last executing test programs: 24.706933725s ago: executing program 4 (id=5382): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x1409, 0x1, 0x70bd26, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffd}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}}, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x62, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) read$rfkill(r3, &(0x7f0000000100), 0x8) 24.421303679s ago: executing program 4 (id=5384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24041090}, 0x20000000) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 24.232918771s ago: executing program 0 (id=5386): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120}, 0x38, 0x2100) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) 23.848992485s ago: executing program 4 (id=5389): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f0000000100)) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000080)={0x80fb, 0x2}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009200200000008000c00a4e5e81906000e00070000000100070000000000"], 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet(0x2, 0x3, 0x8) (async) getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f0000000100)) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0) (async) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000080)={0x80fb, 0x2}) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009200200000008000c00a4e5e81906000e00070000000100070000000000"], 0x34}}, 0x20) (async) 23.830840885s ago: executing program 0 (id=5390): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) recvmsg(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r2, 0x93, "84893850557d6fa85db58e0862721b1d39a4d2453f1f5e65d12b357944ff10ddb77b4bf0a7ff4c1a14607800ccc2431efaa987d661a4f541a211d2c41b82a5ea940520e2a97b39721ffcb296f2669e0bbf94a401ff96b59f47523f677ce9b7a1465b6a2157c9bbbaef1f39f0473fe9bd95f17e33da4403b621a9eec618765412630d0f2a3b45420c19d5352b0980b0d84ab978"}, &(0x7f0000000300)=0x9b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xffffffffffffff91, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2a, &(0x7f00000000c0)=0x7a, 0x30) r4 = socket$inet(0xa, 0x801, 0x84) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x190, 0xa, 0xa, 0x5, 0x0, 0x0, {0xe, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_USERDATA={0x95, 0xd, 0x1, 0x0, "c9fee73f71705489baea996f7b1e0e2ab7b9b2c51ce2462b886998673d4257f1cc675cde77ad587c3e00d1427e3499cb4d3266dc902d1a3ebe27d5d6d4f553dde69e242743d0825fdb14a7417915870f4a3aa82f5bb600d02300e916eb605d70c1f40740d0ce6d12b84607dadeb50524c662893ca54e789a8d3f396ef3c7aa35ca7a3f1b1862d3c4271bf57a867f7b2f09"}, @NFTA_SET_USERDATA={0xbd, 0xd, 0x1, 0x0, "3bdfadc76aa95fb825c1cc7b213cd63a153be5c0ddf6bc1305b94df31388ae9e5dd4ce6419ee495e0f161771b0947e84166a574464f787391e33a3b7cf70fb795e4e1a8b281d2337c1f4210a8f4bc364494507459f2db9b274feb1d4ea4819da815911ce2690c9cec872dd81b4a199fb2b05c20b4f4cecefde359d0f47c1ed9eda0d20af899cca7dc8c8c3be28f921dc3070ef7fa086e4789e63eb23706cd10a6a7ba7ae2c04c91997aecb87611916c84cb477629d28f5f3f4"}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1f200}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x56}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) (async) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0xe}, &(0x7f0000000200)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23.645430143s ago: executing program 1 (id=5391): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000000)=""/12, 0xc, 0x12000, 0x0, 0x0) 23.570969911s ago: executing program 0 (id=5392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 23.54385351s ago: executing program 4 (id=5393): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 23.429931511s ago: executing program 1 (id=5396): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) sendmmsg(r2, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0xe, 0x5}, {0x2}}}, 0x12}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) (async) sendmmsg(r2, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0xe, 0x5}, {0x2}}}, 0x12}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 23.273306138s ago: executing program 0 (id=5397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 23.155279783s ago: executing program 4 (id=5398): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4) epoll_create1(0x0) (async) r1 = epoll_create1(0x0) socketpair(0x18, 0x5, 0x3, &(0x7f0000000000)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 22.721394161s ago: executing program 0 (id=5400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff000015980d250000bfa100000000dd0007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22.669588875s ago: executing program 4 (id=5401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4e6}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(r0) socket$inet6(0xa, 0x6, 0x2) socket$igmp(0x2, 0x3, 0x2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r9}, 0x8) r10 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000800)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x11d5392c}, {&(0x7f0000000640)=""/23}], 0x2, 0x0, 0x4c}, 0x0) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="05000000000800bf7ef9f30c4ce297bf27ca", @ANYRES32=r13, @ANYBLOB="0500530001000000"], 0x24}}, 0x0) 22.574135967s ago: executing program 1 (id=5402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c0014008f988e090bc0ea3f"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xb}, {0x9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0xf8, r9}, 0x14) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x2, 0x4) 22.445511637s ago: executing program 3 (id=5403): r0 = socket(0x840000000002, 0x3, 0xff) syz_emit_ethernet(0xc6, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x90, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0xf, "36dad83aea8df15d20889b6a4b488367e6c6cba5844d6d576950aae4e0af85d7922746edc7abaa7b25516c034d4b8474b922a5df0be178ccb65ae4eaabef5f63a5df9cc8e9b0c9fef787cb50058e6375665a79abec0a2808518db033c86bb7e1be26e4ef08f20bfb122d51786403c40883d6626b35a9"}]}}}}}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x18}}], 0x2, 0x20004086) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x2c, 0x5, 0x1b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x80, 0x8, 0x9, 0x1ff}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback, 0x6, 0x5, 0x1, 0x400, 0x5, 0x40800210, r1}) 22.417400884s ago: executing program 0 (id=5404): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r4, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20008001) (async) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1800", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000200)={'xfrm0\x00', 0x3}) 21.736815581s ago: executing program 3 (id=5407): r0 = socket(0x10, 0x80000, 0x2004) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000140)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x4, 0x6}, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}}, 0x0) getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000280), 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031", @ANYRESOCT, @ANYRESHEX=0x0], 0x0) 21.466900237s ago: executing program 3 (id=5408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) accept(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 21.407446152s ago: executing program 1 (id=5409): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae0b8abace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x14f5, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 21.268297352s ago: executing program 2 (id=5411): pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x61, 0xcb, &(0x7f0000000040)="000f93b007baa8d015fe153561105a222c90ce57797b38beaea342087ce1eb585d5a2b77edf485a6d4004633bfc505dd2d7397197da36f715a58ff3535ba55644ba85b5c761bc19cb9e2fca58816fa0a42d876ed48f5572aef91b3691068dff93b", &(0x7f00000000c0)=""/203, 0x1, 0x0, 0xa4, 0xed, &(0x7f00000001c0)="876363e38a063574280c6873f3eab97ee50bd4daec17919d4e97abd03733e3331bb8b1a9626aa8b3ae3b9025ab66151dc08acdfdd3df11dad15a4e388b85a629097509260dc04507c22113bbb330bf8d1c29d7e936c02994aa3f476de388d91db111ec89bcb83d21d2f0897fe3a2a0facc09ac48a5d4b52f98e80756fca2538dcec672d8a843c76b83c9a2ef5009c8123a0157f231856ecbc3f86e7d8dc6abf075ddc2e6", &(0x7f0000000280)="fc6f813f678b357b8b41711951667a3da3aa6d7d55159d5ded4d13a4434b105ea0c0d076eb9c5fc5a46f5e58b2d3218d8eb38a3baf0ba779d5afdd2225e3101b341a38513f001355b24d99b9d8f488fd103bb250f34bc18b71cbbe4cac5fcab808f4e7460ac771282a32a2f0908b1864fe10ff9283b97b59cc973a0c8b119955436176864ff286befe0a5b27597db94583ba15073fa89f273758fa3da89fad460f1b2968ff35d3328111f05c00c73cb2f1676926b0819ae86c001af32776470eea61f7c1f21b62a2107f2505587dcba2437e8fe1382b1645b96728b85eddb71a405dcff09cd5663b194819c4c8", 0x6, 0x0, 0x3}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) 21.260348626s ago: executing program 1 (id=5412): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x62, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x7ffffffe, 0x7, 'syz0\x00'}) 21.122064162s ago: executing program 2 (id=5413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0x20, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ife={0x64, 0x1001, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x3fffffe, 0x40}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xe15, 0x7, 0x4, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x7c}}, 0x0) 20.878490396s ago: executing program 1 (id=5414): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r3, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r6, 0x8b32, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r7, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "d9dc8b5f30657c4e84745efcd95dc0a4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK={0x14, 0xfe, "f759aade12e05baa7399ba75655044bb"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b810b3006b52"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x24040000) 20.877607201s ago: executing program 2 (id=5415): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x4015, 0x1, 0x0, 0xfffffffc, {0x10}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000090) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 20.876955422s ago: executing program 2 (id=5416): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) (async, rerun: 64) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) 20.846308106s ago: executing program 2 (id=5417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x9, 0xb, 0xfffffffffffffffe, 0x2b1, 0x202000000002e0], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000060000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x0, 0x60}, 0x28) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x4890, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x6a8, 0x0, 0x478, 0x478, 0x0, 0x388, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, [], [0xc5a2f505a334aa82, 0xffffffff], [], 0x20}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x3]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0xff, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x800, 0xdd2, 0x3fe, 0x0, 0xb, 0x3a5f2568, 0xcc, 0x2]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@remote, 0x3a, 0x37}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x2f, 0x9, 0x4, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@rateest={{0x68}, {'team_slave_1\x00', 'virt_wifi0\x00', 0x30, 0x3, 0x5, 0x1ff, 0x400, 0x2, {0xf666}, {0x4000000000000}}}]}, @HL={0x28, 'HL\x00', 0x0, {0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) 20.771883835s ago: executing program 2 (id=5418): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)=':(}/+.*:[*\x00', 0x80, &(0x7f0000000100)={@_ha_fsid={[0x8, 0xfffffffe]}, {0x8, 0x2f, 0x800, 0x86f0}}, 0x7f, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x48010) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000380)=0x5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 20.463261933s ago: executing program 3 (id=5419): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r7 = socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x324, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x485c3073, 0x2d}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x38, 0xac, "570f001efef3b8ec4fba261a08c53243a985daa37d4f35a792ebb381eb0b197c0ac4fba3a5cb7c66193a64f026a3a16e0141de11"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x63}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008005}, 0x4801) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg(r7, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[{0x120, 0x0, 0x0, "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"}, {0x10, 0x114, 0x2}], 0x130}, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 20.269396856s ago: executing program 3 (id=5420): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x3, 0x0, 0x1}, 0x6, 0x1}, 0x10}}, 0x408d1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "261f"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) 6.307821828s ago: executing program 3 (id=5421): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8220c}, 0xc, &(0x7f00000007c0)={&(0x7f0000000040)=@deltaction={0x168, 0x31, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe10a}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x40f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb22d}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x5, 0x2bb3, 0xe3, 0x94b, 0x7fff}, &(0x7f0000000c00)=0x14) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 32 (id=5404): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r4, 0x77a5768982e879e3, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20008001) (async) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1800", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000200)={'xfrm0\x00', 0x3}) kernel console output (not intermixed with test programs): 0 [ 401.781291][T18816] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3407'. [ 401.788042][T18663] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.844608][T18821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3408'. [ 401.894303][T18663] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.929002][T18663] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.063577][T18829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3411'. [ 402.434484][T18663] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.450788][T18663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.467098][T18663] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.502435][T18663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.527564][T18663] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.565008][T18663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.592447][T18663] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 402.725309][T18663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.817349][T18843] syzkaller1: entered promiscuous mode [ 402.841517][T18843] syzkaller1: entered allmulticast mode [ 402.856894][T18856] netlink: 'syz.3.3419': attribute type 1 has an invalid length. [ 402.895067][T18843] x_tables: duplicate underflow at hook 3 [ 402.958021][T18862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 403.106973][T18856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.138624][T18856] bond5: (slave bond6): making interface the new active one [ 403.168500][T18856] bond5: (slave bond6): Enslaving as an active interface with an up link [ 403.384278][T18663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.453555][T18663] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.473469][T14648] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.480743][T14648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.526460][T14648] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.533704][T14648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.762895][ T5646] Bluetooth: hci2: command tx timeout [ 403.775355][T18894] tap0: tun_chr_ioctl cmd 1074025672 [ 403.796979][T18894] tap0: ignored: set checksum disabled [ 403.937069][T18900] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 403.971791][T18900] syzkaller0: entered promiscuous mode [ 403.990706][T18900] syzkaller0: entered allmulticast mode [ 404.038123][T18900] tipc: Started in network mode [ 404.077859][T18900] tipc: Node identity eae7bd34a155, cluster identity 4711 [ 404.120236][T18900] tipc: Enabled bearer , priority 0 [ 404.194012][T18898] tipc: Resetting bearer [ 404.215261][T18915] tipc: Failed to remove unknown binding: 66,1,1/0:182074691/182074693 [ 404.248622][T18915] tipc: Failed to remove unknown binding: 66,1,1/0:182074691/182074693 [ 404.262734][T18915] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 404.276963][T18898] tipc: Disabling bearer [ 404.945165][T18663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.103269][T18663] veth0_vlan: entered promiscuous mode [ 405.106871][T18958] netlink: 'syz.0.3451': attribute type 1 has an invalid length. [ 405.134604][T18663] veth1_vlan: entered promiscuous mode [ 405.158476][T18960] __nla_validate_parse: 3 callbacks suppressed [ 405.158492][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3451'. [ 405.204361][T18958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.223331][T18960] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 405.236356][T18960] bond1: entered allmulticast mode [ 405.259538][T18958] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 405.287817][T18663] veth0_macvtap: entered promiscuous mode [ 405.302195][T18663] veth1_macvtap: entered promiscuous mode [ 405.343093][T18663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.370068][T18663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.387176][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.397141][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.410800][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.420464][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.585468][T14660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.612867][T14660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.677911][T14655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.699150][T14655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.772409][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 405.841762][ T5646] Bluetooth: hci2: command tx timeout [ 406.411244][T19012] x_tables: duplicate underflow at hook 2 [ 406.690133][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 406.699467][T19028] netlink: 'syz.2.3469': attribute type 1 has an invalid length. [ 406.707313][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 406.717906][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 406.732214][T19028] netlink: 'syz.2.3469': attribute type 1 has an invalid length. [ 406.740647][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 406.887961][T14649] wlan1: Trigger new scan to find an IBSS to join [ 406.970045][T19034] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 407.081933][T19040] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 408.165545][T19073] netlink: 'syz.2.3481': attribute type 10 has an invalid length. [ 408.190563][T19099] siw: device registration error -23 [ 408.196443][T19073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3481'. [ 408.208320][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'. [ 408.233135][T19073] dummy0: entered promiscuous mode [ 408.249827][T19073] bridge0: port 3(dummy0) entered blocking state [ 408.272191][T19073] bridge0: port 3(dummy0) entered disabled state [ 408.279268][T19073] dummy0: entered allmulticast mode [ 408.288227][T19073] bridge0: port 3(dummy0) entered blocking state [ 408.294777][T19073] bridge0: port 3(dummy0) entered forwarding state [ 408.400773][T19110] xt_bpf: check failed: parse error [ 409.252978][T19117] veth0: entered promiscuous mode [ 409.262312][T19117] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 409.276050][T19116] veth0: left promiscuous mode [ 410.599898][T19063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.835097][T19129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.842435][T19129] IPv6: NLM_F_CREATE should be set when creating new route [ 410.849768][T19129] IPv6: NLM_F_CREATE should be set when creating new route [ 410.924353][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 410.955893][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3496'. [ 411.109566][T19138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3499'. [ 411.122884][T19135] netlink: 'syz.1.3498': attribute type 1 has an invalid length. [ 411.142243][T19138] netlink: 'syz.4.3499': attribute type 7 has an invalid length. [ 411.146955][T19135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.167638][T19138] netlink: 'syz.4.3499': attribute type 8 has an invalid length. [ 411.184767][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 411.223807][T19138] erspan0: entered promiscuous mode [ 411.231465][T19138] gretap0: entered promiscuous mode [ 411.332248][T19145] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 411.384977][T19148] syzkaller0: entered promiscuous mode [ 411.413013][T19148] syzkaller0: entered allmulticast mode [ 411.453928][T19153] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 411.657951][T19164] smc: net device team0 applied user defined pnetid SYZ2 [ 411.726876][T19171] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3508'. [ 411.751477][T19171] veth0_to_bond: default FDB implementation only supports local addresses [ 411.863279][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 411.921842][T14649] wlan1: Trigger new scan to find an IBSS to join [ 412.189224][T19190] syzkaller0: entered promiscuous mode [ 412.204127][T19193] sctp: [Deprecated]: syz.0.3516 (pid 19193) Use of int in max_burst socket option. [ 412.204127][T19193] Use struct sctp_assoc_value instead [ 412.204531][T19190] syzkaller0: entered allmulticast mode [ 412.230173][T19193] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3516'. [ 412.285903][T19194] vlan2: entered allmulticast mode [ 412.300125][T19194] bond0: entered allmulticast mode [ 412.310244][T19194] bond_slave_0: entered allmulticast mode [ 412.330303][T19194] bond_slave_1: entered allmulticast mode [ 412.862197][T19218] netlink: 'syz.3.3523': attribute type 83 has an invalid length. [ 412.993385][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 413.020876][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3525'. [ 413.181766][T19229] syzkaller0: entered promiscuous mode [ 413.214595][T19229] syzkaller0: entered allmulticast mode [ 413.304767][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3521'. [ 413.444339][T19238] bond4: entered promiscuous mode [ 413.651038][T19252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.838081][T19259] macsec1: entered promiscuous mode [ 414.130630][T19274] netlink: 'syz.4.3538': attribute type 21 has an invalid length. [ 414.138911][T19274] netlink: 'syz.4.3538': attribute type 1 has an invalid length. [ 414.218912][T19243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.301895][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.586270][T19290] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 414.613352][T19292] xt_connbytes: Forcing CT accounting to be enabled [ 414.671917][T19290] team1: entered promiscuous mode [ 414.679988][T19290] team1: entered allmulticast mode [ 414.775307][T19292] xt_CT: No such helper "netbios-ns" [ 415.113613][T19327] Bluetooth: MGMT ver 1.23 [ 415.147060][T19326] netlink: 'syz.1.3554': attribute type 9 has an invalid length. [ 415.179854][T19326] netlink: 'syz.1.3554': attribute type 6 has an invalid length. [ 415.179874][T19327] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 415.240228][T19327] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 415.257700][T19327] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 415.346339][T19333] netlink: 'syz.4.3557': attribute type 1 has an invalid length. [ 415.427459][T19333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.473202][T19333] netlink: 'syz.4.3557': attribute type 10 has an invalid length. [ 415.878242][T19362] ipvlan2: entered allmulticast mode [ 415.884154][T19362] batadv_slave_1: entered allmulticast mode [ 415.894438][T19362] batman_adv: batadv0: Adding interface: ipvlan2 [ 415.903886][T19362] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.945484][T19362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.956323][T19362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.969143][T19362] batman_adv: batadv0: Interface activated: ipvlan2 [ 416.180803][T19376] ieee802154 phy0 wpan0: encryption failed: -90 [ 416.215746][T19381] __nla_validate_parse: 44 callbacks suppressed [ 416.215764][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3570'. [ 416.342469][T19384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.534478][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3577'. [ 416.607623][T19408] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3579'. [ 416.678014][T19413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3577'. [ 416.731157][T19417] netlink: 'syz.3.3580': attribute type 1 has an invalid length. [ 416.750160][T19417] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3580'. [ 416.839289][T19409] gtp0: entered promiscuous mode [ 416.844404][T19409] gtp0: entered allmulticast mode [ 417.142006][T19427] syzkaller0: entered promiscuous mode [ 417.147638][T19427] syzkaller0: entered allmulticast mode [ 417.263352][T19434] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 417.333078][T19437] openvswitch: netlink: Missing key (keys=40, expected=80) [ 419.222841][T19436] lo: Caught tx_queue_len zero misconfig [ 419.447995][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 419.492226][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'. [ 419.547131][T19455] xt_hashlimit: size too large, truncated to 1048576 [ 419.592122][T19465] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3593'. [ 419.620561][T19466] netlink: 'syz.2.3590': attribute type 10 has an invalid length. [ 419.717418][T19466] team0 (unregistering): Port device team_slave_0 removed [ 419.758010][T19466] team0 (unregistering): Port device team_slave_1 removed [ 420.019925][T19486] netlink: 'syz.4.3602': attribute type 1 has an invalid length. [ 420.184766][T19486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3602'. [ 420.249259][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 420.613776][T19524] netlink: 'syz.4.3609': attribute type 10 has an invalid length. [ 421.324653][T19556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.401184][T19557] __nla_validate_parse: 37 callbacks suppressed [ 421.401202][T19557] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3621'. [ 421.431189][T19557] veth0_to_bond: default FDB implementation only supports local addresses [ 421.446272][T19558] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3622'. [ 421.465664][T19537] IPv6: NLM_F_CREATE should be specified when creating new route [ 421.597749][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'. [ 421.663039][T19568] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3624'. [ 422.045715][T19583] netlink: 'syz.4.3630': attribute type 2 has an invalid length. [ 422.284437][T19590] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 422.985181][T19631] netlink: 'syz.2.3644': attribute type 1 has an invalid length. [ 423.191752][T19642] netlink: 'syz.1.3646': attribute type 1 has an invalid length. [ 423.250416][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3646'. [ 423.278052][T19642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.395478][T19654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3649'. [ 423.405192][T19654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3649'. [ 423.480398][T19658] nbd: illegal input index 2958377 [ 423.723006][T19677] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 423.769760][T19677] bond3: (slave lo): Enslaving as an active interface with an up link [ 423.795379][T19677] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 423.837092][T19683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 423.853183][T19683] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 423.861604][T19683] gretap1: entered promiscuous mode [ 423.867034][T19683] gretap1: entered allmulticast mode [ 423.952718][T19686] netlink: 'syz.4.3659': attribute type 5 has an invalid length. [ 423.957638][T19688] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3658'. [ 423.965342][T19686] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3659'. [ 424.393067][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3666'. [ 424.447126][T19708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 424.473825][T19708] macvlan3: entered promiscuous mode [ 424.495198][T19708] macvlan3: entered allmulticast mode [ 424.514063][T19708] bond6: (slave macvlan3): Opening slave failed [ 424.820402][T19728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.622790][T19670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.919921][T19735] can: request_module (can-proto-0) failed. [ 427.135281][T19743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.302729][T19743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.528426][T19743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.549335][T19766] netlink: 'syz.2.3683': attribute type 1 has an invalid length. [ 427.557301][T19766] __nla_validate_parse: 1 callbacks suppressed [ 427.557316][T19766] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3683'. [ 427.594891][T19766] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3683'. [ 427.617178][T19766] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3683'. [ 427.696074][T19743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.921664][T19780] netlink: 'syz.4.3686': attribute type 1 has an invalid length. [ 427.947349][T19781] netlink: 'syz.4.3686': attribute type 1 has an invalid length. [ 427.974976][T14660] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.996934][T19783] tipc: Enabled bearer , priority 10 [ 428.059972][T14660] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.267407][ T3363] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.317913][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3691'. [ 428.333408][T14653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.435721][T19797] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 428.659285][T19806] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 428.704372][T19806] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 428.829593][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3699'. [ 428.971175][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3701'. [ 429.109483][ T5751] tipc: Node number set to 1270005044 [ 429.147621][T19813] netlink: 'syz.1.3697': attribute type 16 has an invalid length. [ 429.155950][T19813] netlink: 'syz.1.3697': attribute type 17 has an invalid length. [ 429.176662][T19813] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 429.263563][T19818] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3697'. [ 429.353666][T19844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3704'. [ 429.419877][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'. [ 429.477669][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'. [ 429.499773][T19847] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 431.611585][T19809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.864344][T19854] x_tables: duplicate underflow at hook 1 [ 431.885914][T19860] nft_compat: unsupported protocol 0 [ 431.905003][T19856] veth0: entered promiscuous mode [ 432.122568][T19875] netlink: 'syz.3.3714': attribute type 1 has an invalid length. [ 432.327320][T19875] bond7: entered promiscuous mode [ 432.364773][T19875] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.763322][T19907] __nla_validate_parse: 3 callbacks suppressed [ 432.763342][T19907] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3719'. [ 432.864988][T19917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3722'. [ 432.908011][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'. [ 433.047745][T19930] netlink: 'syz.1.3724': attribute type 3 has an invalid length. [ 433.090603][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 433.112425][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 433.153082][T19934] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3726'. [ 433.193688][T19933] vlan2: entered allmulticast mode [ 433.207365][T19933] bond0: entered allmulticast mode [ 433.219826][T19933] bond_slave_0: entered allmulticast mode [ 433.233963][T19933] bond_slave_1: entered allmulticast mode [ 433.245752][T19940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.392664][T19934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.437817][T19934] bond_slave_0: left allmulticast mode [ 433.463033][T19934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.472983][T19934] bond_slave_1: left allmulticast mode [ 433.481520][T19934] bond0 (unregistering): Released all slaves [ 433.494037][T19952] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3729'. [ 433.794516][T19967] tipc: Invalid UDP bearer configuration [ 433.794572][T19967] tipc: Enabling of bearer rejected, failed to enable media [ 434.122457][T19981] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3737'. [ 434.217021][T19987] netlink: 'syz.4.3739': attribute type 4 has an invalid length. [ 434.239999][T19986] netlink: 'syz.4.3739': attribute type 4 has an invalid length. [ 434.250737][T19986] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3739'. [ 434.259813][T19987] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3739'. [ 436.008221][T20084] x_tables: duplicate underflow at hook 1 [ 436.387520][T20096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.586660][T20117] netlink: 'syz.2.3775': attribute type 11 has an invalid length. [ 437.189664][T20146] xt_hashlimit: size too large, truncated to 1048576 [ 437.553951][T20151] veth3: entered promiscuous mode [ 437.571095][T20151] veth3: entered allmulticast mode [ 438.120549][T20179] __nla_validate_parse: 13 callbacks suppressed [ 438.120569][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 438.161939][T20174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.194471][T20176] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3790'. [ 438.227411][T20178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.250908][T20178] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 438.281210][T20178] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 438.309453][T20178] bond1: (slave xfrm1): making interface the new active one [ 438.332236][T20178] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 438.989063][T20216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3801'. [ 439.302519][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3803'. [ 439.433436][T20231] netlink: 'syz.0.3804': attribute type 2 has an invalid length. [ 439.450371][T20231] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3804'. [ 439.463281][T20233] syzkaller0: entered promiscuous mode [ 439.473075][T20233] syzkaller0: entered allmulticast mode [ 439.532091][T20233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3806'. [ 439.556820][T20233] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.719858][T20242] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 440.009612][T20256] netlink: 'syz.2.3810': attribute type 25 has an invalid length. [ 440.038381][T20260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 440.047547][T20258] openvswitch: netlink: IP tunnel dst address not specified [ 440.082095][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.102468][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 440.109221][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 440.217532][T20261] macvlan3: entered allmulticast mode [ 440.227580][T20261] dummy0: entered allmulticast mode [ 440.266401][T20260] macvlan4: entered allmulticast mode [ 440.291962][T20256] vlan2: entered allmulticast mode [ 440.297240][T20256] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 440.307161][T20263] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3808'. [ 440.327135][T20265] veth1_to_hsr: mtu less than device minimum [ 440.503584][T20272] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 440.692442][T20277] netlink: 'syz.2.3818': attribute type 2 has an invalid length. [ 440.708850][T20277] netlink: 'syz.2.3818': attribute type 2 has an invalid length. [ 440.773389][T20277] sctp: [Deprecated]: syz.2.3818 (pid 20277) Use of int in maxseg socket option. [ 440.773389][T20277] Use struct sctp_assoc_value instead [ 441.295389][T20307] vlan2: entered promiscuous mode [ 441.321079][T20307] bridge0: entered promiscuous mode [ 441.650933][T20322] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 441.732523][T20324] team0: Caught tx_queue_len zero misconfig [ 442.295466][T20355] syzkaller0: entered promiscuous mode [ 442.320284][T20355] syzkaller0: entered allmulticast mode [ 442.498337][T20366] netlink: 'syz.0.3845': attribute type 12 has an invalid length. [ 443.381029][T20413] __nla_validate_parse: 10 callbacks suppressed [ 443.381048][T20413] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3859'. [ 443.442422][T20413] netlink: Conntrack attr has 3 unknown bytes [ 443.494862][T20423] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.494944][T20429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3862'. [ 443.950970][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3868'. [ 444.037440][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3868'. [ 444.057034][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3869'. [ 444.115539][T14655] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.132901][T14655] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.238618][T20455] 8021q: adding VLAN 0 to HW filter on device bond8 [ 444.267567][T14655] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.305000][T14655] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.562355][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3876'. [ 444.852820][T20491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3878'. [ 444.935977][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'. [ 445.280195][T20474] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 445.343494][T20515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.376008][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.404324][T20514] syzkaller0: entered promiscuous mode [ 445.420162][T20514] syzkaller0: entered allmulticast mode [ 445.499782][T20514] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 445.500609][ T5620] IPVS: starting estimator thread 0... [ 445.609153][T20526] IPVS: using max 24 ests per chain, 57600 per kthread [ 445.625578][T20532] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 445.793260][T20541] xt_TCPMSS: Only works on TCP SYN packets [ 445.973001][T20558] sctp: [Deprecated]: syz.2.3896 (pid 20558) Use of int in max_burst socket option. [ 445.973001][T20558] Use struct sctp_assoc_value instead [ 446.105728][T20561] --map-set only usable from mangle table [ 446.598574][T20587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3901'. [ 446.732639][T20593] netlink: 'syz.4.3905': attribute type 5 has an invalid length. [ 446.752914][T20583] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 446.926786][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 447.121810][T14655] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 447.126442][T20606] syzkaller0: entered promiscuous mode [ 447.150962][T20606] syzkaller0: entered allmulticast mode [ 447.701910][T20637] netlink: 'syz.0.3917': attribute type 2 has an invalid length. [ 447.961532][T20652] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 448.604351][T20693] x_tables: duplicate underflow at hook 3 [ 448.626317][T20696] __nla_validate_parse: 5 callbacks suppressed [ 448.626333][T20696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 448.645664][T20696] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 448.656749][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'. [ 448.980460][T20718] Unknown options in mask b7f2 [ 449.255496][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3944'. [ 449.631140][T20754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3952'. [ 449.749996][T20761] netlink: 'syz.4.3954': attribute type 8 has an invalid length. [ 449.851549][T20758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.989501][T20775] x_tables: duplicate underflow at hook 3 [ 450.015079][T20775] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 450.126372][T20778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3958'. [ 450.341408][T20790] netlink: 'syz.2.3962': attribute type 11 has an invalid length. [ 450.371770][T20790] netlink: 199780 bytes leftover after parsing attributes in process `syz.2.3962'. [ 450.604079][T20796] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3965'. [ 450.622748][T20796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3965'. [ 450.744768][T20801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3967'. [ 450.910162][T20811] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3969'. [ 451.227493][T20824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.253406][T20824] bond_slave_0: left allmulticast mode [ 451.279903][T20824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.304773][T20837] netlink: 'syz.1.3975': attribute type 8 has an invalid length. [ 451.315093][T20824] bond_slave_1: left allmulticast mode [ 451.353910][T20824] bond0 (unregistering): Released all slaves [ 451.440450][T20837] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.448196][T20837] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.672583][T20851] netlink: 'syz.0.3978': attribute type 1 has an invalid length. [ 451.857933][T20860] erspan0: entered promiscuous mode [ 451.889098][T20860] macsec1: entered promiscuous mode [ 452.239035][T20882] vlan0: entered promiscuous mode [ 452.257733][T20878] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 452.353068][T20887] bridge3: entered promiscuous mode [ 452.403513][T20887] bridge3: entered allmulticast mode [ 452.445163][T20887] team0: Port device bridge3 added [ 452.466146][T20882] bridge0: port 4(team0) entered blocking state [ 452.474662][T20882] bridge0: port 4(team0) entered disabled state [ 452.482953][T20882] team0: entered allmulticast mode [ 452.488236][T20882] team_slave_0: entered allmulticast mode [ 452.496900][T20882] team_slave_1: entered allmulticast mode [ 452.515308][T20882] team0: entered promiscuous mode [ 452.521002][T20882] team_slave_0: entered promiscuous mode [ 452.529850][T20882] team_slave_1: entered promiscuous mode [ 452.548476][T20882] bridge0: port 4(team0) entered blocking state [ 452.555065][T20882] bridge0: port 4(team0) entered forwarding state [ 452.844551][T20907] veth1: entered allmulticast mode [ 452.937227][T20913] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 453.232186][T20924] netlink: 'syz.1.3996': attribute type 11 has an invalid length. [ 453.538904][T20944] syzkaller0: entered promiscuous mode [ 453.557314][T20944] syzkaller0: entered allmulticast mode [ 454.567729][T20990] __nla_validate_parse: 7 callbacks suppressed [ 454.567750][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'. [ 454.613350][T20990] veth0_macvtap: left promiscuous mode [ 454.890251][T21003] netlink: 'syz.1.4022': attribute type 3 has an invalid length. [ 454.952150][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4021'. [ 455.130333][T21012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4025'. [ 455.167231][T21019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4027'. [ 455.206258][T21012] bridge0: port 3(dummy0) entered disabled state [ 455.242974][T21012] dummy0 (unregistering): left allmulticast mode [ 455.264286][T21012] bridge0: port 3(dummy0) entered disabled state [ 455.288771][T21024] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 455.621176][T21034] netlink: 'syz.0.4031': attribute type 1 has an invalid length. [ 455.746739][T21036] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4032'. [ 455.769241][T21036] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4032'. [ 455.908263][T21043] netlink: 294 bytes leftover after parsing attributes in process `syz.1.4033'. [ 455.971922][T21043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.189078][T21053] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4036'. [ 456.424158][T21069] netlink: 'syz.3.4039': attribute type 21 has an invalid length. [ 456.467542][T21072] netlink: 'syz.3.4039': attribute type 21 has an invalid length. [ 456.505862][T21074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4040'. [ 456.538824][T21074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4040'. [ 456.665605][T21083] netlink: 'syz.2.4042': attribute type 25 has an invalid length. [ 456.696607][T21084] netlink: 'syz.2.4042': attribute type 25 has an invalid length. [ 456.896599][T21096] tipc: Enabled bearer , priority 0 [ 456.912805][T21099] syzkaller0: MTU too low for tipc bearer [ 456.931684][T21099] tipc: Disabling bearer [ 457.045750][T21103] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 457.061450][T21103] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 457.519260][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 457.607326][T21124] netlink: 'syz.3.4052': attribute type 1 has an invalid length. [ 457.694855][T21126] syzkaller1: entered promiscuous mode [ 457.737774][T21126] syzkaller1: entered allmulticast mode [ 457.888850][T21136] netlink: 'syz.3.4055': attribute type 1 has an invalid length. [ 458.086470][T21137] bond9: (slave bridge3): Enslaving as a backup interface with an up link [ 458.160634][T21140] macvlan2: entered promiscuous mode [ 458.189474][T21140] macvlan2: entered allmulticast mode [ 458.214757][T21140] bond9: entered promiscuous mode [ 458.220138][T21140] bridge3: entered promiscuous mode [ 458.226722][T21140] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 458.244629][T21140] bond9: left promiscuous mode [ 458.252879][T21140] bridge3: left promiscuous mode [ 458.605014][T21163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.662689][T21163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.718323][T21163] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.750664][T21163] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.836061][T21167] geneve2: entered promiscuous mode [ 458.877152][T14649] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 47471 - 0 [ 458.921226][T14649] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 47471 - 0 [ 458.980236][T14649] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 47471 - 0 [ 459.016860][T14649] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 47471 - 0 [ 459.817354][T21220] __nla_validate_parse: 6 callbacks suppressed [ 459.817375][T21220] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4075'. [ 461.187121][T21238] gtp0: entered promiscuous mode [ 461.192753][T21238] gtp0: entered allmulticast mode [ 462.333199][T21200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.630199][T21250] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4084'. [ 463.138473][T21271] syzkaller1: entered promiscuous mode [ 463.152130][T21271] syzkaller1: entered allmulticast mode [ 463.173047][T21277] netlink: 'syz.2.4094': attribute type 9 has an invalid length. [ 463.641690][T21300] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 463.997782][T21307] vlan0: entered promiscuous mode [ 464.142357][T21325] netlink: 'syz.4.4103': attribute type 2 has an invalid length. [ 464.253360][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4104'. [ 466.304163][T21332] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 466.307365][T21347] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 466.518429][T21355] netlink: 'syz.3.4109': attribute type 11 has an invalid length. [ 466.574862][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 466.647145][T14655] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.672676][T14655] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.699410][T14655] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.763125][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 466.832078][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4114'. [ 466.842127][T21370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4114'. [ 466.904590][T21374] netlink: 'syz.0.4115': attribute type 24 has an invalid length. [ 466.907409][T21373] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 466.913623][T21375] netlink: 'syz.0.4115': attribute type 24 has an invalid length. [ 466.954524][T21373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 466.963074][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 467.022971][T21378] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 467.034849][T21378] bond7: entered allmulticast mode [ 467.068156][T21380] x_tables: duplicate underflow at hook 1 [ 467.104325][T21373] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 467.117338][T21373] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 467.415170][T21393] syzkaller0: entered promiscuous mode [ 467.434818][T21393] syzkaller0: entered allmulticast mode [ 467.874087][T21414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4129'. [ 467.950097][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4130'. [ 468.272126][T21414] team_slave_0 (unregistering): left promiscuous mode [ 468.283244][T21414] team_slave_0 (unregistering): left allmulticast mode [ 468.304920][T21414] team0: Port device team_slave_0 removed [ 468.619156][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4135'. [ 468.660387][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4135'. [ 468.810718][T21449] xt_CT: No such helper "syz1" [ 468.965885][T21455] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4138'. [ 469.051880][T21458] openvswitch: netlink: IPv4 tun info is not correct [ 469.133490][T21460] netlink: 'syz.4.4140': attribute type 62 has an invalid length. [ 469.964937][T21501] x_tables: unsorted underflow at hook 3 [ 470.313074][T21507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.049919][T21548] netlink: 'syz.3.4166': attribute type 1 has an invalid length. [ 471.092505][T21548] netlink: 'syz.3.4166': attribute type 1 has an invalid length. [ 472.384245][T21600] __nla_validate_parse: 7 callbacks suppressed [ 472.384265][T21600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 472.494328][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'. [ 472.516819][T21606] ip6erspan0: entered allmulticast mode [ 472.583804][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'. [ 472.593510][T14655] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.614805][T14655] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.641143][T14655] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.660922][T14655] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.675665][T21603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4178'. [ 472.898820][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4182'. [ 472.928114][T21617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.082311][T21620] netlink: 'syz.1.4183': attribute type 4 has an invalid length. [ 473.183440][T21624] ip6tnl0: Caught tx_queue_len zero misconfig [ 473.398314][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'. [ 473.497988][T21632] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.613540][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4192'. [ 474.097470][T21669] syzkaller0: entered promiscuous mode [ 474.116892][T21669] syzkaller0: entered allmulticast mode [ 474.153339][T21675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4198'. [ 474.281645][T21681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4203'. [ 474.415468][T21681] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4203'. [ 474.435602][T21689] netlink: 'syz.3.4202': attribute type 12 has an invalid length. [ 474.472919][T21689] netlink: 'syz.3.4202': attribute type 29 has an invalid length. [ 474.501868][T21689] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 474.782969][T21704] bridge_slave_1: left allmulticast mode [ 474.792198][T21704] bridge_slave_1: left promiscuous mode [ 474.804012][T21704] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.830240][T21704] bridge_slave_0: left allmulticast mode [ 474.866074][T21704] bridge_slave_0: left promiscuous mode [ 474.899761][T21704] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.175183][T21723] gtp1: entered promiscuous mode [ 475.187686][T21723] gtp1: entered allmulticast mode [ 475.613649][T21733] syzkaller1: entered promiscuous mode [ 475.620170][T21733] syzkaller1: entered allmulticast mode [ 475.638016][T21752] netlink: 'syz.1.4221': attribute type 30 has an invalid length. [ 475.706304][T21753] netlink: 'syz.1.4221': attribute type 30 has an invalid length. [ 475.875285][T21763] netlink: 'syz.3.4225': attribute type 15 has an invalid length. [ 475.883402][T21756] 8021q: VLANs not supported on ip_vti0 [ 475.889963][T14649] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.913447][T21761] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 476.036703][T14649] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.037035][T21763] netlink: 'syz.3.4225': attribute type 15 has an invalid length. [ 476.057826][T14649] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.071852][T14649] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.085538][T14649] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 476.120533][T14649] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 476.142416][T14649] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 476.492451][T21772] bond5: Unable to set down delay as MII monitoring is disabled [ 476.544308][T21772] bond5 (unregistering): Released all slaves [ 476.644673][T21793] syzkaller0: entered promiscuous mode [ 476.664954][T21793] syzkaller0: entered allmulticast mode [ 476.905901][T21814] bond0: (slave gre0): refused to change device type [ 477.043825][T21819] tipc: Started in network mode [ 477.049737][T21819] tipc: Node identity 42c6a6427843, cluster identity 4711 [ 477.057287][T21819] tipc: Enabled bearer , priority 0 [ 477.206164][T21819] syzkaller0: entered promiscuous mode [ 477.219964][T21819] syzkaller0: entered allmulticast mode [ 477.233762][T21819] tipc: Resetting bearer [ 477.269409][T21816] tipc: Resetting bearer [ 478.247613][T21848] __nla_validate_parse: 13 callbacks suppressed [ 478.247632][T21848] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4246'. [ 478.273689][T21848] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4246'. [ 479.662983][T21816] tipc: Disabling bearer [ 479.683034][ T5730] tipc: Node number set to 981837378 [ 479.974960][T21878] team_slave_1: Caught tx_queue_len zero misconfig [ 479.994058][T21880] team0: No ports can be present during mode change [ 480.015124][T21880] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.133568][T21889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4257'. [ 480.354516][T21892] syzkaller0: entered promiscuous mode [ 480.360884][T21892] syzkaller0: entered allmulticast mode [ 480.599649][T21909] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4266'. [ 480.628462][T21909] tipc: Enabling of bearer rejected, failed to enable media [ 480.716666][T21916] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4268'. [ 480.975357][T21923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4269'. [ 481.611602][T21957] netlink: 'syz.2.4278': attribute type 29 has an invalid length. [ 481.626053][T21958] netlink: 'syz.2.4278': attribute type 29 has an invalid length. [ 481.657951][T21957] netlink: 'syz.2.4278': attribute type 29 has an invalid length. [ 481.692240][T21958] netlink: 548 bytes leftover after parsing attributes in process `syz.2.4278'. [ 481.726202][T21957] netlink: 548 bytes leftover after parsing attributes in process `syz.2.4278'. [ 481.980407][T21974] netlink: 'syz.1.4284': attribute type 29 has an invalid length. [ 481.996543][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4285'. [ 482.011710][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4284'. [ 482.035536][T21976] netlink: 'syz.2.4285': attribute type 1 has an invalid length. [ 482.045175][T21979] netlink: 'syz.1.4284': attribute type 29 has an invalid length. [ 483.607762][T22030] syzkaller0: entered promiscuous mode [ 483.643236][T22030] syzkaller0: entered allmulticast mode [ 483.651728][T22038] FAULT_INJECTION: forcing a failure. [ 483.651728][T22038] name failslab, interval 1, probability 0, space 0, times 0 [ 483.666921][T22038] CPU: 0 UID: 0 PID: 22038 Comm: syz.3.4302 Not tainted syzkaller #0 PREEMPT(full) [ 483.666948][T22038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.666970][T22038] Call Trace: [ 483.666982][T22038] [ 483.666991][T22038] dump_stack_lvl+0xe8/0x150 [ 483.667024][T22038] should_fail_ex+0x412/0x560 [ 483.667058][T22038] should_failslab+0xa8/0x100 [ 483.667091][T22038] ? skb_clone+0x212/0x3a0 [ 483.667120][T22038] kmem_cache_alloc_noprof+0x87/0x650 [ 483.667150][T22038] ? __netlink_lookup+0xc6/0x8b0 [ 483.667185][T22038] skb_clone+0x212/0x3a0 [ 483.667218][T22038] __netlink_deliver_tap+0x404/0x850 [ 483.667259][T22038] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.667288][T22038] netlink_deliver_tap+0x19c/0x1b0 [ 483.667315][T22038] netlink_unicast+0x730/0x8e0 [ 483.667352][T22038] netlink_sendmsg+0x813/0xb40 [ 483.667390][T22038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.667420][T22038] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.667451][T22038] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.667484][T22038] ____sys_sendmsg+0x972/0x9f0 [ 483.667512][T22038] ? __might_fault+0xaf/0x130 [ 483.667549][T22038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.667587][T22038] ? import_iovec+0x73/0xa0 [ 483.667623][T22038] ___sys_sendmsg+0x2a5/0x360 [ 483.667650][T22038] ? __lock_acquire+0x6b5/0x2cf0 [ 483.667679][T22038] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.667761][T22038] ? __fget_files+0x2a/0x420 [ 483.667787][T22038] ? __fget_files+0x3a0/0x420 [ 483.667825][T22038] __x64_sys_sendmsg+0x1bd/0x2a0 [ 483.667856][T22038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.667898][T22038] ? __pfx_ksys_write+0x10/0x10 [ 483.667940][T22038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.667965][T22038] do_syscall_64+0x15f/0xf80 [ 483.667988][T22038] ? trace_irq_disable+0x3b/0x140 [ 483.668021][T22038] ? clear_bhb_loop+0x40/0x90 [ 483.668048][T22038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.668071][T22038] RIP: 0033:0x7f0ea199cdd9 [ 483.668098][T22038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.668118][T22038] RSP: 002b:00007f0ea2848028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.668150][T22038] RAX: ffffffffffffffda RBX: 00007f0ea1c15fa0 RCX: 00007f0ea199cdd9 [ 483.668167][T22038] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 483.668181][T22038] RBP: 00007f0ea2848090 R08: 0000000000000000 R09: 0000000000000000 [ 483.668195][T22038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.668208][T22038] R13: 00007f0ea1c16038 R14: 00007f0ea1c15fa0 R15: 00007ffd78005fb8 [ 483.668245][T22038] [ 485.136420][T22073] __nla_validate_parse: 4 callbacks suppressed [ 485.136439][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4311'. [ 485.660397][T22096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4318'. [ 486.055450][T22109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.395622][T22118] netlink: 'syz.0.4325': attribute type 1 has an invalid length. [ 486.439395][T22118] netlink: 'syz.0.4325': attribute type 7 has an invalid length. [ 486.457518][T22118] netlink: 'syz.0.4325': attribute type 8 has an invalid length. [ 486.478836][T22118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4325'. [ 486.602358][T22126] netlink: 'syz.4.4329': attribute type 1 has an invalid length. [ 486.647622][T22126] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4329'. [ 486.677620][T22126] netlink: 'syz.4.4329': attribute type 1 has an invalid length. [ 486.714213][T22126] netlink: 'syz.4.4329': attribute type 8 has an invalid length. [ 486.745393][T22126] netlink: 582 bytes leftover after parsing attributes in process `syz.4.4329'. [ 486.767687][T22136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.024457][T22151] netlink: 'syz.4.4333': attribute type 4 has an invalid length. [ 487.046444][T22151] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4333'. [ 487.066930][T22152] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4335'. [ 487.688503][T22171] netlink: 'syz.0.4344': attribute type 3 has an invalid length. [ 488.023675][T22187] syzkaller0: entered promiscuous mode [ 488.047908][T22187] syzkaller0: entered allmulticast mode [ 488.068037][T22192] netlink: 'syz.0.4349': attribute type 4 has an invalid length. [ 488.096162][T22192] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4349'. [ 488.188087][T22194] gre3: entered promiscuous mode [ 488.239867][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 488.251196][T22200] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4351'. [ 488.628633][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4354'. [ 488.670092][T22212] "syz.3.4355" (22212) uses obsolete ecb(arc4) skcipher [ 489.067469][T22230] vlan0: entered allmulticast mode [ 489.080873][T22230] veth1_virt_wifi: entered allmulticast mode [ 489.091610][T22234] syz_tun: entered allmulticast mode [ 489.192961][T22233] syz_tun: left allmulticast mode [ 489.291888][T22238] syzkaller0: entered promiscuous mode [ 489.297643][T22238] syzkaller0: entered allmulticast mode [ 489.329207][T22238] simple: basic_1 [ 489.333654][T22238] simple: basic_2 [ 489.337332][T22238] simple: basic_3 [ 489.341071][T22238] simple: basic_4 [ 489.344769][T22238] simple: basic_5 [ 489.348429][T22238] simple: basic_6 [ 489.352149][T22238] simple: basic_7 [ 489.355817][T22238] simple: basic_8 [ 489.359517][T22238] simple: basic_9 [ 489.363197][T22238] simple: basic_10 [ 489.366952][T22238] simple: basic_11 [ 489.370735][T22238] simple: basic_12 [ 489.374485][T22238] simple: basic_13 [ 489.378260][T22238] simple: basic_14 [ 489.382063][T22238] simple: basic_15 [ 489.385813][T22238] simple: basic_16 [ 489.389599][T22238] simple: basic_17 [ 489.393376][T22238] 0: reclassify loop, rule prio 0, protocol 800 [ 489.486711][T22248] netlink: 'syz.1.4366': attribute type 1 has an invalid length. [ 489.877294][T22266] Bluetooth: MGMT ver 1.23 [ 490.273670][T22282] set match dimension is over the limit! [ 490.311619][T22282] __nla_validate_parse: 2 callbacks suppressed [ 490.311638][T22282] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4375'. [ 490.402663][T22282] netlink: 'syz.4.4375': attribute type 1 has an invalid length. [ 490.446993][T22290] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 490.468765][ T5721] IPVS: starting estimator thread 0... [ 490.579077][T22294] IPVS: using max 26 ests per chain, 62400 per kthread [ 490.680776][T22296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4379'. [ 490.762122][T22304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4380'. [ 490.775085][T22305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4379'. [ 490.823956][T22305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4379'. [ 491.077971][T22316] lo: entered allmulticast mode [ 491.112348][T22316] tunl0: entered allmulticast mode [ 491.130030][T22320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.134247][T22316] gre0: entered allmulticast mode [ 491.198293][T22316] gretap0: entered allmulticast mode [ 491.225696][T22316] erspan0: entered allmulticast mode [ 491.246896][T22316] ip_vti0: entered allmulticast mode [ 491.260996][T22316] ip6_vti0: entered allmulticast mode [ 491.270039][T22316] sit0: entered allmulticast mode [ 491.293150][T22316] ip6tnl0: entered allmulticast mode [ 491.315373][T22316] ip6gre0: entered allmulticast mode [ 491.336503][T22316] syz_tun: entered allmulticast mode [ 491.353506][T22316] bridge0: entered allmulticast mode [ 491.382874][T22316] vcan0: entered allmulticast mode [ 491.397967][T22316] bond0: entered allmulticast mode [ 491.408213][T22316] bond_slave_0: entered allmulticast mode [ 491.415251][T22316] bond_slave_1: entered allmulticast mode [ 491.440413][T22316] team0: entered allmulticast mode [ 491.451486][T22316] team_slave_0: entered allmulticast mode [ 491.479031][T22316] team_slave_1: entered allmulticast mode [ 491.501774][T22316] nlmon0: entered allmulticast mode [ 491.517457][T22316] batadv0: entered allmulticast mode [ 491.535302][T22316] vxcan0: entered allmulticast mode [ 491.543755][T22316] vxcan1: entered allmulticast mode [ 491.553378][T22316] veth0: entered allmulticast mode [ 491.572164][T22316] veth1: entered allmulticast mode [ 491.595919][T22316] wg0: entered allmulticast mode [ 491.604014][T22334] netlink: 'syz.0.4388': attribute type 10 has an invalid length. [ 491.614231][T22316] wg1: entered allmulticast mode [ 491.631609][T22316] wg2: entered allmulticast mode [ 491.643918][T22316] veth0_to_bridge: entered allmulticast mode [ 491.674621][T22316] veth1_to_bridge: entered allmulticast mode [ 491.702580][T22316] veth0_to_bond: entered allmulticast mode [ 491.713693][T22336] netlink: 'syz.3.4389': attribute type 62 has an invalid length. [ 491.727233][T22316] veth1_to_bond: entered allmulticast mode [ 491.747945][T22316] veth0_to_team: entered allmulticast mode [ 491.775392][T22316] veth1_to_team: entered allmulticast mode [ 491.810474][T22316] veth0_to_batadv: entered allmulticast mode [ 491.841805][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.851590][T22316] batadv_slave_0: entered allmulticast mode [ 491.863488][T22316] veth1_to_batadv: entered allmulticast mode [ 491.874770][T22316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.882835][T22316] batadv_slave_1: entered allmulticast mode [ 491.892650][T22316] xfrm0: entered allmulticast mode [ 491.902375][T22316] veth0_to_hsr: entered allmulticast mode [ 491.914556][T22316] veth1_to_hsr: entered allmulticast mode [ 491.936675][T22316] veth1_virt_wifi: entered allmulticast mode [ 491.948017][T22316] veth0_virt_wifi: entered allmulticast mode [ 491.960625][T22316] virt_wifi0: entered allmulticast mode [ 491.966705][T22316] veth1_vlan: entered allmulticast mode [ 491.975701][T22316] veth0_vlan: entered allmulticast mode [ 491.994016][T22316] vlan0: entered allmulticast mode [ 492.001366][T22316] vlan1: entered allmulticast mode [ 492.007047][T22316] macvlan0: entered allmulticast mode [ 492.016249][T22316] macvlan1: entered allmulticast mode [ 492.025536][T22316] ipvlan0: entered allmulticast mode [ 492.031393][T22316] ipvlan1: entered allmulticast mode [ 492.037211][T22316] veth1_macvtap: entered allmulticast mode [ 492.047439][T22316] veth0_macvtap: entered allmulticast mode [ 492.057997][T22316] macvtap0: entered allmulticast mode [ 492.067137][T22316] macsec0: entered allmulticast mode [ 492.076600][T22316] geneve0: entered allmulticast mode [ 492.085930][T22316] geneve1: entered allmulticast mode [ 492.094747][T22316] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 492.109644][T22316] bond1: entered allmulticast mode [ 492.115191][T22316] geneve2: entered allmulticast mode [ 492.122867][T22316] gretap1: entered allmulticast mode [ 492.130880][T22316] bond2: entered allmulticast mode [ 492.137272][T22316] ip6tnl1: entered allmulticast mode [ 492.146264][T22316] ip6tnl2: entered allmulticast mode [ 492.152040][T22316] bond3: entered allmulticast mode [ 492.157571][T22316] erspan1: entered allmulticast mode [ 492.166564][T22316] bond4: left promiscuous mode [ 492.171928][T22316] bond4: entered allmulticast mode [ 492.177321][T22316] team1: left promiscuous mode [ 492.182820][T22316] macsec1: entered allmulticast mode [ 492.188364][T22316] veth2: entered allmulticast mode [ 492.195140][T22316] veth3: entered allmulticast mode [ 492.200810][T22316] bond5: entered allmulticast mode [ 492.206704][T22316] bond6: entered allmulticast mode [ 492.213608][T22316] netdevsim netdevsim1 eth0: entered allmulticast mode [ 492.223449][T22316] netdevsim netdevsim1 eth1: entered allmulticast mode [ 492.231217][T22316] netdevsim netdevsim1 eth2: entered allmulticast mode [ 492.238552][T22316] netdevsim netdevsim1 eth3: entered allmulticast mode [ 492.246763][T22316] bridge1: entered allmulticast mode [ 492.259315][T22316] vti60: entered allmulticast mode [ 492.270632][T22316] ip6tnl3: entered allmulticast mode [ 492.276642][T22316] bridge2: entered allmulticast mode [ 492.285433][T22316] bridge3: entered allmulticast mode [ 492.291729][T22316] : entered allmulticast mode [ 492.296958][T22316] sit1: entered allmulticast mode [ 492.334614][T22316] ip6gretap1: entered allmulticast mode [ 492.341929][T22316] sit2: entered allmulticast mode [ 492.376394][T22316] syztnl1: entered allmulticast mode [ 492.382431][T22316] vxlan0: entered allmulticast mode [ 492.390914][T22316] vxlan1: entered allmulticast mode [ 492.398556][T22316] bridge4: entered allmulticast mode [ 492.406618][T22334] vlan0: left promiscuous mode [ 492.415551][T22334] vlan0: entered promiscuous mode [ 492.421325][T22334] vlan0: entered allmulticast mode [ 492.427569][T22334] veth0_vlan: entered allmulticast mode [ 492.449640][T22334] team0: Port device vlan0 added [ 492.466008][T14663] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.500640][T14663] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.532847][T14663] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.575337][T14663] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.633317][T14663] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.647342][T14663] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.656563][T14663] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.665372][T14663] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.837923][T22348] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 493.051855][T22366] netlink: 'syz.1.4400': attribute type 1 has an invalid length. [ 493.092147][T22366] bond8: entered promiscuous mode [ 493.098262][T22366] 8021q: adding VLAN 0 to HW filter on device bond8 [ 493.125255][T22366] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 493.151364][T22366] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 493.174967][T22366] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 493.215878][T22372] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 493.380188][T22381] pim6reg: entered allmulticast mode [ 493.684032][T22401] netlink: 'syz.3.4410': attribute type 9 has an invalid length. [ 493.886716][T22411] netlink: 'syz.4.4413': attribute type 1 has an invalid length. [ 493.887492][T22412] netlink: 'syz.4.4413': attribute type 1 has an invalid length. [ 493.947784][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4413'. [ 494.166165][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4416'. [ 494.179555][T22427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.390776][ T10] IPVS: starting estimator thread 0... [ 494.488849][T22440] IPVS: using max 24 ests per chain, 57600 per kthread [ 494.577855][T22444] netlink: 'syz.2.4421': attribute type 21 has an invalid length. [ 494.586044][T22444] netlink: 'syz.2.4421': attribute type 22 has an invalid length. [ 494.595993][T22444] netlink: 'syz.2.4421': attribute type 23 has an invalid length. [ 494.604326][T22444] netlink: 'syz.2.4421': attribute type 25 has an invalid length. [ 494.613591][T22444] netlink: 'syz.2.4421': attribute type 26 has an invalid length. [ 494.621766][T22444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4421'. [ 494.652184][T22442] xt_hashlimit: size too large, truncated to 1048576 [ 495.582012][T22493] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4433'. [ 495.659899][T22495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4434'. [ 495.666016][T22497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.713714][T22495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.724738][T22502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.935707][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4439'. [ 495.945652][T22512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4439'. [ 496.127361][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4441'. [ 496.136925][T22518] tipc: Resetting bearer [ 496.147207][T22518] tipc: Disabling bearer [ 496.232167][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4441'. [ 498.297510][T22479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.485421][T18664] Bluetooth: hci1: command 0x0406 tx timeout [ 498.620821][T22537] validate_nla: 1 callbacks suppressed [ 498.620843][T22537] netlink: 'syz.1.4446': attribute type 2 has an invalid length. [ 498.695239][T22537] netlink: 'syz.1.4446': attribute type 8 has an invalid length. [ 498.719712][T22537] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4446'. [ 498.798247][T22543] bond3 (unregistering): Released all slaves [ 498.866721][T22558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4451'. [ 498.966474][T22560] xt_addrtype: ipv6 does not support BROADCAST matching [ 499.061871][T22563] netlink: 'syz.1.4453': attribute type 29 has an invalid length. [ 499.073524][T22563] netlink: 'syz.1.4453': attribute type 29 has an invalid length. [ 499.094229][T22563] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4453'. [ 499.115597][T22570] xt_hashlimit: invalid interval [ 499.294703][T22580] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4459'. [ 499.861626][T22613] netlink: 'syz.3.4466': attribute type 11 has an invalid length. [ 499.916929][T22616] IPVS: set_ctl: invalid protocol: 141 255.255.255.255:20003 [ 500.458981][T22636] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 501.244857][T22679] syzkaller0: entered promiscuous mode [ 501.258856][T22679] syzkaller0: entered allmulticast mode [ 501.527049][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.559761][T22689] netlink: 'syz.0.4489': attribute type 1 has an invalid length. [ 501.569447][T22689] __nla_validate_parse: 4 callbacks suppressed [ 501.569466][T22689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4489'. [ 501.606374][T22690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.642871][T22700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4492'. [ 501.688052][T22695] netlink: 'syz.4.4490': attribute type 3 has an invalid length. [ 501.727166][T22695] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4490'. [ 501.777602][T22695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4490'. [ 501.856996][T22705] can: request_module (can-proto-0) failed. [ 501.881279][T22716] siw: device registration error -23 [ 502.187520][T22729] veth1_macvtap: left promiscuous mode [ 502.568599][T22751] netlink: 'syz.0.4505': attribute type 1 has an invalid length. [ 502.695699][T22757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4507'. [ 502.756984][T22761] netlink: 'syz.3.4506': attribute type 1 has an invalid length. [ 502.783548][T22763] netlink: 'syz.1.4508': attribute type 1 has an invalid length. [ 502.909100][T22761] 8021q: adding VLAN 0 to HW filter on device bond10 [ 502.912548][T22773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4506'. [ 502.931178][T22775] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4510'. [ 502.957912][T22768] 8021q: adding VLAN 0 to HW filter on device bond10 [ 502.970813][T22768] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 502.983235][T22768] bond10: (slave vcan0): Error -95 calling set_mac_address [ 503.021458][T22761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4506'. [ 503.087275][T22780] netlink: 'syz.1.4512': attribute type 3 has an invalid length. [ 503.097498][T22780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4512'. [ 503.310165][T22790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4515'. [ 503.511206][T22798] SET target dimension over the limit! [ 503.553423][T22800] geneve2: entered promiscuous mode [ 503.568791][T22800] geneve2: entered allmulticast mode [ 504.032806][T22826] xt_hashlimit: size too large, truncated to 1048576 [ 504.075864][T22817] bridge0: port 4(team0) entered disabled state [ 504.082497][T22817] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.145871][T22830] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.193250][T22830] bridge_slave_0 (unregistering): left allmulticast mode [ 504.212073][T22830] bridge_slave_0 (unregistering): left promiscuous mode [ 504.233243][T22830] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.974586][T22856] geneve1: entered promiscuous mode [ 505.008521][T22856] geneve1: left allmulticast mode [ 505.266380][T22889] netlink: 'syz.0.4541': attribute type 2 has an invalid length. [ 505.370737][T22883] syzkaller0: entered promiscuous mode [ 505.389253][T22883] syzkaller0: entered allmulticast mode [ 507.812999][T22911] __nla_validate_parse: 11 callbacks suppressed [ 507.813018][T22911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4547'. [ 508.028219][T22915] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 508.042099][T22915] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 508.052545][T22915] gretap1: entered promiscuous mode [ 508.057820][T22915] gretap1: entered allmulticast mode [ 508.287253][T22927] netlink: 'syz.3.4554': attribute type 1 has an invalid length. [ 508.318787][T22927] netlink: 'syz.3.4554': attribute type 1 has an invalid length. [ 508.329865][T22927] netlink: 'syz.3.4554': attribute type 1 has an invalid length. [ 508.342037][T22930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.360592][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4556'. [ 508.371035][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4556'. [ 508.453700][T22934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.494617][T22934] netlink: 'syz.4.4557': attribute type 64 has an invalid length. [ 508.567904][T22936] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 508.741685][T22946] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 508.904669][T22958] bridge_slave_0: left promiscuous mode [ 508.928161][T22958] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.956184][T22958] bridge_slave_1: left promiscuous mode [ 508.968482][T22958] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.989188][T22964] x_tables: unsorted underflow at hook 2 [ 509.003197][T22958] bond0: (slave bond_slave_0): Releasing backup interface [ 509.019692][T22958] bond0: (slave bond_slave_1): Releasing backup interface [ 509.044907][T22958] team0: Port device team_slave_0 removed [ 509.061858][T22958] team0: Port device team_slave_1 removed [ 509.068086][T22958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.082444][T22958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.095690][T22958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 509.215158][T22966] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 509.283426][T22975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4567'. [ 509.321993][T22975] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4567'. [ 509.358613][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 509.484886][T22980] netlink: 'syz.2.4568': attribute type 11 has an invalid length. [ 509.586283][T22986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4569'. [ 509.646379][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4569'. [ 509.909279][T23003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4574'. [ 510.367460][T23021] netlink: 'syz.2.4579': attribute type 3 has an invalid length. [ 510.383267][T23021] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 510.401035][T23021] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4579'. [ 510.597014][T23031] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 510.644767][T23031] bond10: entered promiscuous mode [ 510.651309][T23031] bond10: entered allmulticast mode [ 510.657093][T23031] 8021q: adding VLAN 0 to HW filter on device bond10 [ 510.949383][T23049] syzkaller0: entered promiscuous mode [ 510.966141][T23049] syzkaller0: entered allmulticast mode [ 511.320948][T23070] syzkaller1: entered promiscuous mode [ 511.364104][T23070] syzkaller1: entered allmulticast mode [ 511.373277][T23082] x_tables: unsorted entry at hook 2 [ 511.712212][T23097] netlink: 'syz.3.4600': attribute type 11 has an invalid length. [ 511.731613][T23097] netlink: 'syz.3.4600': attribute type 11 has an invalid length. [ 512.289469][T23132] xt_hashlimit: overflow, rate too high: 0 [ 512.304858][T23133] netlink: 'syz.4.4609': attribute type 8 has an invalid length. [ 512.348321][ T77] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.368402][ T77] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.400253][ T77] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.425328][ T77] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.899755][T23160] __nla_validate_parse: 11 callbacks suppressed [ 512.899785][T23160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4617'. [ 512.955027][T23158] netlink: 'syz.2.4616': attribute type 32 has an invalid length. [ 512.992428][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4616'. [ 513.051936][T23158] bond3: option coupled_control: invalid value (192) [ 513.061481][T23158] bond3 (unregistering): Released all slaves [ 513.113723][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4620'. [ 513.303483][T23175] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 513.336580][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4623'. [ 513.391423][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4624'. [ 513.402617][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4625'. [ 513.456478][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'. [ 513.741648][T23187] bridge3: port 1(vlan3) entered blocking state [ 513.757591][T23187] bridge3: port 1(vlan3) entered disabled state [ 513.775816][T23187] vlan3: entered allmulticast mode [ 513.791179][T23187] bridge3: entered allmulticast mode [ 513.811141][T23187] vlan3: left allmulticast mode [ 513.811157][T23197] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4629'. [ 513.823394][T23187] bridge3: left allmulticast mode [ 513.857042][T23191] syzkaller0: entered promiscuous mode [ 513.878746][T23191] syzkaller0: entered allmulticast mode [ 513.890654][T23204] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4629'. [ 514.187987][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4635'. [ 514.395632][T23228] openvswitch: netlink: Message has 592 unknown bytes. [ 514.419815][T23228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.985203][T23249] netlink: 'syz.2.4643': attribute type 4 has an invalid length. [ 515.608735][T23283] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 515.850349][T23294] syzkaller1: entered promiscuous mode [ 515.855895][T23294] syzkaller1: entered allmulticast mode [ 516.178906][T23312] netlink: 'syz.1.4663': attribute type 10 has an invalid length. [ 516.198802][T23312] macsec0: left allmulticast mode [ 516.206923][T23312] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 516.694776][T23339] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 517.766040][T23394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.915493][T23393] syzkaller1: entered promiscuous mode [ 517.925639][T23393] syzkaller1: entered allmulticast mode [ 518.058149][T23410] netlink: 'syz.0.4694': attribute type 3 has an invalid length. [ 518.072931][T23410] __nla_validate_parse: 13 callbacks suppressed [ 518.072947][T23410] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4694'. [ 518.089644][ T5646] Bluetooth: hci2: command tx timeout [ 518.223507][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4695'. [ 518.244200][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4695'. [ 518.254264][T23422] netlink: 'syz.4.4697': attribute type 1 has an invalid length. [ 518.413917][T23432] netlink: 'syz.1.4701': attribute type 1 has an invalid length. [ 518.424013][T23435] veth0_to_bond: left allmulticast mode [ 518.464240][T23434] x_tables: duplicate underflow at hook 2 [ 518.515921][T23444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.617592][T23449] xt_hashlimit: size too large, truncated to 1048576 [ 518.762890][T23431] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4700'. [ 518.788177][T23460] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4705'. [ 518.825983][T23460] netlink: 'syz.2.4705': attribute type 1 has an invalid length. [ 518.842918][T23460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4705'. [ 519.831878][T23501] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20002 [ 540.918333][T23524] tls_set_device_offload: netdev not found [ 541.240575][T23542] netlink: 512 bytes leftover after parsing attributes in process `syz.4.4730'. [ 541.260566][T23546] netlink: 'syz.3.4728': attribute type 7 has an invalid length. [ 541.271196][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4730'. [ 541.281143][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4730'. [ 541.291710][T23544] syzkaller1: entered promiscuous mode [ 541.299322][T23544] syzkaller1: entered allmulticast mode [ 541.304992][T23542] netlink: 'syz.4.4730': attribute type 15 has an invalid length. [ 541.378425][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4730'. [ 541.388153][ T3363] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 541.395803][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4730'. [ 541.415834][ T3363] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 541.426446][T23542] netlink: 'syz.4.4730': attribute type 15 has an invalid length. [ 541.451917][ T3363] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 541.472850][ T3363] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 541.610189][T23561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.648404][T23564] netlink: 'syz.4.4735': attribute type 20 has an invalid length. [ 541.668211][T23564] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.703344][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4735'. [ 541.789807][T23567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4737'. [ 541.824463][T23571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.077072][T23582] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4742'. [ 542.101956][T23584] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4742'. [ 542.161166][T23590] netlink: 'syz.4.4744': attribute type 1 has an invalid length. [ 542.250998][T23594] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4744'. [ 542.368125][T23600] netlink: 'syz.3.4747': attribute type 4 has an invalid length. [ 542.859211][T23622] vlan3: entered allmulticast mode [ 542.878984][T23622] bond0: entered allmulticast mode [ 542.900277][T23622] netlink: 'syz.0.4755': attribute type 15 has an invalid length. [ 542.955379][ T3363] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 542.967805][T23622] netlink: 'syz.0.4755': attribute type 15 has an invalid length. [ 542.987444][ T3363] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 542.998483][ T3363] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 543.015434][ T3363] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 543.092102][T23628] netlink: 'syz.2.4758': attribute type 1 has an invalid length. [ 543.175080][T23628] bond3: entered promiscuous mode [ 543.181420][T23628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.189518][T23631] netlink: 'syz.3.4760': attribute type 4 has an invalid length. [ 543.207547][T23631] geneve3: entered promiscuous mode [ 543.231204][T23628] bond3: (slave bridge5): making interface the new active one [ 543.239475][T23628] bridge5: entered promiscuous mode [ 543.245803][T23628] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 543.255099][T14649] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 40525 - 0 [ 543.291830][T14649] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 40525 - 0 [ 543.313028][T14649] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 40525 - 0 [ 543.481680][T23646] openvswitch: netlink: IP tunnel dst address not specified [ 544.653330][T23701] syzkaller0: entered promiscuous mode [ 544.660770][T23701] syzkaller0: entered allmulticast mode [ 545.002393][T23727] xt_l2tp: v2 sid > 0xffff: 1114112 [ 545.041750][T23727] xt_l2tp: v2 sid > 0xffff: 1114112 [ 545.377396][T23744] : entered promiscuous mode [ 545.686874][T23775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.740520][T23775] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 545.763062][T23775] batman_adv: batadv0: Removing interface: ipvlan2 [ 545.792518][T23775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.165714][T23802] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 546.422073][T23826] __nla_validate_parse: 16 callbacks suppressed [ 546.422094][T23826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4809'. [ 546.455625][T23827] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 546.608140][T23836] set match dimension is over the limit! [ 546.708396][T23839] validate_nla: 3 callbacks suppressed [ 546.708415][T23839] netlink: 'syz.2.4816': attribute type 64 has an invalid length. [ 546.963137][T23856] netlink: 'syz.0.4819': attribute type 1 has an invalid length. [ 547.221075][T23866] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 547.241567][T23866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.315324][T23870] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4823'. [ 547.455698][T23877] netlink: 208552 bytes leftover after parsing attributes in process `syz.4.4827'. [ 547.509558][T23882] IPVS: sed: FWM 3 0x00000003 - no destination available [ 550.717253][T23902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4833'. [ 550.793882][T23914] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4836'. [ 550.847633][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4836'. [ 550.966814][T23911] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4836'. [ 551.045145][T23923] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.4838'. [ 551.127076][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4840'. [ 551.325616][T23939] netlink: 'syz.1.4844': attribute type 61 has an invalid length. [ 551.345191][T23940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.412197][T23945] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 551.611351][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4846'. [ 551.641944][T23954] netlink: 'syz.4.4846': attribute type 18 has an invalid length. [ 551.680763][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4846'. [ 551.705709][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4846'. [ 551.718825][T23955] netlink: 'syz.4.4846': attribute type 18 has an invalid length. [ 551.741091][T23963] netem: incorrect ge model size [ 551.758203][T23963] netem: change failed [ 551.794593][T23955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4846'. [ 551.828422][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4846'. [ 551.856896][T23955] netlink: 'syz.4.4846': attribute type 18 has an invalid length. [ 551.894972][T23955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4846'. [ 552.039432][T23973] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 552.051679][T23978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4855'. [ 552.061429][T23974] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 552.208317][T23985] syzkaller1: entered promiscuous mode [ 552.220668][T23985] syzkaller1: entered allmulticast mode [ 552.267163][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4859'. [ 552.292388][T23987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4858'. [ 552.574605][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4865'. [ 552.640278][T24006] netlink: 'syz.3.4866': attribute type 10 has an invalid length. [ 552.652108][T24006] bridge0: port 3(bond1) entered blocking state [ 552.660820][T24006] bridge0: port 3(bond1) entered disabled state [ 552.667394][T24006] bond1: entered allmulticast mode [ 552.681770][T24006] bond1: entered promiscuous mode [ 552.850940][T24023] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.768534][T24016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.209191][T24087] bond4: option resend_igmp: invalid value (32767) [ 556.215999][T24087] bond4: option resend_igmp: allowed values 0 - 255 [ 556.232117][T24087] bond4 (unregistering): Released all slaves [ 556.274900][T24095] netlink: 'syz.2.4890': attribute type 4 has an invalid length. [ 556.345638][T24097] IPv6: sit3: Disabled Multicast RS [ 556.376657][T24097] sit3: entered allmulticast mode [ 556.387664][T24105] netlink: 'syz.4.4894': attribute type 10 has an invalid length. [ 556.562104][T24113] ipvlan1: entered promiscuous mode [ 556.588335][T24113] ipvlan1: entered allmulticast mode [ 556.654442][T24113] __nla_validate_parse: 11 callbacks suppressed [ 556.654461][T24113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4895'. [ 556.821399][T24123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 556.909708][T24135] xt_hashlimit: size too large, truncated to 1048576 [ 556.937375][T24132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.964221][T24139] xt_hashlimit: size too large, truncated to 1048576 [ 557.028099][T24141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4902'. [ 557.058212][T24141] openvswitch: netlink: Flow key attr not present in new flow. [ 557.476083][T24160] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 557.512074][T24156] netlink: 'syz.4.4909': attribute type 29 has an invalid length. [ 557.645422][T24171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.785819][T24176] batadv_slave_1: entered promiscuous mode [ 557.810594][T24175] batadv_slave_1: left promiscuous mode [ 557.986575][T24189] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 558.085240][T24196] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 558.094583][T24196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.202381][T24204] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4923'. [ 558.273960][T24210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4925'. [ 558.321660][T24212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4927'. [ 558.333218][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4925'. [ 558.485398][T24223] nbd: must specify at least one socket [ 558.495179][T24223] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 558.611386][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 559.296979][T24251] netlink: 199936 bytes leftover after parsing attributes in process `syz.3.4939'. [ 559.326545][T24261] netlink: 'syz.2.4940': attribute type 1 has an invalid length. [ 559.355143][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4940'. [ 559.393050][T24261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4940'. [ 559.554458][T24268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.685667][T24271] vlan0: entered promiscuous mode [ 559.826949][T24277] netlink: 'syz.4.4948': attribute type 10 has an invalid length. [ 559.873835][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 559.905529][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 559.925403][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 559.947826][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 559.989256][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.030429][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.052798][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.060731][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.067740][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.075294][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.086901][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.095615][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.114193][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.138790][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.164648][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.186601][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.203904][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.214945][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.226078][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.251910][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.279484][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.298549][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.326524][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.347792][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.363859][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.398087][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.439073][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.450880][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.465135][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.483003][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.506209][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.529158][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.561395][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.583599][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.607792][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.633438][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.643312][T24305] netlink: 'syz.2.4959': attribute type 1 has an invalid length. [ 560.663575][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.689148][T24280] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 560.832684][T24317] netlink: 'syz.0.4962': attribute type 1 has an invalid length. [ 560.859746][T24309] bond4: (slave gretap1): making interface the new active one [ 560.869852][T24309] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 561.013102][T24326] netlink: 'syz.2.4964': attribute type 32 has an invalid length. [ 561.104595][T24326] bond5: Setting coupled_control to off (0) [ 561.127522][T24311] nbd: nbd64 already in use [ 561.391529][T23526] udevd[23526]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 561.743351][T24370] netlink: 'syz.4.4974': attribute type 12 has an invalid length. [ 562.090597][T24406] netlink: 'syz.4.4978': attribute type 1 has an invalid length. [ 562.187272][T24407] __nla_validate_parse: 14 callbacks suppressed [ 562.187293][T24407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4978'. [ 562.320664][T24379] bond11: Removing last arp target with arp_interval on [ 562.634408][T24406] bond8: entered promiscuous mode [ 562.656100][T24406] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.721492][T24411] tipc: Enabled bearer , priority 0 [ 562.753370][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4984'. [ 562.972311][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.184235][T24418] syzkaller0: entered promiscuous mode [ 563.191715][T24418] syzkaller0: entered allmulticast mode [ 563.199400][T24418] tipc: Resetting bearer [ 563.212513][T24404] tipc: Resetting bearer [ 565.176644][T24404] tipc: Disabling bearer [ 565.357876][T24462] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4990'. [ 565.441187][T24469] netlink: 'syz.3.4991': attribute type 1 has an invalid length. [ 565.477663][T24469] netlink: 'syz.3.4991': attribute type 4 has an invalid length. [ 565.503664][T24469] netlink: 9422 bytes leftover after parsing attributes in process `syz.3.4991'. [ 565.664532][T24480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4996'. [ 565.737875][T24481] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4996'. [ 565.780608][T24481] 8021q: VLANs not supported on gre0 [ 565.881380][T24495] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5000'. [ 565.984603][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5002'. [ 566.038707][T24507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5005'. [ 566.058097][T24496] openvswitch: netlink: Key type 132 is out of range max 32 [ 566.152698][T24507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5005'. [ 566.458082][T24530] netlink: 'syz.2.5011': attribute type 1 has an invalid length. [ 566.499228][T24530] netlink: 'syz.2.5011': attribute type 1 has an invalid length. [ 566.522381][T24530] netlink: 'syz.2.5011': attribute type 8 has an invalid length. [ 566.834258][T24547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.844478][T24552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.907254][T24558] x_tables: duplicate underflow at hook 1 [ 567.089713][T24562] netlink: 'syz.0.5020': attribute type 2 has an invalid length. [ 567.100747][T24562] netlink: 'syz.0.5020': attribute type 1 has an invalid length. [ 567.314311][T24580] __nla_validate_parse: 10 callbacks suppressed [ 567.314332][T24580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5025'. [ 567.558448][T24594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5030'. [ 567.605696][T24595] netlink: 'syz.0.5031': attribute type 1 has an invalid length. [ 567.648391][T24595] netlink: 'syz.0.5031': attribute type 3 has an invalid length. [ 567.657815][T24595] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5031'. [ 567.667407][T24595] NCSI netlink: No device for ifindex 813332851 [ 567.698302][T24601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5033'. [ 567.833026][T24605] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 567.883096][T24605] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 567.950779][T24614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.985932][T24603] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 568.011222][T24603] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 568.316103][T24627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5040'. [ 568.332360][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5041'. [ 568.573356][T24638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5044'. [ 568.598293][T14653] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 568.621942][T14653] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 568.648766][T14653] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 568.671962][T14653] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 569.070436][T24662] xt_hashlimit: size too large, truncated to 1048576 [ 569.117881][T24659] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 569.146537][T24659] bond3 (unregistering): Released all slaves [ 569.476383][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5054'. [ 569.483268][T24670] tipc: Started in network mode [ 569.494306][T24670] tipc: Node identity ac14140f, cluster identity 4711 [ 569.502446][ T5737] IPVS: starting estimator thread 0... [ 569.511753][T24670] tipc: Enabled bearer , priority 10 [ 569.544698][T24673] bond1: (slave ip6gretap0): Releasing active interface [ 569.596662][T24674] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 569.606030][T24675] IPVS: using max 25 ests per chain, 60000 per kthread [ 569.975027][T24688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5060'. [ 570.036971][T24694] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5063'. [ 570.199836][T24698] 0·: renamed from hsr0 (while UP) [ 570.266995][T24698] 0·: entered allmulticast mode [ 570.290397][T24698] hsr_slave_0: entered allmulticast mode [ 570.327283][T24698] hsr_slave_1: entered allmulticast mode [ 570.375117][T24698] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 570.628813][ T5737] tipc: Node number set to 2886997007 [ 570.875598][T24737] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 570.900845][T24737] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 571.006756][T24746] sctp: [Deprecated]: syz.0.5076 (pid 24746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.006756][T24746] Use struct sctp_sack_info instead [ 571.097335][T24752] netlink: 'syz.1.5078': attribute type 15 has an invalid length. [ 571.391319][T24765] netlink: 'syz.2.5083': attribute type 1 has an invalid length. [ 571.637599][T24782] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 571.743589][T24790] netlink: 'syz.0.5089': attribute type 16 has an invalid length. [ 571.757047][T24790] netlink: 'syz.0.5089': attribute type 3 has an invalid length. [ 571.786072][T24788] ±ÿ_congesti: renamed from lo [ 571.864897][T24795] netlink: 'syz.0.5091': attribute type 1 has an invalid length. [ 572.203002][T24806] netlink: 'syz.2.5096': attribute type 21 has an invalid length. [ 572.322947][T24809] __nla_validate_parse: 17 callbacks suppressed [ 572.322967][T24809] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5097'. [ 572.581541][T24822] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 572.589688][T24821] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5101'. [ 572.635678][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5102'. [ 573.043435][T24848] sctp: [Deprecated]: syz.0.5110 (pid 24848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 573.043435][T24848] Use struct sctp_sack_info instead [ 573.073319][T24848] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5110'. [ 573.111111][T24846] netlink: 'syz.0.5110': attribute type 10 has an invalid length. [ 573.130919][T24846] netlink: 'syz.0.5110': attribute type 10 has an invalid length. [ 573.434814][T24869] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 573.501286][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5117'. [ 574.007373][T24892] syzkaller0: entered promiscuous mode [ 574.033519][T24892] syzkaller0: entered allmulticast mode [ 574.149873][T24906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5127'. [ 576.917283][T24911] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 576.918013][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5134'. [ 577.353068][T24961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5143'. [ 577.390112][T24960] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 577.393881][T24961] netlink: 'syz.1.5143': attribute type 1 has an invalid length. [ 577.425866][T24963] : renamed from gretap0 (while UP) [ 577.549321][T24970] netlink: 'syz.3.5145': attribute type 1 has an invalid length. [ 577.574726][T24970] netlink: 'syz.3.5145': attribute type 1 has an invalid length. [ 577.624204][T24965] bond12: entered allmulticast mode [ 577.763314][T24978] bridge4: entered promiscuous mode [ 577.798555][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5150'. [ 577.810700][T24978] bridge4: entered allmulticast mode [ 577.837405][T24978] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 577.993207][T24984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5151'. [ 578.037248][T24994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5151'. [ 578.071759][T24984] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5151'. [ 578.351561][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 578.363571][T25010] netlink: 'syz.1.5158': attribute type 2 has an invalid length. [ 578.382400][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 578.416189][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 578.628934][T25028] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5166'. [ 578.726615][T25039] sctp: [Deprecated]: syz.4.5167 (pid 25039) Use of int in maxseg socket option. [ 578.726615][T25039] Use struct sctp_assoc_value instead [ 578.982599][T25050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5171'. [ 579.233662][T25052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.250643][T25052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.262148][T25052] bond0 (unregistering): Released all slaves [ 579.434935][T25070] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 579.527440][T25081] netlink: 'syz.3.5179': attribute type 1 has an invalid length. [ 579.555299][T25081] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 582.463115][T25083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.706361][ T30] audit: type=1107 audit(1777321088.395:6): pid=25142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 582.718147][T25148] __nla_validate_parse: 7 callbacks suppressed [ 582.718173][T25148] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5194'. [ 583.908481][T25165] tipc: Enabled bearer , priority 0 [ 583.942987][T25164] tipc: Enabling of bearer rejected, already enabled [ 583.974694][T25171] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 583.979022][T25165] syzkaller0: entered promiscuous mode [ 584.007584][T25165] syzkaller0: entered allmulticast mode [ 584.082871][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.095402][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.106975][T25164] tipc: Resetting bearer [ 584.118069][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.139167][T25163] tipc: Resetting bearer [ 584.184687][T25163] tipc: Disabling bearer [ 584.233740][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.311514][T25197] tipc: Enabled bearer , priority 11 [ 584.420389][T25201] netlink: 'syz.4.5209': attribute type 33 has an invalid length. [ 584.638322][T25207] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 584.708206][T25215] nbd: nbd0 already in use [ 584.903800][T25230] netlink: 640 bytes leftover after parsing attributes in process `syz.2.5219'. [ 584.919917][T25232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5223'. [ 584.929179][T25230] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 585.135135][T25242] veth0_macvtap: Caught tx_queue_len zero misconfig [ 585.462443][T25253] sctp: [Deprecated]: syz.1.5228 (pid 25253) Use of int in max_burst socket option. [ 585.462443][T25253] Use struct sctp_assoc_value instead [ 585.542559][T25258] sctp: [Deprecated]: syz.1.5228 (pid 25258) Use of int in max_burst socket option. [ 585.542559][T25258] Use struct sctp_assoc_value instead [ 585.976957][T25255] syzkaller0: entered promiscuous mode [ 586.017426][T25255] syzkaller0: entered allmulticast mode [ 586.438170][T25283] netlink: 'syz.4.5233': attribute type 3 has an invalid length. [ 586.459746][T25283] netlink: 'syz.4.5233': attribute type 1 has an invalid length. [ 586.467870][T25283] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5233'. [ 590.987201][T25308] sctp: [Deprecated]: syz.1.5240 (pid 25308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.987201][T25308] Use struct sctp_sack_info instead [ 591.497304][T25320] openvswitch: netlink: IP tunnel dst address not specified [ 592.250641][T25344] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5250'. [ 592.404352][T25344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5250'. [ 592.852122][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5255'. [ 592.998438][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5255'. [ 593.379129][T25377] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5258'. [ 593.413048][T25376] syzkaller1: entered promiscuous mode [ 593.441888][T25376] syzkaller1: entered allmulticast mode [ 593.547476][T25376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5261'. [ 594.410149][T25412] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5269'. [ 594.565338][T25418] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5273'. [ 594.890341][T25432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5276'. [ 594.967005][T25432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5276'. [ 595.184291][T25438] ip6_vti0: Caught tx_queue_len zero misconfig [ 595.813189][T25457] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 597.448549][T25513] netlink: 'syz.1.5296': attribute type 39 has an invalid length. [ 598.011219][T25528] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 598.056239][T25530] __nla_validate_parse: 4 callbacks suppressed [ 598.056256][T25530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5300'. [ 598.332177][T25541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5303'. [ 598.732551][T25557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5309'. [ 599.153961][T25570] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 599.213662][T25570] xt_hashlimit: size too large, truncated to 1048576 [ 599.627619][T25580] lo: entered allmulticast mode [ 599.646812][T25580] tunl0: entered allmulticast mode [ 599.660768][T25580] gre0: entered allmulticast mode [ 599.683300][T25580] gretap0: entered allmulticast mode [ 599.720039][T25580] erspan0: entered allmulticast mode [ 599.741168][T25580] ip_vti0: entered allmulticast mode [ 599.764599][T25580] ip6_vti0: entered allmulticast mode [ 599.789160][T25580] sit0: entered allmulticast mode [ 599.832052][T25580] ip6tnl0: entered allmulticast mode [ 599.841610][T25582] netlink: 'syz.1.5314': attribute type 4 has an invalid length. [ 599.852268][T25580] ip6gre0: entered allmulticast mode [ 599.898760][T25580] syz_tun: entered allmulticast mode [ 599.962675][T25580] ip6gretap0: entered allmulticast mode [ 599.991005][T25580] bridge0: port 3(dummy0) entered disabled state [ 599.997552][T25580] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.043447][T25580] bridge0: entered allmulticast mode [ 600.068198][T25580] vcan0: entered allmulticast mode [ 600.095797][T25580] bond0: entered allmulticast mode [ 600.101504][T25580] bond_slave_0: entered allmulticast mode [ 600.126232][T25580] bond_slave_1: entered allmulticast mode [ 600.202270][T25580] nlmon0: entered allmulticast mode [ 600.215039][T25580] batadv0: entered allmulticast mode [ 600.232021][T25590] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5316'. [ 600.245700][T25580] vxcan0: entered allmulticast mode [ 600.256332][T25580] vxcan1: entered allmulticast mode [ 600.265368][T25580] veth0: entered allmulticast mode [ 600.273997][T25580] veth1: entered allmulticast mode [ 600.301276][T25580] wg0: entered allmulticast mode [ 600.323071][T25580] wg1: entered allmulticast mode [ 600.354419][T25580] wg2: entered allmulticast mode [ 600.366451][T25580] veth1_to_bridge: entered allmulticast mode [ 600.380018][T25580] veth0_to_bond: entered allmulticast mode [ 600.389685][T25580] veth1_to_bond: entered allmulticast mode [ 600.405335][T25580] veth1_to_team: entered allmulticast mode [ 600.425756][T25580] team_slave_1: entered allmulticast mode [ 600.433033][T25580] veth0_to_batadv: entered allmulticast mode [ 600.445029][T25580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.456131][T25580] batadv_slave_0: entered allmulticast mode [ 600.465701][T25580] tipc: Resetting bearer [ 600.477011][T25580] xfrm0: entered allmulticast mode [ 600.493371][T25580] veth0_to_hsr: entered allmulticast mode [ 600.514950][T25580] hsr_slave_0: entered allmulticast mode [ 600.524558][T25580] veth1_to_hsr: entered allmulticast mode [ 600.534490][T25580] hsr_slave_1: entered allmulticast mode [ 600.543953][T25580] hsr0: entered allmulticast mode [ 600.554472][T25580] veth1_virt_wifi: entered allmulticast mode [ 600.569669][T25580] veth0_virt_wifi: entered allmulticast mode [ 600.578787][T25580] virt_wifi0: entered allmulticast mode [ 600.584716][T25580] veth1_vlan: entered allmulticast mode [ 600.598126][T25580] veth0_vlan: entered allmulticast mode [ 600.614142][T25580] vlan0: left promiscuous mode [ 600.619763][T25580] vlan0: entered allmulticast mode [ 600.625105][T25580] vlan1: entered allmulticast mode [ 600.631825][T25580] macvlan0: entered allmulticast mode [ 600.648269][T25580] macvlan1: entered allmulticast mode [ 600.659648][T25580] ipvlan0: entered allmulticast mode [ 600.670602][T25580] ipvlan1: entered allmulticast mode [ 600.676413][T25580] veth1_macvtap: entered allmulticast mode [ 600.688282][T25580] veth0_macvtap: entered allmulticast mode [ 600.723921][T25580] macvtap0: entered allmulticast mode [ 600.733008][T25580] macsec0: entered allmulticast mode [ 600.747572][T25580] geneve0: entered allmulticast mode [ 600.763005][T25580] geneve1: entered allmulticast mode [ 600.778441][T25580] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 600.803830][T25580] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 600.835498][T25580] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 600.865764][T25580] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 600.877007][T25580] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 600.885827][T25580] bridge1: entered allmulticast mode [ 600.892844][T25580] veth2: entered allmulticast mode [ 600.902818][T25580] veth3: left promiscuous mode [ 600.911980][T25580] bond1: entered allmulticast mode [ 600.917187][T25580] xfrm1: entered allmulticast mode [ 600.944959][T25580] : entered allmulticast mode [ 600.953074][T25580] ipvlan3: entered allmulticast mode [ 600.959793][T25580] macsec1: left promiscuous mode [ 600.964993][T25580] macsec1: entered allmulticast mode [ 600.975696][T25580] veth4: entered allmulticast mode [ 600.982500][T25580] veth5: entered allmulticast mode [ 601.001202][T25580] geneve2: left promiscuous mode [ 601.006278][T25580] geneve2: entered allmulticast mode [ 601.014126][T25580] macvlan2: entered allmulticast mode [ 601.024560][T25580] ip6tnl1: entered allmulticast mode [ 601.035042][T25580] bridge2: entered allmulticast mode [ 601.043911][T25580] bond2: entered allmulticast mode [ 601.050632][T25580] ip6tnl2: entered allmulticast mode [ 601.056223][T25580] mac80211_hwsim hwsim47 pim6reg0: entered allmulticast mode [ 601.065460][T25580] bridge3: entered allmulticast mode [ 601.074059][T25580] ip6_vti1: entered allmulticast mode [ 601.079863][T25580] bridge4: entered allmulticast mode [ 601.090417][T25580] bond3: left promiscuous mode [ 601.095505][T25580] bridge5: left promiscuous mode [ 601.101953][T25580] bond3: entered allmulticast mode [ 601.107294][T25580] bridge5: entered allmulticast mode [ 601.117092][T25580] : entered allmulticast mode [ 601.123376][T25580] bridge6: entered allmulticast mode [ 601.129429][T25580] syztnl2: entered allmulticast mode [ 601.135064][T25580] veth0.1: entered allmulticast mode [ 601.146911][T25580] bridge7: entered allmulticast mode [ 601.159581][T25580] bond4: entered allmulticast mode [ 601.164744][T25580] gretap1: entered allmulticast mode [ 601.177213][T25580] erspan1: entered allmulticast mode [ 601.183495][T25580] bond5: entered allmulticast mode [ 601.192019][T25580] bridge8: entered allmulticast mode [ 601.200887][T25580] bond6: entered allmulticast mode [ 601.206165][T25580] bridge9: entered allmulticast mode [ 601.229929][T14653] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.273986][T14653] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.304722][T14653] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 47471 - 0 [ 601.380950][T14653] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.437741][T14653] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.497289][T14653] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 47471 - 0 [ 601.576991][T14653] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.633089][T14653] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.673570][T14653] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 47471 - 0 [ 601.714289][T25607] netlink: 'syz.3.5319': attribute type 10 has an invalid length. [ 601.743000][T14653] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.792347][T14653] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.835554][T14653] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 47471 - 0 [ 602.716882][T25627] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5326'. [ 602.744632][T25627] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5326'. [ 602.765093][T25627] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5326'. [ 603.112593][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5330'. [ 603.602669][T25654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5333'. [ 604.094633][T25667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5336'. [ 604.511866][T25680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5340'. [ 604.528253][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5339'. [ 605.612194][T25693] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 605.791948][T25693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5344'. [ 606.169153][T25709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5349'. [ 606.242835][T25713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5351'. [ 606.300679][T25710] vlan0: entered promiscuous mode [ 606.359197][T25710] vlan0: left allmulticast mode [ 606.393394][T25719] netlink: 'syz.0.5352': attribute type 30 has an invalid length. [ 606.523399][T25723] sctp: [Deprecated]: syz.2.5354 (pid 25723) Use of int in maxseg socket option. [ 606.523399][T25723] Use struct sctp_assoc_value instead [ 606.655714][T25719] bond3: option arp_missed_max: invalid value (0) [ 606.681720][T25719] bond3: option arp_missed_max: allowed values 1 - 255 [ 606.733178][T25719] bond3 (unregistering): Released all slaves [ 606.740192][T25734] netlink: 'syz.4.5353': attribute type 1 has an invalid length. [ 607.076310][T25734] bond9: entered promiscuous mode [ 607.105045][T25734] 8021q: adding VLAN 0 to HW filter on device bond9 [ 607.281246][T25736] bond9: (slave bridge4): making interface the new active one [ 607.346717][T25736] bridge4: entered promiscuous mode [ 607.513702][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5362'. [ 607.542520][T25736] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 607.864999][T25771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5364'. [ 607.904930][T25773] FAULT_INJECTION: forcing a failure. [ 607.904930][T25773] name failslab, interval 1, probability 0, space 0, times 0 [ 607.969145][T25773] CPU: 1 UID: 0 PID: 25773 Comm: syz.0.5365 Not tainted syzkaller #0 PREEMPT(full) [ 607.969169][T25773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.969180][T25773] Call Trace: [ 607.969188][T25773] [ 607.969196][T25773] dump_stack_lvl+0xe8/0x150 [ 607.969236][T25773] should_fail_ex+0x412/0x560 [ 607.969272][T25773] should_failslab+0xa8/0x100 [ 607.969302][T25773] __kmalloc_noprof+0xe8/0x760 [ 607.969329][T25773] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 607.969361][T25773] tomoyo_realpath_from_path+0xe3/0x5d0 [ 607.969389][T25773] ? tomoyo_domain+0xd7/0x130 [ 607.969420][T25773] ? tomoyo_path_number_perm+0x219/0x630 [ 607.969442][T25773] tomoyo_path_number_perm+0x246/0x630 [ 607.969466][T25773] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 607.969485][T25773] ? __lock_acquire+0x6b5/0x2cf0 [ 607.969521][T25773] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 607.969582][T25773] ? __fget_files+0x2a/0x420 [ 607.969609][T25773] ? __fget_files+0x2a/0x420 [ 607.969635][T25773] ? __fget_files+0x3a0/0x420 [ 607.969657][T25773] ? __fget_files+0x2a/0x420 [ 607.969685][T25773] security_file_ioctl+0xc3/0x2a0 [ 607.969709][T25773] __se_sys_ioctl+0x47/0x170 [ 607.969738][T25773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.969760][T25773] do_syscall_64+0x15f/0xf80 [ 607.969781][T25773] ? trace_irq_disable+0x3b/0x140 [ 607.969810][T25773] ? clear_bhb_loop+0x40/0x90 [ 607.969836][T25773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.969855][T25773] RIP: 0033:0x7f998b79cdd9 [ 607.969874][T25773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.969890][T25773] RSP: 002b:00007f998c61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.969911][T25773] RAX: ffffffffffffffda RBX: 00007f998ba15fa0 RCX: 00007f998b79cdd9 [ 607.969926][T25773] RDX: 0000200000000400 RSI: 00000000400448c8 RDI: 0000000000000005 [ 607.969938][T25773] RBP: 00007f998c61e090 R08: 0000000000000000 R09: 0000000000000000 [ 607.969950][T25773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.969962][T25773] R13: 00007f998ba16038 R14: 00007f998ba15fa0 R15: 00007ffdc1e2a638 [ 607.969995][T25773] [ 607.970038][T25773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 608.225770][T25776] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5366'. [ 608.254165][T25777] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5366'. [ 609.064548][T25793] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5371'. [ 609.091527][T25793] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 609.383414][T25803] netlink: 'syz.4.5375': attribute type 10 has an invalid length. [ 609.463182][T25803] team0: Port device dummy0 added [ 609.532328][T25786] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 609.772879][T25816] netlink: 294 bytes leftover after parsing attributes in process `syz.4.5380'. [ 609.783262][T25815] netlink: 294 bytes leftover after parsing attributes in process `syz.4.5380'. [ 609.797576][T25815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.825846][T25816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.058519][T25831] netlink: 'syz.0.5381': attribute type 8 has an invalid length. [ 610.075581][T25828] netlink: 'syz.0.5381': attribute type 8 has an invalid length. [ 610.111132][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5381'. [ 610.131258][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5381'. [ 610.405312][T25838] openvswitch: netlink: IPv6 tunnel dst address is zero [ 610.506634][T25834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.705622][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5387'. [ 610.783759][T25848] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5387'. [ 610.926381][T25853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5389'. [ 611.482130][T25871] netlink: 'syz.2.5394': attribute type 1 has an invalid length. [ 611.501128][T25876] netlink: 'syz.0.5397': attribute type 3 has an invalid length. [ 611.674793][T25878] macvlan3: entered promiscuous mode [ 611.685380][T25878] macvlan3: entered allmulticast mode [ 611.701960][T25878] bond8: entered promiscuous mode [ 611.717514][T25878] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 611.799775][T25878] bond8: left promiscuous mode [ 612.852780][T25920] syzkaller0: entered promiscuous mode [ 612.867731][T25920] syzkaller0: entered allmulticast mode [ 613.461766][T25942] xt_limit: Overflow, try lower: 271964/0 [ 614.270482][T25965] netlink: 'syz.3.5419': attribute type 7 has an invalid length. [ 614.278697][T25965] __nla_validate_parse: 1 callbacks suppressed [ 614.278712][T25965] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5419'. [ 614.297967][T25965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5419'. [ 614.310668][T25965] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 615.185096][T25903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 618.567453][ C1] sched: DL replenish lagged too much [ 624.773721][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.243415][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 734.528229][T18664] Bluetooth: hci2: command 0x0405 tx timeout [ 748.031381][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.820701][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.578520][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 810.585595][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25952/1:b..l [ 810.594097][ C1] rcu: (detected by 1, t=10503 jiffies, g=134189, q=1467 ncpus=2) [ 810.602008][ C1] task:syz.1.5414 state:R running task stack:26776 pid:25952 tgid:25948 ppid:16976 task_flags:0x400040 flags:0x00080003 [ 810.616278][ C1] Call Trace: [ 810.619620][ C1] [ 810.622581][ C1] __schedule+0x17b4/0x5680 [ 810.627160][ C1] ? __pfx___schedule+0x10/0x10 [ 810.632044][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 810.637452][ C1] preempt_schedule_common+0x82/0xd0 [ 810.642757][ C1] ? nl80211_netlink_notify+0x6f4/0x840 [ 810.648325][ C1] preempt_schedule_thunk+0x16/0x30 [ 810.653557][ C1] __local_bh_enable_ip+0xe1/0x130 [ 810.658692][ C1] nl80211_netlink_notify+0x6f4/0x840 [ 810.664097][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 810.669595][ C1] notifier_call_chain+0x1ad/0x3d0 [ 810.674739][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 810.680486][ C1] netlink_release+0x123b/0x1ad0 [ 810.685455][ C1] ? netlink_release+0x101/0x1ad0 [ 810.690512][ C1] ? __pfx_netlink_release+0x10/0x10 [ 810.695827][ C1] ? down_write+0x16d/0x200 [ 810.700358][ C1] ? __pfx_down_write+0x10/0x10 [ 810.705245][ C1] sock_close+0xc3/0x240 [ 810.709530][ C1] ? __pfx_sock_close+0x10/0x10 [ 810.714404][ C1] __fput+0x44f/0xa60 [ 810.718419][ C1] task_work_run+0x1d9/0x270 [ 810.723034][ C1] ? __pfx_task_work_run+0x10/0x10 [ 810.728170][ C1] ? __fput_deferred+0x216/0x380 [ 810.733129][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 810.738441][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.743414][ C1] get_signal+0x11eb/0x1330 [ 810.747936][ C1] ? __sys_sendto+0x598/0x710 [ 810.752647][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 810.758560][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 810.764749][ C1] ? exc_page_fault+0x6a/0xc0 [ 810.769468][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.775560][ C1] exit_to_user_mode_loop+0x86/0x480 [ 810.780872][ C1] ? rcu_is_watching+0x15/0xb0 [ 810.785659][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.791745][ C1] do_syscall_64+0x33e/0xf80 [ 810.796356][ C1] ? trace_irq_disable+0x3b/0x140 [ 810.801408][ C1] ? clear_bhb_loop+0x40/0x90 [ 810.806105][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.812015][ C1] RIP: 0033:0x7fa8c1f5d60e [ 810.816446][ C1] RSP: 002b:00007fa8c2f09e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 810.824892][ C1] RAX: 0000000000000020 RBX: 00007fa8c2f0b6c0 RCX: 00007fa8c1f5d60e [ 810.832916][ C1] RDX: 0000000000000020 RSI: 00007fa8c2f0a000 RDI: 0000000000000006 [ 810.840907][ C1] RBP: 0000000000000000 R08: 00007fa8c2f09f04 R09: 000000000000000c [ 810.848896][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 810.856893][ C1] R13: 00007fa8c2f09f58 R14: 00007fa8c2f0a000 R15: 0000000000000000 [ 810.864896][ C1] [ 810.867932][ C1] rcu: rcu_preempt kthread starved for 932 jiffies! g134189 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 810.879062][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 810.889046][ C1] rcu: RCU grace-period kthread stack dump: [ 810.894947][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 810.908459][ C1] Call Trace: [ 810.911754][ C1] [ 810.914700][ C1] __schedule+0x17b4/0x5680 [ 810.919218][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 810.924208][ C1] ? __pfx___schedule+0x10/0x10 [ 810.929083][ C1] ? schedule+0x90/0x360 [ 810.933351][ C1] schedule+0x164/0x360 [ 810.937536][ C1] schedule_timeout+0x158/0x2c0 [ 810.942416][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 810.947818][ C1] ? __pfx_process_timeout+0x10/0x10 [ 810.953137][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 810.958963][ C1] ? prepare_to_swait_event+0x340/0x370 [ 810.964542][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 810.969437][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 810.975614][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 810.980925][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 810.986152][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 810.991985][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 810.996608][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 811.001822][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 811.007650][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 811.012612][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 811.017673][ C1] kthread+0x388/0x470 [ 811.021761][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 811.026979][ C1] ? __pfx_kthread+0x10/0x10 [ 811.031620][ C1] ret_from_fork+0x514/0xb70 [ 811.036230][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 811.041357][ C1] ? __switch_to+0xc79/0x1410 [ 811.046066][ C1] ? __pfx_kthread+0x10/0x10 [ 811.050684][ C1] ret_from_fork_asm+0x1a/0x30 [ 811.055499][ C1] [ 811.058541][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 811.064884][ C1] Sending NMI from CPU 1 to CPUs 0: [ 811.070106][ C0] NMI backtrace for cpu 0 [ 811.070121][ C0] CPU: 0 UID: 0 PID: 6312 Comm: ipvs-e:4:0 Not tainted syzkaller #0 PREEMPT(full) [ 811.070145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.070155][ C0] RIP: 0010:lock_release+0x46/0x3c0 [ 811.070174][ C0] Code: e0 00 97 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 e3 00 97 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 8c c7 8e 0e 73 0d 45 f7 08 00 84 c0 0f 84 94 02 00 00 83 3d 46 fa 8e 0e 00 0f 84 [ 811.070187][ C0] RSP: 0018:ffffc90000007590 EFLAGS: 00000293 [ 811.070200][ C0] RAX: 0000000000000000 RBX: ffffffff916c6c01 RCX: 0000000080000101 [ 811.070212][ C0] RDX: ffffc90000007701 RSI: ffffffff8176e256 RDI: ffffffff8e95cd60 [ 811.070223][ C0] RBP: dffffc0000000000 R08: ffffc9000d6b7b50 R09: 0000000000000000 [ 811.070234][ C0] R10: ffffc90000007718 R11: fffff52000000ee5 R12: ffffc9000d6b7b60 [ 811.070245][ C0] R13: ffffffff8176e256 R14: ffffffff8e95cd60 R15: ffffffff8176e256 [ 811.070257][ C0] FS: 0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 811.070269][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.070279][ C0] CR2: 00007fe26bd94ff8 CR3: 000000007f48e000 CR4: 00000000003526f0 [ 811.070292][ C0] Call Trace: [ 811.070298][ C0] [ 811.070304][ C0] ? deref_stack_reg+0x19f/0x230 [ 811.070326][ C0] ? unwind_next_frame+0xa6/0x2550 [ 811.070344][ C0] unwind_next_frame+0x1bba/0x2550 [ 811.070366][ C0] ? unwind_next_frame+0xa6/0x2550 [ 811.070384][ C0] ? schedule_timeout+0x146/0x2c0 [ 811.070408][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 811.070431][ C0] arch_stack_walk+0x11b/0x150 [ 811.070452][ C0] ? ip_vs_estimation_kthread+0x2a87/0x39d0 [ 811.070474][ C0] stack_trace_save+0xa9/0x100 [ 811.070495][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 811.070518][ C0] ? stack_trace_save+0xa9/0x100 [ 811.070541][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 811.070558][ C0] kasan_save_track+0x3e/0x80 [ 811.070577][ C0] ? kasan_save_track+0x3e/0x80 [ 811.070596][ C0] ? kasan_save_free_info+0x46/0x50 [ 811.070612][ C0] ? __kasan_slab_free+0x5c/0x80 [ 811.070632][ C0] ? kfree+0x1c5/0x640 [ 811.070649][ C0] ? skb_release_data+0x828/0xa60 [ 811.070666][ C0] ? __kfree_skb+0x5d/0x210 [ 811.070682][ C0] ? can_receive+0x366/0x440 [ 811.070704][ C0] ? can_rcv+0x1f9/0x330 [ 811.070715][ C0] ? process_backlog+0xc66/0x1950 [ 811.070730][ C0] ? __napi_poll+0xae/0x340 [ 811.070741][ C0] ? net_rx_action+0x627/0xf70 [ 811.070756][ C0] ? handle_softirqs+0x22a/0x840 [ 811.070770][ C0] ? __irq_exit_rcu+0xca/0x220 [ 811.070789][ C0] ? irq_exit_rcu+0x9/0x30 [ 811.070803][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 811.070817][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 811.070834][ C0] ? __pfx_debug_object_init_on_stack+0x10/0x10 [ 811.070851][ C0] ? timer_init_key_on_stack+0x3c/0x110 [ 811.070873][ C0] ? schedule_timeout+0x146/0x2c0 [ 811.070914][ C0] kasan_save_free_info+0x46/0x50 [ 811.070930][ C0] __kasan_slab_free+0x5c/0x80 [ 811.070951][ C0] kfree+0x1c5/0x640 [ 811.070968][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 811.070982][ C0] ? skb_release_data+0x828/0xa60 [ 811.071003][ C0] skb_release_data+0x828/0xa60 [ 811.071024][ C0] ? can_receive+0x16c/0x440 [ 811.071048][ C0] __kfree_skb+0x5d/0x210 [ 811.071065][ C0] can_receive+0x366/0x440 [ 811.071090][ C0] can_rcv+0x1f9/0x330 [ 811.071102][ C0] ? __pfx_can_rcv+0x10/0x10 [ 811.071114][ C0] ? process_backlog+0x3eb/0x1950 [ 811.071128][ C0] process_backlog+0xc66/0x1950 [ 811.071154][ C0] __napi_poll+0xae/0x340 [ 811.071166][ C0] ? skb_defer_free_flush+0x233/0x260 [ 811.071181][ C0] net_rx_action+0x627/0xf70 [ 811.071196][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 811.071217][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 811.071247][ C0] handle_softirqs+0x22a/0x840 [ 811.071264][ C0] ? __irq_exit_rcu+0xca/0x220 [ 811.071283][ C0] __irq_exit_rcu+0xca/0x220 [ 811.071298][ C0] irq_exit_rcu+0x9/0x30 [ 811.071311][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 811.071327][ C0] [ 811.071331][ C0] [ 811.071337][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 811.071353][ C0] RIP: 0010:debug_object_init_on_stack+0x0/0x20 [ 811.071371][ C0] Code: 11 8f 48 89 ee e8 70 85 32 00 e9 e5 fd ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 80 3d cd 76 74 0b 00 74 06 c3 cc cc cc cc cc ba 01 00 [ 811.071384][ C0] RSP: 0018:ffffc9000d6b79f8 EFLAGS: 00000293 [ 811.071395][ C0] RAX: ffffffff81b19fbd RBX: dffffc0000000000 RCX: ffff8880278e0000 [ 811.071407][ C0] RDX: 0000000000000000 RSI: ffffffff8bcf3a20 RDI: ffffc9000d6b7a80 [ 811.071417][ C0] RBP: 0000000000000000 R08: ffffffff9a487540 R09: 0000000000000000 [ 811.071427][ C0] R10: ffffc9000d6b7a80 R11: fffff52001ad6f5a R12: ffffffff81b2ba50 [ 811.071438][ C0] R13: ffffc9000d6b7a80 R14: ffffffff8bcf5960 R15: ffffc9000d6b7a80 [ 811.071450][ C0] ? __pfx_process_timeout+0x10/0x10 [ 811.071473][ C0] ? timer_init_key_on_stack+0x2d/0x110 [ 811.071500][ C0] timer_init_key_on_stack+0x3c/0x110 [ 811.071524][ C0] schedule_timeout+0x146/0x2c0 [ 811.071547][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 811.071579][ C0] ip_vs_estimation_kthread+0x2a87/0x39d0 [ 811.071596][ C0] ? ip_vs_estimation_kthread+0x28d7/0x39d0 [ 811.071631][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 811.071649][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 811.071678][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 811.071700][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 811.071721][ C0] kthread+0x388/0x470 [ 811.071740][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 811.071757][ C0] ? __pfx_kthread+0x10/0x10 [ 811.071786][ C0] ret_from_fork+0x514/0xb70 [ 811.071803][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 811.071818][ C0] ? __switch_to+0xc79/0x1410 [ 811.071841][ C0] ? __pfx_kthread+0x10/0x10 [ 811.071861][ C0] ret_from_fork_asm+0x1a/0x30 [ 811.071887][ C0]