.096074][T14297] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2259'. [ 427.132809][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 427.155896][T14297] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 428.737289][T14335] lo speed is unknown, defaulting to 1000 [ 429.198832][ T5848] Bluetooth: hci0: command tx timeout [ 429.216093][T14343] netlink: 'syz.0.2268': attribute type 3 has an invalid length. [ 429.291629][T14343] bridge0: port 1(vlan0) entered blocking state [ 429.336857][T14343] bridge0: port 1(vlan0) entered disabled state [ 429.462254][T14343] vlan0: entered allmulticast mode [ 429.483285][T14343] vlan0: left allmulticast mode [ 429.560111][T14350] netlink: 'syz.2.2269': attribute type 2 has an invalid length. [ 429.941114][T14357] block nbd0: NBD_DISCONNECT [ 429.972239][T14357] block nbd0: Send disconnect failed -32 [ 430.074869][T14335] lo speed is unknown, defaulting to 1000 [ 430.357350][T14353] lo speed is unknown, defaulting to 1000 [ 430.376202][T14330] __nla_validate_parse: 15 callbacks suppressed [ 430.376225][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 431.266750][T14353] lo speed is unknown, defaulting to 1000 [ 431.952752][T14376] pim6reg: entered allmulticast mode [ 431.968720][T14384] pim6reg: left allmulticast mode [ 432.153878][T14393] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2278'. [ 432.266277][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 432.409690][T14398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2280'. [ 432.429242][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2280'. [ 432.452341][T14398] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2280'. [ 432.478777][T14398] netlink: 'syz.3.2280': attribute type 2 has an invalid length. [ 432.488893][T14398] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2280'. [ 432.635904][T14403] netlink: 'syz.4.2282': attribute type 4 has an invalid length. [ 432.677710][T14401] netlink: 'syz.4.2282': attribute type 4 has an invalid length. [ 432.687494][T14406] siw: device registration error -23 [ 432.768101][T14409] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2283'. [ 433.077578][T14412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2284'. [ 433.127648][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 433.158135][T14412] netlink: 'syz.4.2284': attribute type 2 has an invalid length. [ 433.441711][T14421] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 433.506059][ T5848] block nbd0: Receive control failed (result -107) [ 434.276932][ T3508] bond3: (slave ip6gretap1): link status up again after 0 ms [ 434.293655][ T3508] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.428150][ T3508] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.545967][T13824] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.665642][T13824] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.776461][ T3508] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 434.923917][T13824] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.066280][ T2863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.177105][ T2863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 435.296461][ T3508] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 436.280320][T14479] __nla_validate_parse: 10 callbacks suppressed [ 436.280345][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 436.337014][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 436.725642][T14482] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2304'. [ 437.066121][T14497] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2307'. [ 438.340685][T14511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2310'. [ 438.371775][T14514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2311'. [ 438.418362][T14514] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2311'. [ 439.007184][T14523] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 439.052878][T14523] netlink: 'syz.0.2313': attribute type 10 has an invalid length. [ 439.193568][T14525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.303922][T14530] tipc: Started in network mode [ 439.319207][T14530] tipc: Node identity 002e0000000000000000000000000001, cluster identity 4711 [ 439.348584][T14530] tipc: Enabling of bearer rejected, failed to enable media [ 439.456769][T13882] net_ratelimit: 29 callbacks suppressed [ 439.456795][T13882] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.586612][ T2863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 439.777919][ T3508] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.059228][T14545] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 440.475702][T13882] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.587235][ T2863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.738643][ T2863] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 440.768885][T14564] netlink: 'syz.4.2321': attribute type 39 has an invalid length. [ 440.886204][T13882] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.005273][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.118049][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.261278][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 441.652463][T14577] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2326'. [ 441.681962][T14577] netlink: 'syz.1.2326': attribute type 2 has an invalid length. [ 441.767760][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'. [ 441.780267][T14585] sctp: [Deprecated]: syz.1.2326 (pid 14585) Use of int in max_burst socket option deprecated. [ 441.780267][T14585] Use struct sctp_assoc_value instead [ 441.879328][T14590] xt_TCPMSS: Only works on TCP SYN packets [ 441.893363][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 441.946909][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 442.013562][T14595] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 442.256876][T14608] netlink: 'syz.0.2333': attribute type 39 has an invalid length. [ 442.278029][T14600] x_tables: duplicate underflow at hook 1 [ 442.463315][T14612] netlink: 'syz.4.2335': attribute type 1 has an invalid length. [ 442.496799][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2335'. [ 442.518213][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 442.590528][T14615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2336'. [ 442.776315][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'. [ 442.806068][T14629] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 443.172246][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2342'. [ 443.221190][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2343'. [ 444.895862][ T963] net_ratelimit: 22 callbacks suppressed [ 444.895884][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 444.960312][T14672] lo speed is unknown, defaulting to 1000 [ 445.065524][ T75] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 445.296918][ T4543] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 445.405815][ T4543] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 445.556520][ T4543] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 445.706906][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 445.742545][T14672] lo speed is unknown, defaulting to 1000 [ 445.806146][T14696] netlink: 'syz.1.2352': attribute type 39 has an invalid length. [ 445.916975][ T4543] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.025533][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.166934][T13824] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.375821][T13824] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.732005][T14705] __nla_validate_parse: 6 callbacks suppressed [ 446.732029][T14705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2355'. [ 446.937699][T14712] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 449.047324][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2363'. [ 449.112858][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 449.167251][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 449.224141][T14749] ax25_connect(): syz.2.2362 uses autobind, please contact jreuter@yaina.de [ 449.237199][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 449.486664][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 449.612550][T14758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 449.727005][T14753] netlink: 'syz.3.2366': attribute type 10 has an invalid length. [ 449.748668][T14767] SET target dimension over the limit! [ 449.758675][T14753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2366'. [ 449.790579][T14767] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.815522][T14767] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.834120][T14767] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.857643][T14767] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.905647][ T3508] net_ratelimit: 20 callbacks suppressed [ 449.905671][ T3508] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.045248][ T4543] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.240715][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2372'. [ 450.276889][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.385680][ T75] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.512572][T13882] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.579162][T14798] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2374'. [ 450.660341][T13882] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.809214][T13882] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 450.827935][T14804] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 450.869533][T14804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.946765][ T4543] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 451.005504][T14810] bond1: (slave ip6gretap1): making interface the new active one [ 451.070822][T14810] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 451.145735][T13824] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 451.256635][ T963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 451.389198][T14818] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 451.864819][T14833] __nla_validate_parse: 1 callbacks suppressed [ 451.864841][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 451.908643][T14834] batadv_slave_1: left promiscuous mode [ 452.124261][T14834] gtp1: left promiscuous mode [ 452.284622][T14834] bond4: left promiscuous mode [ 452.309328][T14834] bond4: left allmulticast mode [ 452.364650][T14834] ipip0: left promiscuous mode [ 452.434453][T14834] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.513809][T14834] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.525431][T14834] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.536616][T14834] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.803500][T14846] SET target dimension over the limit! [ 452.864391][T14846] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.883364][T14846] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.909133][T14846] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.929605][T14846] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.164556][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'. [ 453.226458][T14848] netlink: 'syz.3.2383': attribute type 12 has an invalid length. [ 453.906429][T14856] ip6gretap0: entered promiscuous mode [ 453.958899][T14856] batadv_slave_0: entered promiscuous mode [ 454.000060][T14856] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 454.025663][T14856] Cannot create hsr debugfs directory [ 454.181874][T14867] veth18: entered allmulticast mode [ 455.918871][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2390'. [ 457.029449][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 457.124371][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2397'. [ 457.248602][T14908] netlink: 'syz.3.2397': attribute type 1 has an invalid length. [ 457.896584][T14919] ax25_connect(): syz.4.2400 uses autobind, please contact jreuter@yaina.de [ 457.988346][T14919] lo speed is unknown, defaulting to 1000 [ 459.241006][T14936] veth0_to_bridge: entered promiscuous mode [ 459.581656][T14919] lo speed is unknown, defaulting to 1000 [ 459.742438][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2403'. [ 459.930351][T14945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2404'. [ 460.062153][T14935] veth0_to_bridge: left promiscuous mode [ 460.220495][T14948] netlink: 'syz.3.2405': attribute type 12 has an invalid length. [ 461.435557][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 461.752291][T14954] delete_channel: no stack [ 461.872968][T14893] net_ratelimit: 6 callbacks suppressed [ 461.872991][T14893] Set syz1 is full, maxelem 65536 reached [ 462.161711][T14970] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2410'. [ 462.236102][T14970] openvswitch: netlink: Message has 8 unknown bytes. [ 462.456295][T14977] netlink: 'syz.3.2410': attribute type 12 has an invalid length. [ 462.716309][T14981] set match dimension is over the limit! [ 462.859087][T14984] pim6reg: left allmulticast mode [ 462.984612][T14987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2414'. [ 463.010393][T14987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2414'. [ 463.174731][T14990] ip6gretap0: entered promiscuous mode [ 463.192210][T14990] batadv_slave_0: entered promiscuous mode [ 463.200460][T14990] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 463.208661][T14990] Cannot create hsr debugfs directory [ 463.218290][T14992] pimreg: entered allmulticast mode [ 463.240040][T14996] pimreg: left allmulticast mode [ 463.431391][T15003] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2420'. [ 463.481558][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'. [ 463.535662][T15003] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2420'. [ 463.562960][T15003] netlink: 'syz.0.2420': attribute type 2 has an invalid length. [ 463.575566][T15003] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2420'. [ 464.468781][T15037] openvswitch: netlink: Message has 8 unknown bytes. [ 464.508144][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 464.548570][T15037] netlink: 'syz.4.2429': attribute type 12 has an invalid length. [ 464.880271][T15005] Set syz1 is full, maxelem 65536 reached [ 464.888823][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2430'. [ 465.288025][T15047] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2432'. [ 465.316524][T15047] netlink: 'syz.3.2432': attribute type 2 has an invalid length. [ 466.463566][T15080] pim6reg: entered allmulticast mode [ 466.484894][T15080] pim6reg: left allmulticast mode [ 466.553202][T15086] netlink: 'syz.2.2444': attribute type 6 has an invalid length. [ 466.697882][T15087] ip6gretap0: entered promiscuous mode [ 466.736046][T15087] batadv_slave_0: entered promiscuous mode [ 466.963262][T15087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.020356][T15087] Cannot create hsr debugfs directory [ 467.112213][T15096] netlink: 'syz.2.2445': attribute type 12 has an invalid length. [ 467.319050][T15099] bridge2: entered promiscuous mode [ 467.346733][T15099] bridge2: entered allmulticast mode [ 467.935794][T15128] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 467.983789][T15130] __nla_validate_parse: 3 callbacks suppressed [ 467.983819][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 468.383309][T15139] openvswitch: netlink: Message has 8 unknown bytes. [ 468.474148][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 468.510957][T15139] netlink: 'syz.2.2459': attribute type 12 has an invalid length. [ 468.541545][T15143] netlink: 'syz.1.2461': attribute type 21 has an invalid length. [ 468.551186][T15143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2461'. [ 468.909823][T15156] netlink: 'syz.4.2467': attribute type 1 has an invalid length. [ 468.936136][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2467'. [ 469.194936][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 469.567124][T15171] netlink: zone id is out of range [ 469.607642][T15171] netlink: zone id is out of range [ 469.627957][T15171] netlink: del zone limit has 8 unknown bytes [ 469.876945][T15179] ip6gretap0: entered promiscuous mode [ 469.913772][T15179] batadv_slave_0: entered promiscuous mode [ 469.969960][T15179] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 470.024135][T15187] netlink: 'syz.2.2475': attribute type 8 has an invalid length. [ 470.046989][T15179] Cannot create hsr debugfs directory [ 470.931229][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 471.032325][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'. [ 471.172105][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 471.205307][T15218] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 471.222734][T15218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2488'. [ 471.241133][T15218] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 471.595029][T15235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.006345][T15246] netlink: 'syz.4.2499': attribute type 12 has an invalid length. [ 472.178893][T15250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2502'. [ 473.080530][T15278] openvswitch: netlink: Message has 8 unknown bytes. [ 473.102560][T15278] __nla_validate_parse: 7 callbacks suppressed [ 473.102581][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 473.149632][T15278] netlink: 'syz.2.2513': attribute type 12 has an invalid length. [ 473.208601][T15283] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 473.498061][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2517'. [ 473.578679][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2518'. [ 473.587906][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2518'. [ 473.763928][T15296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2519'. [ 473.784122][T15296] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2519'. [ 473.850270][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2521'. [ 473.994888][T15302] delete_channel: no stack [ 474.147112][T15288] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 474.411600][T15310] openvswitch: netlink: Message has 8 unknown bytes. [ 474.480711][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'. [ 474.518177][T15310] netlink: 'syz.1.2527': attribute type 12 has an invalid length. [ 474.694400][T15315] lo speed is unknown, defaulting to 1000 [ 474.721438][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2528'. [ 475.140196][T15328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2532'. [ 475.311386][T15313] lo speed is unknown, defaulting to 1000 [ 475.612091][T15315] lo speed is unknown, defaulting to 1000 [ 476.260255][T15337] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 476.266958][T15366] netlink: 'syz.1.2548': attribute type 1 has an invalid length. [ 476.313941][T15313] lo speed is unknown, defaulting to 1000 [ 476.909474][T15391] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 477.420596][T15406] netlink: 'syz.0.2563': attribute type 1 has an invalid length. [ 478.059377][T15399] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 478.738445][T15433] openvswitch: netlink: Message has 8 unknown bytes. [ 478.809840][T15433] __nla_validate_parse: 11 callbacks suppressed [ 478.809864][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'. [ 478.837353][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 478.871462][T15433] netlink: 'syz.4.2575': attribute type 12 has an invalid length. [ 479.431189][T15459] netlink: zone id is out of range [ 479.436824][T15459] netlink: zone id is out of range [ 479.442056][T15459] netlink: del zone limit has 8 unknown bytes [ 479.549147][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 479.748510][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'. [ 480.051341][T15448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 480.354094][T15504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2605'. [ 480.364156][T15504] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2605'. [ 480.598111][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'. [ 480.607615][T15515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2608'. [ 481.260011][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 481.495780][T15547] xt_SECMARK: invalid mode: 0 [ 481.590377][T15549] sock: sock_timestamping_bind_phc: sock not bind to device [ 481.776532][T15524] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 482.022548][T15556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2623'. [ 482.109671][T15559] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 482.526397][T15568] netlink: 'syz.2.2629': attribute type 2 has an invalid length. [ 482.782596][T15578] netlink: 'syz.2.2632': attribute type 2 has an invalid length. [ 483.632993][T15581] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 484.381499][T15624] __nla_validate_parse: 12 callbacks suppressed [ 484.381525][T15624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2650'. [ 484.407048][T15624] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2650'. [ 485.446607][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 485.475374][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2661'. [ 485.480031][T15653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2662'. [ 485.499831][T15653] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2662'. [ 485.519579][T15655] delete_channel: no stack [ 485.618448][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2664'. [ 485.654775][T15633] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 485.912533][T15675] netlink: 'syz.2.2672': attribute type 6 has an invalid length. [ 485.990586][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2673'. [ 486.041687][T15678] delete_channel: no stack [ 486.054106][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 486.074084][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2676'. [ 486.499978][T15708] openvswitch: netlink: Message has 8 unknown bytes. [ 486.522218][T15708] netlink: 'syz.2.2686': attribute type 12 has an invalid length. [ 486.750433][T15714] delete_channel: no stack [ 486.964145][T15729] netlink: 'syz.3.2694': attribute type 2 has an invalid length. [ 486.972731][T15689] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 487.109862][T15737] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 487.429282][T15754] delete_channel: no stack [ 487.566230][T15768] netlink: 'syz.4.2710': attribute type 2 has an invalid length. [ 488.264402][T15790] delete_channel: no stack [ 488.293530][T15761] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 488.804021][T15829] tipc: Enabling of bearer rejected, failed to enable media [ 489.070079][T15837] netlink: zone id is out of range [ 489.109725][T15837] netlink: zone id is out of range [ 489.114906][T15837] netlink: del zone limit has 8 unknown bytes [ 489.403163][T15863] __nla_validate_parse: 18 callbacks suppressed [ 489.403188][T15863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2749'. [ 489.740908][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 489.783635][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 489.803015][T15883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2758'. [ 489.817161][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2758'. [ 489.838420][T15883] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2758'. [ 489.850367][T15883] netlink: 'syz.3.2758': attribute type 2 has an invalid length. [ 489.899386][T15883] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2758'. [ 490.012193][T15896] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2764'. [ 490.038539][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2765'. [ 490.246949][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2770'. [ 490.494960][T15922] netlink: 'syz.0.2775': attribute type 2 has an invalid length. [ 490.807215][T15941] [ 490.810121][T15941] ============================= [ 490.815001][T15941] WARNING: suspicious RCU usage [ 490.820507][T15941] 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 Not tainted [ 490.827974][T15941] ----------------------------- [ 490.832852][T15941] net/ethtool/common.c:873 suspicious rcu_dereference_protected() usage! [ 490.841570][T15941] [ 490.841570][T15941] other info that might help us debug this: [ 490.841570][T15941] [ 490.852221][T15941] [ 490.852221][T15941] rcu_scheduler_active = 2, debug_locks = 1 [ 490.860918][T15941] 1 lock held by syz.1.2781/15941: [ 490.866499][T15941] #0: ffff888072206258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: sk_setsockopt+0xf0f/0x33b0 [ 490.876731][T15941] [ 490.876731][T15941] stack backtrace: [ 490.882672][T15941] CPU: 1 UID: 0 PID: 15941 Comm: syz.1.2781 Not tainted 6.13.0-rc2-syzkaller-00424-gbc6a5efe3dcd #0 [ 490.893483][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 490.903580][T15941] Call Trace: [ 490.906899][T15941] [ 490.909865][T15941] dump_stack_lvl+0x241/0x360 [ 490.914585][T15941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.919806][T15941] ? __pfx__printk+0x10/0x10 [ 490.924424][T15941] lockdep_rcu_suspicious+0x226/0x340 [ 490.929810][T15941] __ethtool_get_ts_info+0x97/0x410 [ 490.935041][T15941] ethtool_get_phc_vclocks+0xa1/0x160 [ 490.940422][T15941] ? __pfx_ethtool_get_phc_vclocks+0x10/0x10 [ 490.946425][T15941] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 490.952436][T15941] ? dev_get_by_index+0x23/0x2d0 [ 490.957399][T15941] sock_set_timestamping+0x3e2/0xab0 [ 490.962700][T15941] ? __pfx_sock_set_timestamping+0x10/0x10 [ 490.968545][T15941] sk_setsockopt+0x2150/0x33b0 [ 490.973325][T15941] ? __pfx_sk_setsockopt+0x10/0x10 [ 490.978447][T15941] ? aa_sk_perm+0x96d/0xab0 [ 490.982975][T15941] ? __pfx_aa_sk_perm+0x10/0x10 [ 490.987841][T15941] ? __pfx_lock_acquire+0x10/0x10 [ 490.992883][T15941] ? aa_sock_opt_perm+0x79/0x120 [ 490.997839][T15941] do_sock_setsockopt+0x2fb/0x720 [ 491.002876][T15941] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 491.008435][T15941] ? __fget_files+0x395/0x410 [ 491.013125][T15941] ? __fget_files+0x2a/0x410 [ 491.017731][T15941] __x64_sys_setsockopt+0x1ee/0x280 [ 491.022960][T15941] do_syscall_64+0xf3/0x230 [ 491.027473][T15941] ? clear_bhb_loop+0x35/0x90 [ 491.032161][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.038076][T15941] RIP: 0033:0x7fd5ed585d19 [ 491.042498][T15941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.062113][T15941] RSP: 002b:00007fd5ee475038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 491.070568][T15941] RAX: ffffffffffffffda RBX: 00007fd5ed775fa0 RCX: 00007fd5ed585d19 [ 491.078637][T15941] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 491.086622][T15941] RBP: 00007fd5ed601a20 R08: 0000000000000004 R09: 0000000000000000 [ 491.094605][T15941] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 491.102607][T15941] R13: 0000000000000000 R14: 00007fd5ed775fa0 R15: 00007fff9a8c1c68 [ 491.110621][T15941]